Tag: breach
-
Stadtverwaltung in Texas, USA von Cyberangriff auf IT-Dienstleister betroffen
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cc1d47ba-bb83-4699-ace0-e4e228322862.html
-
Hertz confirms customer info, drivers’ licenses stolen in data breach
Car rental giant Hertz Corporation warns it suffered a data breach after customer data for its Hertz, Thrifty, and Dollar brands was stolen in the Cleo zero-day data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hertz-confirms-customer-info-drivers-licenses-stolen-in-data-breach/
-
Hertz confirms customer info and drivers’ licenses stolen in data breach
Car rental giant Hertz Corporation warns it suffered a data breach after customer data for its Hertz, Thrifty, and Dollar brands was stolen in the Cleo zero-day data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hertz-confirms-customer-info-and-drivers-licenses-stolen-in-data-breach/
-
Insurance firm Lemonade says breach exposed driver’s license numbers
A vulnerability within the online application platform for insurance policies likely resulted in the breach of customer details. First seen on therecord.media Jump to article: therecord.media/lemonade-insrance-breach-numbers-license
-
Govtech giant Conduent confirms client data stolen in January cyberattack
American business services giant and government contractor Conduent disclosed today that client data was stolen in a January 2025 cyberattack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/govtech-giant-conduent-confirms-client-data-stolen-in-january-cyberattack/
-
Data breach purportedly hits Wolters Kluwer
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-purportedly-hits-wolters-kluwer
-
Hertz says customers’ personal data and driver’s licenses stolen in data breach
The car rental giant attributed the breach to Cleo, whose customers had data stolen by a ransomware gang in 2024. First seen on techcrunch.com Jump to article: techcrunch.com/2025/04/14/hertz-says-customers-personal-data-and-drivers-licenses-stolen-in-data-breach/
-
Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft
Cybersecurity researchers are calling attention to a new type of credential phishing scheme that ensures that the stolen information is associated with valid online accounts.The technique has been codenamed precision-validating phishing by Cofense, which it said employs real-time email validation so that only a select set of high-value targets are served the fake login screens.”This…
-
Morocco Investigation Major Data Breach Allegedly Claimed by Algerian Hackers
The National Social Security Fund (CNSS) of Morocco has confirmed that initial checks on leaked documents circulating on social media have revealed that much of the information is false, inaccurate, or incomplete. Officials state these documents originated from a cyber attack targeting the organization’s computer systems. The CNSS has activated security protocols, launched an internal…
-
Chinese APT Group Targets Ivanti VPN Vulnerabilities to Breach Networks
Tags: apt, attack, breach, china, cyber, cybersecurity, data-breach, group, ivanti, network, threat, vpn, vulnerabilityIn a concerning report from cybersecurity firm TeamT5, it has been revealed that a Chinese Advanced Persistent Threat (APT) group leveraged critical vulnerabilities in Ivanti Connect Secure VPN appliances to launch a global cyberattack. The breach affected nearly 20 industries across 12 countries, leaving networks exposed and under persistent threat. Global Victimology The widespread attack…
-
âš¡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More
Attackers aren’t waiting for patches anymore, they are breaking in before defenses are ready. Trusted security tools are being hijacked to deliver malware. Even after a breach is detected and patched, some attackers stay hidden.This week’s events show a hard truth: it’s not enough to react after an attack. You have to assume that any…
-
Data Breach at Planned Parenthood Lab Partner Exposes Info of 1.6M
Data breach at Laboratory Services Cooperative (LSC) exposed the sensitive health and personal information of 1.6 million individuals… First seen on hackread.com Jump to article: hackread.com/lab-breach-tied-planned-parenthood-compromises-records/
-
South African telecom provider Cell C disclosed a data breach following a cyberattack
Cell C, one of the biggest telecom providers in South Africa confirms a data breach following a 2024 cyberattack. Cell C is the fourth-largest mobile network operator in South Africa, ,after Vodacom, MTN, and Telkom. The company founded in 2001 offers prepaid and postpaid mobile plans, data bundles and internet services, fiber broadband, roaming and…
-
The quiet data breach hiding in AI workflows
As AI becomes embedded in daily business workflows, the risk of data exposure increases. Prompt leaks are not rare exceptions. They are a natural outcome of how employees use … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/14/quiet-data-breach-ai-workflows/
-
Morocco Investigates Social Security Agency Data Leak
