Collaborate Disseminate
In a special edition of “No need to hack when it’s leaking,” DataBreaches reports on a software vendor that, despite multiple attempts by multiple parties, continues to expose confidential and sealed court records. Overview As a matter of policy, Data… Continue reading Months After Being Notified, a Software Vendor is Still Exposing Confidential and Sealed Court Records
After days of endlessly urging Salesforce or companies to pay them so that their data would not be leaked, the deadline for Salesforce to pay came and went. And as it went, ScatteredLAPSUS$Hunters leaked data from six of the 39 companies listed on its … Continue reading From sizzle to drizzle to fizzle: The massive data leak that wasn’t
In November 2021, when “g0retrance” defaced the website of the Massachusetts Interscholastic Athletic Association (MIAA) with a message saying “PWNED,” the hacker, who also used the moniker “netsaosa,” left a message… Continue reading In a few days, the PowerSchool hacker will learn his sentence, and his life as he has known it will end.
Harvey Cashore, Eva Uguen-Csenge, and Mark Kelley report: Kelowna nurse Ashley Stone sits down at her kitchen table, opens a bulky blue folder containing a paper trail of 10 years of multiple frauds committed in her name by imposters and gets right to… Continue reading They were victims of a massive data breach in 2009. Interior Health denied it for a decade.
On December 8, 2024, DataBreaches reported that Watsonville Community Hospital in California was continuing to respond to what they referred to as a cyberattack on November 29. No gang had claimed responsibility at that point, patients hadn’t bee… Continue reading Watsonville Community Hospital had a data breach — or two. It would be helpful to know which.
IT Security News reports: Telstra, one of Australia’s leading telecommunications companies, has denied claims made by the hacker group Scattered Spider that it suffered a massive data breach compromising nearly 19 million personal records. The company … Continue reading Telstra Denies Scattered Spider Data Breach Claims Amid Ransom Threats
As everyone expected, it was only a matter of time before the most recent version of BreachForums was seized, and last night, it happened. This time, though, there is no announcement from ShinyHunters about rebuilding the forum and making it stronger a… Continue reading Don’t breathe that sigh of relief just yet: BreachForums is gone, but the Salesforce leak site isn’t
As predicted a few days ago, BreachForums was seized. The splash page is now up. It does not have any cute avatars with characters in handcuffs and no text about all the entities that cooperated. It simply says, “This Domain Has Been Seized,̶… Continue reading BreachForums Seized — Again!
Waqas reports: In September 2025, SonicWall reported a data breach of its cloud backup service, stating that fewer than 5% of its customers were affected. At the time, the issue appeared contained and under investigation. That changed today after Sonic… Continue reading SonicWall Says All Firewall Backups Were Accessed by Hackers
Theresa Defino reports: Covered entities (CEs) and business associates (BAs) might be forgiven if the most recent HHS Office for Civil Rights (OCR) HIPAA enforcement action evoked little more than a yawn. Yes, the $175,000 payment isn’t a particularly … Continue reading Missing Risk Analysis Cost NY CPA Firm $175K—But Not the Big Group Whose Data Was Breached in 2019