“Cleanup in Aisle 4:” Telegram is a mess of fake ShinyHunters channels

On August 9, DataBreaches reported on a Telegram channel with a name that combined the names of three groups: ShinyHunters, Scattered Spider, and Lapsus$.  At the time, DataBreaches noted: Commenters on reading the new Telegram channel call it “schizo,… Continue reading “Cleanup in Aisle 4:” Telegram is a mess of fake ShinyHunters channels→

Intel Websites Compromised, Allowing Hackers Access to Employee and Confidential Data

Divya reports: A series of critical security flaws in Intel’s internal web infrastructure exposed the personal details of more than 270,000 employees and potentially provided attackers with access to sensitive corporate and supplier information. The di… Continue reading Intel Websites Compromised, Allowing Hackers Access to Employee and Confidential Data→

Noah Urban aka “King Bob” of Scattered Spider, sentenced to 10 years in prison, $13 million restitution

In April, Noah Michael Urban pleaded guilty in a Florida courtroom to charges he had faced in two separate federal cases. Yesterday, he was sentenced in a Florida courtroom to ten years in prison and $13 million in restitution. In the Florida case, Urb… Continue reading Noah Urban aka “King Bob” of Scattered Spider, sentenced to 10 years in prison, $13 million restitution→

UK Cannabis Clinic CB1 Medical Investigating As Patients Affected By Major Data Leak

Sarah Sinclair reports: A UK medical cannabis clinic is carrying out investigations after a substantial amount of patients’ information was leaked in a major data breach. In an email sent to patients on Monday 18 August, CB1 Medical confirmed it had id… Continue reading UK Cannabis Clinic CB1 Medical Investigating As Patients Affected By Major Data Leak→

Two agencies in one state investigated and fined Healthplex. Was that one too many?

DataBreaches is generally a great fan of state attorneys general taking enforcement action stemming from data breaches where the security was really subpar or the entity did not notify those affected in a reasonable amount of time. But two enforcement … Continue reading Two agencies in one state investigated and fined Healthplex. Was that one too many?→

Two agencies in one state investigated and fined Healthplex. Was that one too many?

DataBreaches is generally a great fan of state attorneys general taking enforcement action stemming from data breaches where the security was really subpar or the entity did not notify those affected in a reasonable amount of time. But two enforcement … Continue reading Two agencies in one state investigated and fined Healthplex. Was that one too many?→

When a deal is not a done deal: Nova demands higher payment from Clinical Diagnostics

Last week, it appeared that Clinical Diagnostics (“Eurofins”) had paid a gang’s demands not to leak patient data that Nova had exfiltrated during a ransomware attack in July. Clinical Diagnostics in the Netheralands held patient data … Continue reading When a deal is not a done deal: Nova demands higher payment from Clinical Diagnostics→