Tag: breach
-
SEC rule confusion continues to put CISOs in a bind a year after a major revision
Tags: attack, breach, business, ciso, citrix, compliance, control, cyber, cyberattack, cybersecurity, data, government, incident, incident response, law, network, privacy, regulation, risk, security-incident, software, strategy, supply-chainConfusion around when and how to report cybersecurity breaches continues to plague companies a year after revised US Securities and Exchange Commission (SEC) cybersecurity breach reporting rules came into effect, experts say.As the agency that regulates and enforces federal US securities laws continues to flex its enforcement muscles against organizations that violate the strict rules,…
-
Unbefugter Zugriff bei einem Anbieter von Software für Schulen aus den USA
Database tables of student, teacher info stolen from PowerSchool in cyberattack First seen on theregister.com Jump to article: www.theregister.com/2025/01/09/powerschool_school_data/
-
United Nations Aviation Agency Hacked Recruitment Data Exposed
The International Civil Aviation Organization (ICAO), a United Nations agency responsible for coordinating global aviation standards, has reported a significant information security incident that has exposed the personal data of approximately 42,000 applicants. The agency is actively investigating the breach, which was attributed to a malicious threat actor known for targeting international organizations. United Nations…
-
Banshee 2.0 Malware Steals Apple’s Encryption to Hide on Macs
The most recent iteration of the open source infostealer skates by antivirus programs on Macs, using an encryption mechanism stolen from Apple’s own antivirus product. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/banshee-malware-steals-apple-encryption-macs
-
U.S. Medical billing provider Medusind suffered a sata breach
Medusind, a medical billing provider, disclosed a data breach that occurred in December 2023 and affected over 360,000 individuals. Medusind is a company that provides medical billing, coding, and revenue cycle management (RCM) services to healthcare organizations, including medical practices, dental practices, and other providers. The company disclosed a data breach discovered on December 29,…
-
Hacking Group ‘Silk Typhoon’ Linked to US Treasury Breach
The attack used a stolen remote support SaaS API key to exfiltrate data from workstations in the Treasury Department’s Office of Foreign Assets Control. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/hacking-group-silk-typhoon-linked-us-treasury-breach
-
Largest US addiction treatment provider notifies patients of data breach
BayMark Health Services, North America’s largest provider of substance use disorder (SUD) treatment and recovery services, is notifying an undisclosed number of patients that attackers stole their personal and health information in a September 2024 breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/largest-us-addiction-treatment-provider-notifies-patients-of-data-breach/
-
PowerSchool Breach Hits Dozens of North American K-12 Districts
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/powerschool-breach-hits-dozens-of-north-american-k-12-districts
-
Over 360K impacted by Medusind breach
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/over-360k-impacted-by-medusind-breach
-
North American K-12 districts impacted by PowerSchool breach
Tags: breachFirst seen on scworld.com Jump to article: www.scworld.com/brief/north-american-k-12-districts-impacted-by-powerschool-breach
-
MSSPs Have a Role in Stopping Cloud Attacks Using Stolen Credentials
First seen on scworld.com Jump to article: www.scworld.com/news/mssps-have-a-role-in-stopping-cloud-attacks-using-stolen-credentials
-
Breach Roundup: Finland Detains Tanker Tied to Cable Sabotage
Also, Alleged Gravy Analytics Breach Exposes Location Data. This week, a Russian tanker linked to cable sabotage detained in Finland, a claimed Gravy Analytics breach exposed location data, a Mirai-based botnet exploited zero-day flaws, Dell updated framework flaws and a court sentenced a Florida woman for laundering millions in romance scams. First seen on govinfosecurity.com…
-
PowerSchool says hackers stole students’ sensitive data, including Social Security numbers, in data breach
In an FAQ obtained by TechCrunch, PowerSchool confirms it negotiated with the threat actors responsible for the breach. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/09/powerschool-says-hackers-stole-students-sensitive-data-including-social-security-numbers-in-data-breach/
-
Hackers claim to breach Russian state agency managing property, land records
