Troy Hunt

MARCH 18, 2024

What it boils down to is in August 2021, someone with a proven history of breaching large organisations posted what they claimed were 70 million AT&T records to a popular hacking forum and asked for a very large amount of money should anyone wish to purchase the data.

Data breaches 342

Data breaches Encryption Identity Theft InfoSec 342

Troy Hunt

NOVEMBER 13, 2024

Additionally, the threat actor with… pic.twitter.com/tqsyb8plPG — HackManac (@H4ckManac) February 28, 2024 When Jason found his email address and other info in this corpus, he had the same question so many others do when their data turns up in a place they've never heard of before - how?

Data breaches 282

Data breaches Passwords B2B Technology 282

Schneier on Security

OCTOBER 6, 2021

No details about the hack. It could be a national intelligence service looking for information. I’ve never heard of the company. It could be nothing.

Hacking 66

Hacking Telecommunications Mobile Data breaches 66

Krebs on Security

AUGUST 16, 2021

They claim one of those databases holds the name, date of birth, SSN, drivers license information, plaintext security PIN, address and phone number of 36 million T-Mobile customers in the United States — all going back to the mid-1990s. The hacker(s) claim the purloined data also includes IMSI and IMEI data for 36 million customers.

Mobile 348

Mobile Data breaches Accountability Wireless 348

Krebs on Security

JUNE 15, 2024

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider , a cybercrime group suspected of hacking into Twilio , LastPass , DoorDash , Mailchimp , and nearly 130 other organizations over the past two years. man arrested was a SIM-swapper who went by the alias “ Tyler.”

Hacking 311

Hacking Phishing Cybercrime Passwords 311

Krebs on Security

DECEMBER 2, 2020

For at least the third time in its existence, OGUsers — a forum overrun with people looking to buy, sell and trade access to compromised social media accounts — has been hacked. An offer by the apparent hackers of OGUsers, offering to remove account information from the eventual database leak in exchange for payment.

Accountability 326

Accountability Hacking Scams Media 326

Security Affairs

NOVEMBER 11, 2024

Amazon disclosed a data breach exposing employee data, with information allegedly stolen in the May 2023 MOVEit attacks. Amazon disclosed a data breach that exposed employee information after data was allegedly stolen during the May 2023 MOVEit attacks.

Data breaches 132

Data breaches Hacking Ransomware Technology 132

Security Affairs

OCTOBER 11, 2024

The Internet Archive disclosed a data breach, the security incident impacted more than 31 million users of its “The Wayback Machine.” Starting from Wednesday, the website archive.org was displaying a message informing visitors that it was hacked. Internet Archive hacked.

Data breaches 127

Data breaches Internet Internet DDOS 127

Krebs on Security

DECEMBER 13, 2022

Federal Bureau of Investigation (FBI) to build cyber and physical threat information sharing partnerships with the private sector, this week saw its database of contact information on more than 80,000 members go up for sale on an English-language cybercrime forum. InfraGard , a program run by the U.S.

Hacking 363

Hacking Energy and Utilities Cybercrime Accountability 363

Security Affairs

APRIL 1, 2024

The OWASP Foundation disclosed a data breach that impacted some members due to a misconfiguration of an old Wiki web server. The OWASP Foundation has disclosed a data breach that impacted some of its members. No joke, we did have a data breach in late March involving the resumes of our earliest members.

Data breaches 144

Data breaches Mobile Software Media 144

Troy Hunt

JUNE 30, 2024

Last week, I wrote about The State of Data Breaches and got loads of feedback. Let me explain: Hackers This is where most data breaches begin, with someone illegally accessing a protected system and snagging the data. It's awkward, talking to the first party responsible for the breach.

Data breaches 251

Data breaches Government InfoSec Passwords 251

Security Affairs

JULY 24, 2024

A cyber attack against Michigan Medicine resulted in the compromise of the personal and health information of approximately 57,000 patients. The academic medical center of the University of Michigan, Michigan Medicine, suffered a data breach that impacted 56953 patients. Michigan Medicine notified patients of the data breach.

Data breaches 145

Data breaches Insurance Accountability Banking 145

Security Affairs

OCTOBER 25, 2024

The Change Healthcare data breach in the February 2024 impacted over 100 million, the largest-ever healthcare data breach in the US. UnitedHealth Group announced that the data breach suffered by Change Healthcare in February 2024 impacted more than 100 million individuals.

