Collaborate Disseminate
Alexander Martin reports: South Korea’s largest online retailer, Coupang — often described as the country’s version of Amazon — apologized on Sunday after confirming that the personal details of 33.7 million customer accounts had been compromised. It i… Continue reading Data breach hits ‘South Korea’s Amazon,’ potentially affecting 65% of country’s population
Last night, DataBreaches received a tip about a website with a new report exposing the Nova RaaS gang (“Nova”). Nova (formerly known as RALord) is a ransomware-as-a-service (RaaS) group. The ransomware, reportedly based on Babuk source code… Continue reading BREAKING: Dos-Op exposes the Nova RaaS gang
Paul Penfold reports a failure-to-use-bcc field breach that exposed extremely sensitive data: A government agency whose job is to support abuse survivors is accused of instead causing harm by accidentally exposing the identities of more than 30 Lake Al… Continue reading ‘Trickery and f…ery’: Agency under fire over senior manager’s ‘serious’ privacy breach
From the U.S. Attorney’s Office, Eastern District of Arkansas: LITTLE ROCK—A Little Rock psychologist has been indicted for defrauding Medicare and Arkansas Blue Cross and Blue Shield (Blue Cross) and creating fictitious records to conceal her … Continue reading Little Rock Psychologist Indicted by Federal Grand Jury for Defrauding Medicare and Arkansas Blue Cross Blue Shield
Alexander Martin reports: A lack of liability for software vendors is among the most pressing issues putting Britain’s economic and national security at risk, an influential committee of lawmakers warned on Monday. The report by the Business and Trade … Continue reading Software companies must be held liable for British economic security, say MPs
Daryna Antoniuk reports: A 21-year-old tech entrepreneur and cybersecurity specialist was arrested in Moscow on treason charges late last week — the latest case targeting Russia’s own tech community. Details of the case are classified, but Russian medi… Continue reading Russia arrests young cybersecurity entrepreneur on treason charges
Suzanne Smalley reports: More than 70 civil liberties advocacy groups, academics and legal experts are calling for an investigation into a “collapse in enforcement activity” by the United Kingdom’s principal data protection regulator. The group’s lette… Continue reading UK privacy regulator has seen ‘collapse in enforcement activity,’ rights coalition says
Bill Toulas reports: Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in the npm registry in a new Shai-Hulud supply-chain campaign. The malicious packages have been added to NPM… Continue reading Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub
Caleb Skeath, Emily Pehrsson, and Jess Gonzalez Valenzuela of Covington and Burling write: On November 20, 2025, the Securities and Exchange Commission (“SEC”) announced that it was voluntarily dismissing the case it brought against SolarWinds Corp. (“… Continue reading SEC Voluntarily Dismisses SolarWinds Litigation
Rob Copeland, Stacy Cowley, and Devlin Barrett report: Some of the nation’s biggest banks were scrambling on Saturday night to assess the fallout from a large-scale hack of a vendor whose compromise could expose sensitive customer data. The vendor, Sit… Continue reading A Swath of Bank Customer Data Was Hacked. The F.B.I. Is Investigating.