Tag: data-breach
-
Risk assessment vital when choosing an AI model, say experts
Advice to CSOs: Lee said that CSOs should consider the following before approving any LLM:Training data: figure out where the model got its info. Random web grabs expose your secrets;Prompt history: if your questions stick around on their servers, they’ll turn up in the next breach bulletin;Credentials: stolen API keys and weak passwords keep attackers…
-
New Cyber Threat: UTG015 Exploits 0-Days for Espionage in Asia
In a threat intelligence report, the Qi’anxin Threat Intelligence Center has exposed a series of highly targeted attacks First seen on securityonline.info Jump to article: securityonline.info/new-cyber-threat-utg-q-015-exploits-0-days-for-espionage-in-asia/
-
A Peek Behind the Claude Curtain
Researcher Analyzes System Prompts to Show How New Claude Models Work. System-level instructions guiding Anthropic’s new Claude 4 models tell it to skip praise, avoid flattery and get to the point, said independent AI researcher Simon Willison, breaking down newly released and leaked system prompts for the Claude Opus 4 and Sonnet 4 models. First…
-
Revenue Cycle Management Firm’s Data Breach Total Soars
ALN Medical Management Now Says 1.82 Million Affected in 2024 Hacking Incident. The number of people affected by a March 2024 hack on a healthcare revenue cycle management and billing services provider has soared in recent weeks to more than 1.82 million, as the company continues to file updated breach reports to state and federal…
-
Ivanti Vulnerability Exploit Could Expose UK NHS Data
Two NHS England trusts could see highly sensitive patient records exposed First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ivanti-vulnerability-exploit-could/
-
Estonia issues arrest warrant for Moroccan wanted for major pharmacy data breach
Estonia said a man is suspected of unlawfully accessing a customer card database managed by Allium UPI, the parent company of the Apotheka pharmacy chain, in February 2024. First seen on therecord.media Jump to article: therecord.media/estonia-arrest-warrant-pharmacy-data-breach
-
Data broker giant LexisNexis says breach exposed personal information of over 364,000 people
The data collector said the stolen data includes Social Security numbers. First seen on techcrunch.com Jump to article: techcrunch.com/2025/05/28/data-broker-giant-lexisnexis-says-breach-exposed-personal-information-of-over-364000-people/
-
Adidas Data Breach Highlights Third-Party Risks: Why AI-Based Cybersecurity Solutions Are Essential
On May 23, Adidas disclosed a data breach resulting from a cyberattack on a third-party customer service provider, exposing sensitive customer information in multiple regions, including the U.S. and Europe. While Adidas did not name the vendor involved, the company emphasized that the breach impacted “a few million individuals,” and included data such as contact…
-
Hacker stehlen Coca-Cola-Daten
Der Coca-Cola-Abfüller Coca-Cola Europacific Partners ist von einem Datenleck betroffen.Cyberkriminelle behaupten in einem Darknet-Post, mehr als 64 Gigabyte Daten mit 23 Millionen Einträgen von Coca-Cola Europacific Partners gestohlen zu haben. Darunter befinden sich demnach Kundendaten und Kontaktinformationen, Verkaufsfälle und Produktdaten, Lieferadressen und Telefonnummern sowie Bestellnummern und Zusammenfassungen.Der Coca-Cola-Produzent hat sich bisher noch nicht offiziell zu…
-
Microsoft OneDrive Flaw Exposes Users to Data Overreach Risks
A flaw in OneDrive File Picker has exposed millions to data overreach through excessive OAuth permissions First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-onedrive-flaw-exposes/
-
Salt Typhoon Believed to Be Behind Commvault Data Breach
Tags: advisory, backup, breach, china, cisa, cloud, credentials, data, data-breach, group, hacking, infrastructure, microsoft, threat, vulnerabilityCISA Advisory Says Threat Actors Stole App Secrets in Azure-Hosted Backup Platform. A suspected Chinese state hacking group linked to last year’s telecom intrusions breached Commvault’s Microsoft Azure environment, exposing sensitive Microsoft 365 credentials and reigniting fears over U.S. cloud infrastructure vulnerabilities and default security settings. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/salt-typhoon-believed-to-be-behind-commvault-data-breach-a-28496
-
Adidas Falls Victim to Third-Party Data Breach
Though Adidas said that no payment or financial information was affected in the breach, individuals who contacted the compamy’s customer service help desk were impacted. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/adidas-victim-third-party-data-breach
-
eSkimming Security Driving Bottom Line Results through Fraud Reduction and Revenue Maximization
by Source Defense Even with the PCI DSS 4.0 deadline now behind us, many organizations are still exposed to costly eSkimming threats and compliance gaps. Source Defense recently hosted a webinar to explore how compliance actually drives better business outcomes as seen through the lens of the positive bottom line impacts of implementing PCI First…
-
Adidas customers’ personal information at risk after data breach
Lovers of Adidas clothes would be wise to be on their guard against phishing attacks, after the German sportswear giant revealed that a cyber attack had exposed the personal information of customers. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/adidas-customers-personal-information-at-risk-after-data-breach