Data breaches 134

Data breaches Healthcare Cybercrime Insurance 134

Security Affairs

OCTOBER 7, 2024

Universal Music Group notified hundreds of individuals about a data breach compromising their personal information. Universal Music Group is notifying 680 individuals about a data breach that compromised their personal information, including their Social Security number.

Data breaches 138

Data breaches Identity Theft Hacking Ransomware 138

Security Affairs

OCTOBER 14, 2024

US-based financial services company Fidelity Investments warns 77,000 individuals of a data breach that exposed their personal information. based financial services company Fidelity Investments is notifying 77,099 individuals that their personal information was compromised in an August cyberattack.

Data breaches 138

Data breaches Financial Services Accountability Hacking 138

Security Affairs

AUGUST 17, 2024

Background check service National Public Data confirms a data breach that exploded millions of social security numbers and other sensitive information. “There appears to have been a data security incident that may have involved some of your personal information.

Data breaches 144

Data breaches Hacking Accountability Cybersecurity 144

Security Affairs

OCTOBER 18, 2024

Omni Family Health disclosed a data breach affecting nearly 470,000 current and former patients and employees. Omni Family Health is notifying nearly 470,000 individuals that their personal information was compromised in a data breach resulting from a cyberattack that occurred earlier this year.

Data breaches 142

Data breaches Healthcare Insurance Engineering 142

Security Affairs

JULY 13, 2024

The American drugstore chain Rite Aid Corporation disclosed a data breach following the cyber attack that hit the company in June. The American drugstore chain giant Rite Aid suffered a data breach following a cyberattack in June conducted by the RansomHub ransomware group. 148 in the Fortune 500 in 2022.

Data breaches 142

Data breaches Ransomware Hacking Insurance 142

Security Affairs

JULY 17, 2024

The world’s largest recreational boat and yacht retailer MarineMax, disclosed a data breach following a cyber attack. The world’s largest recreational boat and yacht retailer MarineMax disclosed a data breach that impacted over 123,000 individuals. ” reads a FORM 8-K filed with SEC.

Data breaches 136

Data breaches Retail Cyber Attacks Ransomware 136

Security Affairs

APRIL 8, 2024

Greylock McKinnon Associates, a service provider for the Department of Justice, suffered a data breach that exposed data of 341650 people. GMA disclosed a data breach that impacted medicare and other information belonging to 5465 people. ” reads the data breach notification.

Data breaches 142

Data breaches Identity Theft Insurance Hacking 142

Schneier on Security

JUNE 28, 2023

The stalkerware company LetMeSpy has been hacked : TechCrunch reviewed the leaked data, which included years of victims’ call logs and text messages dating back to 2013. The database we reviewed contained current records on at least 13,000 compromised devices, though some of the devices shared little to no data with LetMeSpy.

Hacking 250

Hacking Spyware Accountability Data breaches 250

Security Affairs

OCTOBER 7, 2024

238,000 Comcast customers were impacted by the FBCS data breach following the February ransomware attack, Comcast reports. Telecommunications giant Comcast is notifying approximately 238,000 customers impacted by the Financial Business and Consumer Solutions (FBCS) data breach. reads the notice of data breach.

Data breaches 137

Data breaches Telecommunications Ransomware Accountability 137

Security Affairs

APRIL 26, 2024

Media reported [ 1 , 2 ] that the company is notifying millions of current and former members of a data breach. TechCrunch reported that the company confirmed it shared patients’ information with third-party organizations, including Google, Microsoft and X, for advertising purposes. million residents.

Data breaches 142

Data breaches Healthcare Advertising Mobile 142

Krebs on Security

FEBRUARY 16, 2022

A network intrusion at the International Committee for the Red Cross (ICRC) in January led to the theft of personal information on more than 500,000 people receiving assistance from the group. ” RaidForums member “unindicted” aka Sheriff selling access to the International Red Cross and Red Crescent Movement data.

Hacking 281

Hacking Ransomware Media Accountability 281

Security Affairs

APRIL 29, 2024

Financial Business and Consumer Solutions (FBCS) suffered a data breach that exposed information 2 million individuals. Debt collection agency Financial Business and Consumer Solutions (FBCS) disclosed a data breach that may have impacted 1,955,385 individuals. ” reads the notice of data breach.

