Collaborate Disseminate
There’s an update to a previously reported case of a disgruntled former employee who tried to extort his employer, Brightly Software. Graham Cluley reports: When Cameron Curry discovered that his contract as a data analyst wasn’t going to … Continue reading Prison for data analyst who tried to extort $2.5 million from his employer
Max Rego reports: The Department of Justice (DOJ) on Tuesday unsealed an indictment charging 17 Iranian nationals with targeting American and foreign institutions via a cyber theft campaign on behalf of Iran’s Islamic Revolutionary Guard Corps (IRGC). … Continue reading DOJ secures indictment of 17 Iranians accused of ‘massive’ cyber theft campaign
Justin Timothy reports: The GuidePoint Research and Intelligence Team (GRIT) has responded to several recent ransomware incidents in which victims received an unexpected email from an ostensible third-party entity referring to itself as “Ransom Busters… Continue reading Beware the Ransomware Rescuer: Ransom Busters
Waqas reports: A server mistake by cybercriminals has exposed the inner workings of a global malware operation that used nearly 2,000 hacked WordPress websites to infect computers, steal files and deploy ransomware. Check Point Research identified the … Continue reading Server Mistake Exposes StopAndProtect’s Hacked WordPress Network
Tiffany Wang reports: A prolific Russian-speaking extortion group known for supply-chain attacks claimed to have stolen data from more than 40 firms including heavyweight corporations such as oil giant Shell and manufacturer General Electric. The group… Continue reading Clop Claims Data Theft From More Than 40 Companies
Tim Starks reports: The ransomware-as-a-service group Medusa has adopted fresh tactics to gain access and added hundreds of victims in a little more than a year, according to an updated U.S. government advisory published Tuesday. The gang is relying on… Continue reading Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
“Chaos” is a Ransomware-as-a-Service (RaaS) group first found online in March, 2025. On August 5, 2026, they added Healthcare Highways to their dedicated leak site, with a 24-hour countdown clock. Healthcare Highways describes itself as a … Continue reading 235 GB of PHI and internal documents dumped; Chaos claims it comes from Healthcare Highways
On August 13, DataBreaches was contacted anonymously on Signal by someone reporting that they had acquired more than 2 million records with clients’ phone numbers, usernames, and email addresses from TaxAct, which is owned by Cinven. TaxAct opera… Continue reading More than 2 million user records from TaxAct allegedly acquired; 450k already leaked
Olivier Acuna reports: Cryptocurrency broker Bits of Gold said personal data belonging to roughly 200,000 customers was stolen by hackers, the company reported. The Tel Aviv, Israel-based company reported the security breach on Sunday, saying a hacker … Continue reading Israel’s largest crypto broker Bits of Gold hit by data breach affecting 200,000 customers
There’s an update to a data leak incident reported in 2024. Phil Stilton reports: A federal judge has dismissed a proposed class action lawsuit against New Jersey-based background check company TABB Inc., finding the plaintiff failed to establish… Continue reading New Jersey Federal Judge Dismisses Data Breach Class Action Against Background Check Company