Tag: data-breach
-
Dialysis company DaVita reviewing data leaked by ransomware gang
The Interlock ransomware gang posted samples from a trove of data it is claiming to have stolen from the company. First seen on therecord.media Jump to article: therecord.media/dialysis-davita-reviewing-data-leak
-
Yale New Haven Health Notifying 5.5 Million of March Hack
Incident Is Largest Health Data Breach Reported So Far to Feds in 2025. Yale New Haven Health System is notifying more than 5.5 million patients that their information was potentially among data stolen in a March hack. The incident, which is among several other recent major hacks, ranks is the largest health data breach reported…
-
Yale New Haven Health (YNHHS) data breach impacted 5.5 million patients
Yale New Haven Health (YNHHS) announced that threat actors stole the personal data of 5.5 million patients in a cyberattack. Yale New Haven Health (YNHHS) disclosed a data breach that exposed personal information of 5.5 million patients following a cyberattack that occurred earlier this month. Yale New Haven Health System (YNHHS) is a nonprofit healthcare…
-
Breach Roundup: Cookie Bite Exposes MFA Achilles Heel
Tags: attack, breach, cyberattack, data, data-breach, google, mfa, microsoft, north-korea, ransomwareAlso, Blue Shield Breach Exposes 4.7M, Cyberattack Disrupts City Systems in Texas. This week, Cookie Bite bypasses MFA in Azure Entra ID, Microsoft fixed RDP Freezes, a ransomware attack in Catalonia, Blue Shield exposed data to Google, a cyberattack disrupted city systems in Texas, South Korean telecom breach exposed USIM data and a warning about…
-
Blue Shield Leaked Millions of Patient Info to Google for Years
Blue Shield of California exposed the health data of 4.7 million members to Google for years due to… First seen on hackread.com Jump to article: hackread.com/blue-shield-leaked-millions-patient-info-google-years/
-
Verizon DBIR Report: Small Businesses Identified as Key Targets in Ransomware Attacks
Tags: attack, breach, business, credentials, cyber, cybersecurity, data, data-breach, exploit, ransomware, security-incident, vulnerabilityVerizon Business’s 2025 Data Breach Investigations Report (DBIR), released on April 24, 2025, paints a stark picture of the cybersecurity landscape, drawing from an analysis of over 22,000 security incidents, including 12,195 confirmed data breaches. The report identifies credential abuse (22%) and exploitation of vulnerabilities (20%) as the predominant initial attack vectors, with a 34%…
-
Data breach class action costs mount up
Organisations exposed to the US market paid out over $150m in class action settlements in just six months. Security leaders must do more to address cyber gaps, respond better to incidents and demonstrate compliance First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622911/Data-breach-class-action-costs-mount-up
-
Frederick Health data breach impacts nearly 1 million patients
A ransomware attack in January at Frederick Health Medical Group, a major healthcare provider in Maryland, has led to a data breach affecting nearly one million patients. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/frederick-health-data-breach-impacts-nearly-1-million-patients/
-
Interlock ransomware claims DaVita attack, leaks stolen data
The Interlock ransomware gang has claimed the cyberattack on DaVita kidney dialysis firm and leaked data allegedly stolen from the organization. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/interlock-ransomware-claims-davita-attack-leaks-stolen-data/
-
Blue Shield of California Data Breach Affects 4.7 Million Members
A misconfigured tracking tool has exposed protected health information of 4.7 million Blue Shield members to Google Ads First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/blue-shield-california-data-breach/
-
Yale New Haven Health data breach affects 5.5 million patients
Yale New Haven Health (YNHHS) is warning that threat actors stole the personal data of 5.5 million patients in a cyberattack earlier this month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/yale-new-haven-health-data-breach-affects-55-million-patients/
-
Exposed and unaware: The state of enterprise security in 2025
The Edgescan 2025 Vulnerability Statistics Report offers a data-rich snapshot of the global cybersecurity landscape, drawing from thousands of assessments and penetration … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/24/edgescan-2025-vulnerability-statistics-report/
-
Blue Shield Exposed Health Data of 4.7 Million via Google Ads