A group of hackers with unknown ties has claimed responsibility for breaching a Russian government agency, Rosreestr, which is responsible for managing property and land records.]]> First seen on therecord.media Jump to article: therecord.media/hackers-claim-to-breach-russian-state-agency-land-records
-
Medical Billing Firm Medusind Says Data Breach Impacts 360,000 People
Medical billing solutions provider Medusind has revealed that a data breach discovered in December 2023 impacts over 360,000 individuals. The post Medical Billing Firm Medusind Says Data Breach Impacts 360,000 People appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/medical-billing-firm-medusind-says-data-breach-impacts-360000-people/
-
APT32 Hacker Group Attacking Cybersecurity Professionals Poisoning GitHub
The malicious Southeast Asian APT group known as OceanLotus (APT32) has been implicated in a sophisticated attack that compromises the privacy of cybersecurity professionals. A recent investigation by the ThreatBook Research and Response Team revealed that a popular privilege escalation tool utilized by cybersecurity experts had been backdoored, leading to significant data breaches and identity…
-
Excelsior Orthopaedics Data Breach Impacts 357,000 People
Excelsior Orthopaedics says the information of roughly 357,000 patients and employees was stolen in a June 2024 data breach. The post Excelsior Orthopaedics Data Breach Impacts 357,000 People appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/excelsior-orthopaedics-data-breach-impacts-357000-people/
-
New Great Morpheus Hacker Group Claims Hacking Into Arrotex Pharmaceuticals And PUS GmbH
A Data Leak Site (DLS) belonging to a new extortion group named Morpheus, which has stolen data from Arrotex Pharmaceuticals (Australia) on December 12th and PUS GmbH (Germany) on December 20th. Morpheus offers stolen data for sale on the DLS, requiring buyers to create accounts. While a researcher suggests a link to Hellcat ransomware, there…
-
Green Bay Packers Store Hacked Thousands of Credit Cards Data Stolen
The Green Bay Packers, Inc. has confirmed that its online merchandise store was hacked, leading to the theft of credit card data from over 8,500 customers. The incident, which occurred on September 23, 2024, was discovered nearly three months later on December 20, 2024. An official notification was sent to affected individuals on January 6,…
-
Green Bay Packers Pro Shop Data Breach Compromises Customers
The Green Bay Packers disclosed on Monday that their official online store was breached and customer information stolen First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/green-bay-packers-shop-data-breach/
-
European Court Fines European Commission for Privacy Breach
Transfer of German Man’s IP Address Wins Him 400 Euros. European privacy regulation – bane of American technology companies and a favorite cudgel of activists – came to haunt no less an organization than the European Commission, which must pay 400 euros to aggrieved German national Thomas Bindl, peeved that Facebook obtained his IP address.…
-
UN agency’s job application database breached, 42,000 records stolen
Tags: access, attack, breach, communications, cybersecurity, data, data-breach, email, finance, international, jobs, password, sans, security-incident, tactics, threatThe International Civil Aviation Organization (ICAO) on Tuesday said that it is “actively investigating reports of a potential information security incident allegedly linked to a threat actor known for targeting international organizations,” and has initially concluded that “approximately 42,000 recruitment application data records from April 2016 to July 2024” were stolen.In its initial statement, the…
-
Database tables of student, teacher info stolen from PowerSchool in cyberattack
Class act: Cloud biz only serves 60M-plus folks globally, no biggie First seen on theregister.com Jump to article: www.theregister.com/2025/01/09/powerschool_school_data/
-
Data Breach Hits Green Bay Packers Online Store
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-hits-green-bay-packers-online-store
-
Data breach hits Green Bay Packers’ online store
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-hits-green-bay-packers-online-store
-
Washington State Sues T-Mobile For Negligence Over Massive 2021 Data Breach
First seen on scworld.com Jump to article: www.scworld.com/brief/washington-state-sues-t-mobile-for-negligence-over-massive-2021-data-breach
-
Breach Readiness and Business Continuity Planning
I recently caught up with Karissa Breen, the founder of KBI.Media, and we got straight into our topic: What is breach readiness and business continuity planning in complex environments? Everyone talks about having a plan, but actually putting it into action, especially when you’re under attack, is a completely different story. Realities of Breach Readiness……