Healthcare company WebTPA discloses breach affecting 2.5 million people (techcrunch.com)
WebTPA disclosed a data breach from 2023 that impacted 2.5 million people, some of whom had their Social Security Number stolen.
Nissan North America data breach impacts over 53,000 employees (www.bleepingcomputer.com)
Nissan North America (Nissan) suffered a data breach last year when a threat actor targeted the company’s external VPN and shut down systems to receive a ransom.
NCSC warns of ‘large-scale ransomware data breach incident’; MediSecure the victim (www.cyberdaily.au)
Australia’s National Cyber Security Coordinator (NCSC) has said it is working on a “whole-of-government response” ransomware attack on e-prescription firm MediSecure.
Banco Santander warns of a data breach exposing customer info (www.bleepingcomputer.com)
Banco Santander S.A. announced it suffered a data breach impacting customers after an unauthorized actor accessed a database hosted by one of its third-party service providers.
Singing River Health System: Data of 895,000 stolen in ransomware attack (www.bleepingcomputer.com)
The Singing River Health System is warning that it is now estimating that 895,204 people are impacted by a ransomware attack it suffered in August 2023.
Helsinki suffers data breach after hackers exploit unpatched flaw (www.bleepingcomputer.com)
The City of Helsinki is investigating a data breach in its education division, which it discovered in late April 2024, impacting tens of thousands of students, guardians, and personnel.
CISA: Black Basta ransomware breached over 500 orgs worldwide (www.bleepingcomputer.com)
CISA and the FBI said today that Black Basta ransomware affiliates breached over 500 organizations between April 2022 and May 2024.
The Post Millennial hack leaked data impacting 26 million people (www.bleepingcomputer.com)
Have I Been Pwned has added the information for 26,818,266 people whose data was leaked in a recent hack of The Post Millennial conservative news website.
Largest non-bank lender in Australia warns of a data breach (www.bleepingcomputer.com)
Firstmac Limited is warning customers that it suffered a data breach a day after the new Embargo cyber-extortion group leaked over 500GB of data allegedly stolen from the firm.
Dell warns of data breach, 49 million customers allegedly affected (www.bleepingcomputer.com)
Ohio Lottery ransomware attack impacts over 538,000 individuals (www.bleepingcomputer.com)
The Ohio Lottery is sending data breach notification letters to over 538,000 individuals affected by a cyberattack that hit the organization’s systems on Christmas Eve.
Europol confirms web portal breach, says no operational data stolen (www.bleepingcomputer.com)
Europol, the European Union’s law enforcement agency, confirmed that its Europol Platform for Experts (EPE) portal was breached and is now investigating the incident after a threat actor claimed they stole For Official Use Only (FOUO) documents containing classified data.
Dell customer order database stolen, for sale on dark web (www.theregister.com)
University System of Georgia: 800K exposed in 2023 MOVEit attack (www.bleepingcomputer.com)
The University System of Georgia (USG) is sending data breach notifications to 800,000 individuals whose data was exposed in the 2023 Clop MOVEit attacks.
City of Wichita breach claimed by LockBit ransomware gang (www.bleepingcomputer.com)
The LockBit ransomware gang has claimed responsibility for a disruptive cyberattack on the City of Wichita, which has forced the City’s authorities to shut down IT systems used for online bill payment, including court fines, water bills, and public transportation.
US Patent and Trademark Office confirms another leak of filers' address data (techcrunch.com)
The federal agency took blame for the incident, saying the addresses were “inadvertently exposed as we transitioned to a new IT system.”
UK confirms Ministry of Defence payroll data exposed in data breach (www.bleepingcomputer.com)
The UK Government confirmed today that a threat actor recently breached the country’s Ministry of Defence and gained access to part of the Armed Forces payment network.
DocGo discloses cyberattack after hackers steal patient health data (www.bleepingcomputer.com)
Mobile medical care firm DocGo confirmed it suffered a cyberattack after threat actors breached its systems and stole patient health data.
Guardant Health Data Breach Affects Patients (cybermaterial.com)
Guardant Health, a laboratory known for conducting cancer screening tests, has experienced a significant data breach affecting patient information. The breach originated from a file that contained personal details of patients, which was unintentionally made available on a publicly accessible online platform. This file included...
Security company exposes 1.2M guard and suspect records (www.theregister.com)
Thousands of ID cards plus CCTV snaps of suspects found online
Brandywine Realty Trust says data stolen in ransomware attack (techcrunch.com)
The realty trust giant said described the incident as consistent with a ransomware attack, and said the cybercriminals stole internal data.
270,000 UK forces records thought to have been exposed to Chinese hackers (www.theguardian.com)
Data at risk includes names, bank details and addresses of current and former force members, government sources suggest
City of Wichita shuts down IT network after ransomware attack (www.bleepingcomputer.com)
The City of Wichita, Kansas, disclosed it was forced to shut down portions of its network after suffering a weekend ransomware attack.
More than 380,000 additional NYC students had personal info hacked, bringing total to over 1M (nypost.com)
The New York City Department of Education last week began sending letters notifying the hundreds of thousands of additional current and former students that they were victims of the cyber attack in…
Marriott admits it falsely claimed for five years it was using encryption during 2018 breach (www.csoonline.com)
Marriot revealed in a court case around a massive 2018 data breach that it had been using secure hash algorithm 1 and not the much more secure AES-1 encryption as it had earlier maintained.