-
New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency
Misconfigured Docker API instances have become the target of a new malware campaign that transforms them into a cryptocurrency mining botnet.The attacks, designed to mine for Dero currency, is notable for its worm-like capabilities to propagate the malware to other exposed Docker instances and rope them into an ever-growing horde of mining bots.Kaspersky said it…
-
Datenleck und jetzt? So erfährst du, ob du betroffen bist
Tags: data-breachFirst seen on t3n.de Jump to article: t3n.de/news/datenleck-account-gehackt-wie-ueberpruefen-1689607/
-
Coinbase Hit with Lawsuit Over $400M Data Breach and Stock Loss
Coinbase faces a class action lawsuit over a data breach. Learn about the implications for investors and the importance of secure authentication. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/coinbase-hit-with-lawsuit-over-400m-data-breach-and-stock-loss/
-
Massive Data Breach Exposes 184 Million Login Credentials
A major data breach exposed 184 million login credentials. Discover the risks and learn how to protect yourself from cyber threats. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/massive-data-breach-exposes-184-million-login-credentials/
-
Adidas Customer Information Compromised Through Third-Party Vendor
German sportswear giant Adidas has confirmed a data breach after cybercriminals accessed customer data through a third-party customer service provider. The breach, disclosed on May 23, 2025, did not involve sensitive information such as passwords or payment details but did expose the contact information of customers who had previously interacted with Adidas’ help desk. This…
-
Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers
Threat hunters have exposed a novel campaign that makes use of search engine optimization (SEO) poisoning techniques to target employee mobile devices and facilitate payroll fraud.The activity, first detected by ReliaQuest in May 2025 targeting an unnamed customer in the manufacturing sector, is characterized by the use of fake login pages to access the employee…
-
Everest Ransomware Leaks Coca-Cola Employee Data Online
Everest ransomware leaks Coca-Cola employee data: 1,104 files exposed, including HR, admin roles, IDs, personal details, and internal records. First seen on hackread.com Jump to article: hackread.com/everest-ransomware-leaks-coca-cola-employee-data/
-
Adidas warns of data breach after customer service provider hack
German sportswear giant Adidas disclosed a data breach after attackers hacked a customer service provider and stole some customers’ data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/adidas-warns-of-data-breach-after-customer-service-provider-hack/
-
Unbefugter Zugriff bei einem Sportartikelhersteller aus Deutschland
Adidas warns of consumer data breach First seen on reuters.com Jump to article: www.reuters.com/business/retail-consumer/adidas-warns-consumer-data-breach-2025-05-23/
-
1,2 Milliaden Datensätze im Darknet – Milliarden-großes Datenleck bei Facebook
First seen on security-insider.de Jump to article: www.security-insider.de/cyberkriminalitaet-facebook-nutzerdaten-darknet-a-3151a10b6b43b5317ec168a643a85ec1/
-
SilverRAT Source Code Leaked Online: Here’s What You Need to Know
SilverRAT Source Code leaked on GitHub, exposing powerful malware tools for remote access, password theft, and crypto attacks before removal. First seen on hackread.com Jump to article: hackread.com/silverrat-source-code-leaked-online-you-need-to-know/
-
Marlboro-Chesterfield Pathology data breach impacted 235,911 individuals
SafePay ransomware hit Marlboro-Chesterfield Pathology, stealing personal data of 235,000 people in a major breach. SafePay ransomware hit Marlboro-Chesterfield Pathology, stealing personal data of 235,000 people in a major breach at the North Carolina-based lab. Marlboro-Chesterfield Pathology (MCP), founded in 1990 in Pinehurst, NC, is a full-service lab offering molecular, cytology, and pathology testing. Known…
-
No Power Outage, Just a Data One: Nova Scotia Hit by Ransomware Surge
Nova Scotia Power has confirmed it was the victim of a ransomware attack, weeks after initially alerting customers to a cybersecurity breach. The utility, owned by Emera Inc., revealed that the attack resulted in a data breach impacting approximately 280,000 customers”, but emphasized it has not paid the ransom demanded by the attackers. First seen…
-
Datenleck: Adidas bestätigt Abfluss von Kundendaten durch Cyberangriff
Daten einer noch unbekannten Anzahl von Adidas-Kunden sind wohl in die Hände eines Angreifers gelangt. Betroffene werden informiert. First seen on golem.de Jump to article: www.golem.de/news/datenleck-adidas-bestaetigt-abfluss-von-kundendaten-durch-cyberangriff-2505-196573.html
-
Kundendaten von Adidas gestohlen
Bei einem Cyberangriff auf einen Dienstleister sind Kundendaten von Adidas abgeflossen.Medienberichten zufolge sind Kundendaten von Adidas in die Hände eines Hackers gelangt. Demnach erfolgte der Zugriff über einen Dienstleister für den Kundenservice. “Wir haben umgehend alle erforderlichen Maßnahmen eingeleitet, um den Vorfall einzudämmen”, versicherte der Sportartikelhersteller am vergangenen Freitag (23. Mai 2025).Nach Angaben von Adidas…