Troy Hunt

JANUARY 29, 2024

That's the analogy I often use to describe the data breach "personal stash" ecosystem, but with one key difference: if you trade a baseball card then you no longer have the original card, but if you trade a data breach which is merely a digital file, it replicates.

Data breaches 308

Data breaches Passwords Advertising Personal Security 308

ZoneAlarm

FEBRUARY 23, 2025

Mars Hydro, a Chinese company that makes IoT devices like LED lights and hydroponics equipment, recently suffered a massive data breach, exposing approximately 2.7 This breach has raised serious concerns about the security of internet-connected devices and the potential risks for consumers. billion records.

Data breaches 85

Data breaches IoT Internet Internet 85

The Last Watchdog

JANUARY 18, 2022

This conclusion is derived from an analysis of data taken from our data breach detection tool, Surfshark Alert , which comprises publicly available breached data sets to inform our users of potential threats. Data associations to specific breach instances are only stipulated. million). •Q1

Data breaches 279

Data breaches VPN Internet Internet 279

Troy Hunt

MARCH 18, 2024

The Dropbox and LinkedIn breaches, for example, occurred in 2012 before being broadly distributed in 2016 and just like those incidents, the alleged AT&T data is now in very broad circulation. It is undoubtedly in the hands of thousands of internet randos.

Data breaches 356

Data breaches Encryption Identity Theft InfoSec 356

Krebs on Security

AUGUST 16, 2021

The IntelSecrets nicknames correspond to an individual who has claimed responsibility for modifying the source code for the Mirai “Internet of Things” botnet to create a variant known as “ Satori ,” and supplying it to others who used it for criminal gain and were later caught and prosecuted.

Mobile 343

Mobile Data breaches Accountability Wireless 343

Troy Hunt

JANUARY 16, 2019

Many people will land on this page after learning that their email address has appeared in a data breach I've called "Collection #1". It's made up of many different individual data breaches from literally thousands of different sources. Collection #1 is a set of email addresses and passwords totalling 2,692,818,238 rows.

Data breaches 280

Data breaches Passwords Password Management Accountability 280

Tech Republic Security

OCTOBER 11, 2024

The Internet Archive, a non-profit digital library best known for its Wayback Machine, has disclosed a major data breach affecting over 31 million users.

Internet 183

Internet Internet Accountability Data breaches 183

Krebs on Security

DECEMBER 19, 2024

Cyber threat analysts at Silent Push said they recently received reports from a partner organization that identified an aggressive scanning effort against their website using an Internet address previously associated with a campaign by FIN7 , a notorious Russia-based hacking group.

Hacking 234

Hacking Cybercrime Advertising Data breaches 234

Security Affairs

OCTOBER 28, 2024

French internet service provider (ISP) Free disclosed a cyber attack, threat actors allegedly had access to customer personal information. that provides voice, video, data, and Internet telecommunications to consumers in France. The seller also published a sample of the stolen data and some screenshots. Free S.A.S.

Cyber Attacks 125

Cyber Attacks Telecommunications Data breaches Banking 125

Security Affairs

APRIL 1, 2024

The OWASP Foundation disclosed a data breach that impacted some members due to a misconfiguration of an old Wiki web server. The OWASP Foundation has disclosed a data breach that impacted some of its members. No joke, we did have a data breach in late March involving the resumes of our earliest members.

Data breaches 142

Data breaches Mobile Software Media 142

Troy Hunt

SEPTEMBER 6, 2021

Data breaches impact all of us in one way or another, and government agencies are no exception. My hope is that in supporting the agencies that help protect us online, they're better equipped to do their jobs and we create a safer internet experience for all.

Government 351

Government Data breaches Internet Internet 351

The Last Watchdog

AUGUST 19, 2021

The configuration issue made this access point publicly available on the Internet. T-Mobile is offering two free years of identity protection for affected customers, but ultimately this is pushing the responsibility for the safety of the data onto the user. For T-Mobile, this is the sixth major breach since 2018.

Mobile 235

Mobile Data breaches Authentication Accountability 235

Lohrman on Security

JUNE 9, 2024

Over the past month, the Verizon Data Breach Investigation Report and the Watchguard Technologies Internet Security Report were released. Here are some highlights.