Data breaches 139

Data breaches Hacking Accountability Cybercrime 139

Security Affairs

MAY 19, 2024

WebTPA, a third-party administrator that provides healthcare management and administrative services, disclosed a data breach. The US company disclosed a data breach that impacted almost 2.5 The investigation revealed that an unauthorized actor may have obtained personal information between April 18 and April 23, 2023. .

Data breaches 141

Data breaches Healthcare Insurance Identity Theft 141

Security Affairs

SEPTEMBER 12, 2024

Fortinet disclosed a data breach after a threat actor claimed the theft of 440GB of files from the company’s Microsoft Sharepoint server. Last month, the Australian Home Affairs department discovered the data breach involving Fortinet, although it occurred earlier. the spokesman added.

Data breaches 143

Data breaches Cybersecurity Cybercrime Hacking 143

Security Affairs

MAY 1, 2024

Panda Restaurant Group disclosed a data breach that occurred in March, resulting in the theft of associates’ personal information. Panda Restaurant Group disclosed a data breach that occurred in March, resulting in the theft of personal information belonging to its associates.

Data breaches 139

Data breaches Identity Theft Hacking Accountability 139

Security Affairs

SEPTEMBER 6, 2024

Car rental giant Avis disclosed a data breach that impacted one of its business applications in August compromising customers’ personal information. Car rental company Avis notified customers impacted in an Augus data breach. ” reads the data breach notification letter sent to the impacted individuals.

Data breaches 136

Data breaches Identity Theft Cybersecurity Hacking 136

Security Affairs

APRIL 2, 2024

Threat actors claimed the hack of the PandaBuy online shopping platform and leaked data belonging to more than 1.3 At least two threat actors claimed the hack of the PandaBuy online shopping platform and leaked data of more than 1.3 The website was breached by @ Sanggiero and @ IntelBroker.”

Data breaches 143

Data breaches Cybercrime Hacking Information Security 143

Krebs on Security

MARCH 14, 2023

men have been charged with hacking into a U.S. Both are alleged to be part of a larger criminal organization that specializes in using fake emergency data requests from compromised police and government email accounts to publicly threaten and extort their victims. .” federal government portal without authorization.

Hacking 289

Hacking Government Media Accountability 289

Security Affairs

APRIL 29, 2024

The Los Angeles County Department of Health Services reported a data breach that exposed thousands of patients’ personal and health information. The Los Angeles County Department of Health Services disclosed a data breach that impacted thousands of patients.

Data breaches 143

Data breaches Phishing Hacking Cybercrime 143

Security Affairs

OCTOBER 8, 2024

MoneyGram disclosed a data breach following a cyberattack in September, during which threat actors stole customer data. On September 22, the company informed its customers that it was experiencing a network outage impacting connectivity to several of its systems.

Data breaches 132

Data breaches Government Banking Hacking 132

Security Affairs

MAY 27, 2024

Prescription service firm Sav-Rx disclosed a data breach that potentially impacted over 2.8 Prescription service company Sav-Rx disclosed a data breach after 2023 cyberattack. The company is notifying 2,812,336 individuals impacted by the security breach in the United States. million people in the United States.

Data breaches 139

Data breaches Identity Theft Insurance Technology 139

Security Affairs

JULY 2, 2024

million individuals were affected by the data breach it suffered in February 2024. The insurance company Prudential Financial confirmed that the data breach it suffered in February 2024 affected over 2.5 Prudential Financial confirmed that more than 2.5 million individuals.

Data breaches 143

Data breaches Insurance Cyber Attacks Ransomware 143

Security Affairs

MARCH 30, 2024

AT&T confirmed that a data breach impacted 73 million current and former customers after its data were leaked on a cybercrime forum. In March 2024, more than 70,000,000 records from an unspecified division of AT&T were leaked onto Breached forum, vx-underground researchers reported. It was leaked online today.”

Data breaches 145

Data breaches Telecommunications Cybercrime Hacking 145

Security Affairs

DECEMBER 6, 2024

Atrium Health disclosed a data breach affecting 585,000 individuals to the HHS, potentially linked to the use of online tracking tools. Healthcare company Atrium Health disclosed a data breach that impacted 585,000 individuals. The company notified the US Department of Health and Human Services (HHS). added Atrium Health.

Data breaches 116

Data breaches Identity Theft Accountability Technology 116