Blue Shield of California has disclosed a significant data privacy incident affecting up to 4.7 million members, after discovering that protected health information (PHI) may have been inadvertently shared with Google Ads over nearly three years. The healthcare provider is now alerting potentially impacted members and implementing new safeguards to prevent future breaches. The breach…
-
Lemonade says applicant driver’s license numbers exposed
The company is notifying about 190,000 people after certain information used for car insurance quotes was left unencrypted. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/lemonade-drivers-license-exposed/745762/
-
KeyPlug Malware Server Leak Exposes Fortinet Firewall and VPN Exploitation Tools
Cybersecurity researchers have stumbled upon a treasure trove of operational tools and scripts linked to the KeyPlug malware, associated with the threat group RedGolf, also known as APT41. The server, which was inadvertently exposed for less than 24 hours, provided an unprecedented glimpse into the sophisticated tactics, techniques, and procedures (TTPs) employed by this advanced…
-
Bubble.io 0-Day Flaw Lets Attackers Run Arbitrary Queries on Elasticsearch
A vulnerability in Bubble.io, a leading no-code development platform, has exposed thousands of applications to data breaches. The flaw allows attackers to bypass security controls and execute arbitrary queries on Elasticsearch databases, potentially compromising sensitive user information. Security researchers reverse-engineered Bubble.io’s JavaScript code and HTTP headers to uncover flaws in how the platform encrypts and…
-
Entertainment venue management firm Legends International disclosed a data breach
Legends International disclosed a data breach from November 2024 that affected employees and visitors to its managed venues. Legends International is a global leader in sports and entertainment venue management, specializing in delivering comprehensive solutions for stadiums, arenas, and attractions. The company offers a 360-degree service platform that includes strategic planning, sales, partnerships, hospitality, merchandise,…
-
Canada Warns Cyberdefenders to Buttress Edge Devices
Canadian Cyber Agency Warns of Rising Chinese Cyberthreats.. The Canadian Center for Cybersecurity on Tuesday said it has observed increasing levels of malicious cyberactivity from China-linked hackers, including the group tracked Salt Typhoon. Exposed edge devices are at risk of attacks can be detected through mass scanning. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/canada-warns-cyberdefenders-to-buttress-edge-devices-a-28033
-
Entertainment services giant Legends International discloses data breach
Entertainment venue management firm Legends International warns it suffered a data breach in November 2024, which has impacted employees and people who visited venues under its management. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/entertainment-services-giant-legends-international-discloses-data-breach/
-
Over 900K pilfered credit card records leaked by BidenCash
First seen on scworld.com Jump to article: www.scworld.com/brief/over-900k-pilfered-credit-card-records-leaked-by-bidencash
-
Extensive Oregon agency data breach admitted by Rhysida ransomware gang
First seen on scworld.com Jump to article: www.scworld.com/brief/extensive-oregon-agency-data-breach-admitted-by-rhysida-ransomware-gang
-
Airport retailer agrees to $6.9 million settlement over ransomware data breach
According to a complaint filed by a former employee, cybercriminals exfiltrated records that held personal information like names and Social Security numbers belonging to 76,000 current and former employees of Paradies Shops. First seen on therecord.media Jump to article: therecord.media/airport-retailer-agrees-to-settlement-ransomware-data-breach
-
Your Network Is Showing Time to Go Stealth
Tags: access, ai, attack, authentication, backdoor, breach, china, cisco, cloud, computer, control, credentials, cyberattack, cybersecurity, data, data-breach, defense, detection, encryption, endpoint, exploit, firewall, firmware, fortinet, group, Hardware, infrastructure, mfa, network, software, theft, threat, tool, update, vpn, vulnerability, zero-day -
CISA warns companies to secure credentials amid claims of Oracle Cloud data breach
The agency is asking organizations to come forward if they detect suspicious activity or other evidence of a compromise. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-secure-credentials-oracle-cloud-data/745613/