Data breaches 248

Data breaches Internet Internet Technology 248

Security Affairs

NOVEMBER 18, 2024

internet-service providers in recent months in pursuit of sensitive information, according to people familiar with the matter.” China has long targeted global internet service providers and recent attacks are aligned with past operations linked to Beijing. In 2019, T-Mobile disclosed data breach affecting prepaid wireless customers.

Mobile 113

Mobile Telecommunications Data breaches Hacking 113

Security Affairs

MAY 9, 2024

Cybersecurity firm Zscaler is investigating claims of a data breach after hackers offered access to its network. Cybersecurity firm Zscaler is investigating allegations of a data breach following reports that threat actors are offering for sale access to its network.

Data breaches 127

Data breaches Cybercrime Cryptocurrency Internet 127

Security Boulevard

NOVEMBER 27, 2024

With web browsers being the primary gateway to the internet, any security lapse can lead to broad opportunities for significant data breaches and operational disruptions. The post Protecting Web-Based Work: Connecting People, Web Browsers and Security appeared first on Security Boulevard.

Data breaches 96

Data breaches Internet Internet Cyber Attacks 96

Security Affairs

OCTOBER 13, 2024

CISA adds Windows and Qualcomm bugs to its Known Exploited Vulnerabilities catalog Three new Ivanti CSA zero-day actively exploited in attacks Ukrainian national pleads guilty in U.S.

Data breaches 116

Data breaches Cryptocurrency Artificial Intelligence Cybercrime 116

Krebs on Security

NOVEMBER 14, 2024

A week after breaking the story about the 2013 data breach at Target, KrebsOnSecurity published Who’s Selling Cards from Target? . “I’m also godfather of his second son.” ” Dmitri Golubov, circa 2005. Image: U.S. Postal Investigative Service.

Retail 261

Retail Advertising Cryptocurrency Marketing 261

The Last Watchdog

JUNE 9, 2021

Massive data base breaches today generally follow a distinctive pattern: hack into a client -facing application; manipulate an API; follow the data flow to gain access to an overly permissive database or S3 bucket (cloud storage). A classic example of this type of intrusion is the Capital One data breach.

Data breaches 203

Data breaches Software Hacking Mobile 203

Adam Levin

JULY 10, 2020

2020 is on the path to becoming a record-breaking year for data breaches and compromised personal data. While the number of publicly reported breaches in Q1 2020 decreased by 58% compared to 2019, the coronavirus pandemic gave cybercriminals new ways to thrive,” wrote Bitdefender researcher and blogger Alina Bizga.

Data breaches 252

Data breaches Social Engineering Antivirus Scams 252

Security Affairs

MARCH 30, 2024

AT&T confirmed that a data breach impacted 73 million current and former customers after its data were leaked on a cybercrime forum. In March 2024, more than 70,000,000 records from an unspecified division of AT&T were leaked onto Breached forum, vx-underground researchers reported.

Data breaches 144

Data breaches Telecommunications Cybercrime Hacking 144

Security Affairs

APRIL 10, 2024

AT&T confirmed that the data breach impacted 51 million former and current customers and is notifying them. AT&T revealed that the recently disclosed data breach impacts more than 51 million former and current customers and is notifying them. ” reads the data breach notification.

Data breaches 126

Data breaches Telecommunications Identity Theft Hacking 126

Security Affairs

APRIL 11, 2024

Below is the content of the note: Good afternoon We are aware of reports that certain Sisense company information may have been made available on what we have been advised is a restricted access server (not generally available on the internet). We are taking this matter seriously and promptly commenced an investigation.

Data breaches 133

Data breaches Healthcare Cyber Attacks Software 133

Malwarebytes

OCTOBER 3, 2024

While everyday users might already know about some of the largest breaches in recent history— AT&T comes to mind —it can be nearly impossible to keep track of every single company that has lost user data in the past. million people affected by the breach of Rite Aid , to the 1.7

Data breaches 119

Data breaches Data collection Advertising Internet 119

Security Affairs

NOVEMBER 12, 2023

The State of Maine disclosed a data breach that impacted about 1.3 The Government organization disclosed a data breach that impacted about 1.3 “As soon as the State became aware of the incident, the State took steps to secure its information, including by blocking internet access to and from the MOVEit server.”

