Power company in Japan fears data breach after losing storage drive containing customer details

Buranond Kijwatanachai reports: Private personal information of nearly 11 million people may have been leaked after a Kyushu power company lost a storage drive earlier this year. According to Asahi Shimbun, the storage drive was discovered missing on 2… Continue reading Power company in Japan fears data breach after losing storage drive containing customer details

ZA: Confidential medical records of 3,000 South African Police Service officers leaked

Genevieve Serra reports: In a shocking breach of privacy, the confidential medical records of almost 3 000 local police officers have been leaked among staff, raising serious concerns about the security of sensitive data within the South African Police… Continue reading ZA: Confidential medical records of 3,000 South African Police Service officers leaked

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

Sergiu Gatlan reports: CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a critical vulnerability exploited in zero-day attacks by Qilin ransomware affiliates. Unauthenticated … Continue reading CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse

Waqas reports: Meta has disclosed a security incident involving an Instagram account recovery tool after attackers used a flaw to send password reset links to email addresses that were not connected to the targeted accounts. According to a data breach … Continue reading Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse

FTC Gives Final Approval to Order Against Illuminate Settling Allegations It Failed to Secure Students’ Personal Data

From an FTC press release of June 5: Following a public comment period, the Federal Trade Commission finalized a modified order requiring Illuminate Education Inc. to implement a data security program, limit collection and retention of consumer data, a… Continue reading FTC Gives Final Approval to Order Against Illuminate Settling Allegations It Failed to Secure Students’ Personal Data