Syrian Man Sentenced for Wide-Ranging Hacking Conspiracy Conducted on Behalf of the Bashar Al Assad Regime

Ahmad Umar Agha (also known as Th3Pr0) had spent more than a decade as a fugitive for targeting of Western media entities, businesses, NGOs, and U.S. and allied government entities October 29 – Today a federal district court in the Eastern Distri… Continue reading Syrian Man Sentenced for Wide-Ranging Hacking Conspiracy Conducted on Behalf of the Bashar Al Assad Regime→

A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System

Vittoria Elliott reports: Earlier this year, sources tell WIRED, a contractor caused a security incident at the Department of Defense by connecting a secure centralized system used by multiple intelligence agencies to their personal account for Claude … Continue reading A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System→

Hackers hit UNM hospital, then apologize and offer patients $2,500. In a new statement, they reveal more about the incident.

In more than 20 years of blogging about breaches, DataBreaches has never seen ransomware threat actors offer monetary compensation to patients affected by their attack. We have seen threat actors regret hitting a hospital or a facility providing direct… Continue reading Hackers hit UNM hospital, then apologize and offer patients $2,500. In a new statement, they reveal more about the incident.→

HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network

DataBreaches.net previously covered the 2023 Lehigh Valley Health Network breach by AlphV (aka “BlackCat”). The breach garnered a lot of public attention when  the threat actors crossed a line by posting nude pictures of patients on their l… Continue reading HHS’ Office for Civil Rights Settles Ransomware Investigation of Lehigh Valley Health Network→

UK: Second Liverpool hospital investigates staff over breach of Southport attack patient records

ITV reports yet more insider snooping by hopsital employees in the wake of the Southport terror attack: A second hospital in Liverpool is carrying out an investigation into two potential instances of staff accessing medical records connected with the S… Continue reading UK: Second Liverpool hospital investigates staff over breach of Southport attack patient records→

JPN: Suntory Holdings says personal data of around 100,000 people leaked

Kyodo News reports: Leading beverage manufacturer Suntory Holdings Ltd. on Monday joined a growing list of firms reporting personal data leaks, saying information relating to around 100,000 people, including employees, was leaked following unauthorized… Continue reading JPN: Suntory Holdings says personal data of around 100,000 people leaked→

Hong Kong privacy watchdog investigates data leaks linked to major airlines and retailers

Dickson Tam reports: The Office of the Privacy Commissioner for Personal Data said it has received multiple notifications of data breaches involving Hong Kong Airlines, Cathay Pacific, Malaysia Airlines, as well as electronics retailers Yoho Hong Kong … Continue reading Hong Kong privacy watchdog investigates data leaks linked to major airlines and retailers→

KR: HYBE data breach exposes employee medical records, financial details

Lee Hae-rin reports: HYBE, the music agency behind K-pop group BTS, disclosed a cyberattack that exposed personal information of current and former employees and business partners, including resident registration numbers, credit card numbers and medica… Continue reading KR: HYBE data breach exposes employee medical records, financial details→