Data breaches 140

Data breaches Insurance Identity Theft Education 140

Security Affairs

SEPTEMBER 13, 2024

Lehigh Valley Health Network ’s (LVHN) hospital network has agreed to a $65 million settlement in a class action lawsuit related to a data breach. The healthcare network was the target a BlackCat ransomware attack, the security breach was discovered on February 6. ” reported the law firm. “The settlement in J. .

Data breaches 122

Data breaches Healthcare Ransomware Hacking 122

Malwarebytes

MARCH 26, 2025

Internet security expert and educator Troy Hunt disclosed this week that he had been hit by one of the oldestand most provenscams in the online world: A phishing attack. Me doing anything less than that would be hypocritical, including how I then handle the data from the breach, namely adding it to HIBP.

Phishing 112

Phishing Data breaches Password Management Scams 112

Krebs on Security

NOVEMBER 22, 2019

VCPI) provides IT consulting, Internet access, data storage and security services to some 110 nursing homes and acute-care facilities in 45 states. Their findings suggest that after data breaches as many as 36 additional deaths per 10,000 heart attacks occurred annually at the hundreds of hospitals examined.

Ransomware 363

Ransomware Computers and Electronics Healthcare Data breaches 363

Security Affairs

MARCH 7, 2024

The FBI Internet Crime Complaint Center (IC3) 2023 report states that reported cybercrime losses reached $12.5 The 2023 Internet Crime Report published the FBI’s Internet Crime Complaint Center (IC3) reveals that reported cybercrime losses reached $12.5 billion in 2023. billion in 2023. billion in 2022 to $4.57

Cybercrime 139

Cybercrime Internet Internet Scams 139

Krebs on Security

MARCH 17, 2023

. “When I arrested the defendant on March 15, 2023, he stated to me in substance and in part that: a) his name was Conor Brian Fitzpatrick; b) he used the alias ‘pompompurin/’ and c) he was the owner and administrator of ‘BreachForums’ the data breach website referenced in the Complaint,” Langmire wrote.

Data breaches 355

Data breaches Cybercrime Insurance Internet 355

Webroot

MAY 31, 2024

What is Internet Safety Month? Each June, the online safety community observes Internet Safety Month as a time to reflect on our digital habits and ensure we’re taking the best precautions to stay safe online. 2 64% of Americans have experienced a data breach. 3 95% of cybersecurity breaches are due to human error.

Internet 123

Internet Internet Identity Theft Passwords 123

Malwarebytes

JULY 3, 2024

‘Buy now, pay later’ payment specialist Affirm has warned that holders of its payment cards had their personal information exposed after a ransomware attack and data breach at Evolve Bank & Trust. According to Evolve , the attack started after “an employee inadvertently clicked on a malicious internet link.”

Data breaches 106

Data breaches Banking Passwords Phishing 106

Krebs on Security

MAY 23, 2024

Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. The homepage of Stark Industries Solutions.

DDOS 329

DDOS Internet Internet Government 329

Webroot

NOVEMBER 21, 2024

VPN servers: Usually located all over the world, VPN servers act as intermediaries between your device and the internet and maintain your privacy by masking your IP address and location. Kill switch: Blocks your device’s internet access if the VPN connection drops. Keeps your browsing history and personal data private and anonymous.

VPN 110

VPN Antivirus Internet Internet 110

Adam Levin

MARCH 23, 2020

You can also create an extra firewall by configuring your router to block unwanted incoming internet traffic. Double-check with services such as HaveIBeenPwned.com to see if any of your existing accounts have been part of a data breach. Update Account Passwords: Don’t reuse passwords from other accounts.

Manufacturing 245

Manufacturing Passwords Phishing Accountability 245

Troy Hunt

DECEMBER 15, 2021

The machine had full disk encryption and it's not known whether the thief was ever actually able to access the data. Is this a data breach? the Red Cross wasn't hacked either and that was clearly a data breach. It's not clear if the car was locked or not. They want answers. No serious harm?

Data breaches 335

Data breaches Hacking Passwords Accountability 335

SecureWorld News

NOVEMBER 14, 2024

From the report: " Samples of the stolen data can be easily found on the clear web, accessible to anyone with internet access. The full troves of stolen data are frequently traded, sold or simply leaked on the clear and dark web, where they could remain available for years after the initial breach.

Healthcare 118

Healthcare Ransomware Identity Theft Data breaches 118