A threat actor has claimed responsibility for the alleged politically motivated attack and has uploaded the stolen data to a Dark Web forum. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/morocco-investigates-social-security-agency-data-leak
-
Sector by sector: How data breaches are wrecking bottom lines
Data breaches are rising across industries, hitting healthcare, finance, and retail especially hard. The damage goes beyond lost data, as it’s financial, operational, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/14/data-breaches-costs/
-
How We Knew the Oracle Breach Was Real – Grip Security
Grip helped companies reduce exposure from the Oracle Cloud breach before it was acknowledged, detecting shadow tenants and enabling fast, targeted response. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/how-we-knew-the-oracle-breach-was-real-grip-security/
-
Oracle admits breach of ‘obsolete servers,’ denies main cloud platform affected
Doubts emerge: So far so good regarding Oracle’s denials, except that the hacker subsequently shared data showing their access to login.us2.oraclecloud.com, a service that is part of the Oracle Access Manager, the company’s IAM system used to control access to Oracle-hosted systems.It also emerged that some of the leaked data appeared to be from 2024…
-
Zero-Day Vulnerability in CentreStack Exploited to Breach Enterprise File Servers
First seen on scworld.com Jump to article: www.scworld.com/brief/zero-day-vulnerability-in-centrestack-exploited-to-breach-enterprise-file-servers
-
GrubHub breach purportedly impacts almost 17M
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/grubhub-breach-purportedly-impacts-almost-17m
-
Extensive WooCommerce data breach claimed
First seen on scworld.com Jump to article: www.scworld.com/brief/extensive-woocommerce-data-breach-claimed
-
Breach Roundup: Port of Seattle Notifies 90,000 Victims
Also, Oracle Denies Cloud Breach, Blames Hack on Obsolete Servers. This week, Port of Seattle notified victims, Oracle blamed hack on obsolete servers, Google and Microsoft released April patches, WK Kellogg breached, six arrested in Spain for AI-investment scam, Scattered Spider’s King Bob pleaded guilty, SmokeLoader users busted. First seen on govinfosecurity.com Jump to article:…
-
Why Data Privacy Isn’t the Same as Data Security
Failing to distinguish between data privacy and data security leaves businesses vulnerable to regulatory scrutiny and the kinds of breaches that erode consumer trust overnight. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/data-privacy-versus-data-security
-
Over 40% of UK Businesses Faced Cybersecurity Breaches in 2024
The Cyber Security Breaches Survey 2025 has been released by the UK Home Office and DSIT today, reporting a slight decline in incidents compared to 2024 report First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/40-uk-businesses-face-breaches/
-
Why Codefinger represents a new stage in the evolution of ransomware
Tags: access, advisory, attack, backup, best-practice, breach, business, cisco, cloud, computer, credentials, cybersecurity, data, defense, exploit, malicious, network, password, ransom, ransomware, risk, strategy, technology, threat, vmwareA new type of ransomware attack: The fundamentals of the Codefinger attack are the same as those in most ransomware attacks: The bad guys encrypted victims’ data and demanded payment to restore it.However, several aspects of the breach make it stand out from most other ransomware incidents:Attack vector: In traditional ransomware attacks, the attack vector…
-
US Comptroller Cyber ‘Incident’ Compromises Org’s Emails
A review of the emails involved in the breach is still ongoing, but what has been discovered is enough for the Treasury Department to label it a major cyber incident. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/occ-major-cyber-incident-executive-employee-emails
-
Hackers Claim WooCommerce Breach Exposing 4.4 Million Customer Records
A hacker operating under the alias “Satanic” has claimed responsibility for a massive data breach involving WooCommerce, a leading e-commerce platform used globally to power online stores. The breach, allegedly carried out on April 6, 2025, has reportedly compromised sensitive data of over 4.4 million users. The claim surfaced on Breach Forums, a notorious hub…
-
Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine
The Russia-linked threat actor known as Gamaredon (aka Shuckworm) has been attributed to a cyber attack targeting a foreign military mission based in Ukraine with an aim to deliver an updated version of a known malware called GammaSteel.The group targeted the military mission of a Western country, per the Symantec Threat Hunter team, with first…
-
Proactive Secrets Rotation to Avoid Data Breaches
Why Is Proactive Secrets Rotation a Vital Part of Your Cybersecurity Strategy? Nearly every professional in cybersecurity will highlight the growing threat of data breaches. With cyber threats becoming increasingly sophisticated and relentless, a reactive approach to security is no longer sufficient. Amidst a sea of security measures, where does proactive secrets rotation come into……