Collaborate Disseminate
Noelle Crombie reports on today’s reminder of the insider threat: A former Snake River Correctional Institution employee accessed tens of thousands of Oregon Department of Corrections files over a six-month period last year, the agency announced … Continue reading Thousands of Oregon prison files accessed by prison worker
Michel Gribouille reports: A major French health-care payments middleman says hackers broke into a key authorization portal and may have exposed sensitive personal data, including France’s equivalent of a Social Security number, setting off warnings ab… Continue reading French Health Payments Breach Exposed ID Data, Fuels Fraud Fears
Jaimie Ding reports: Attorney General Rob Bonta filed the lawsuit against Chrome Holding Co., which 23andMe rebranded under after filing for bankruptcy last March. 23andme is known for its direct-to-consumer DNA test kits that provided customers inform… Continue reading California AG Bonta Sues Chrome Holding Co., Formerly Known as 23andMe, Over 2023 Data Breach
A Department of Justice press release on May 27 reports that a Romanian national who faced seven years in prison for selling access to an Oregon state government office in 2021 and other U.S. entities has been sentenced to 56 months in prison: Accordin… Continue reading Romanian National Sentenced for Selling Access to Networks of Oregon State Government Office
NL Times reports: The Royal Netherlands Marechaussee detained a 24-year-old Amsterdam-based cargo worker at Schiphol on Tuesday, May 19, on suspicion of unauthorized access to computer systems and the leaking of confidential company information, Luchtv… Continue reading NL: Schiphol cargo worker arrested over alleged data leaks to drug networks
The FBI has issued a Flash Alert about the Silent Ransom Group. Summary The Silent Ransom Group (SRG), also known as Luna Moth, Chatty Spider, and UNC3753, is targeting law firms using social engineering techniques. Through phone calls and phishing ema… Continue reading Silent Ransom Group Impersonating IT Personnel through Social Engineering
Zack Whittaker reports: A website called UK Visa Portal is publicly exposing the passports and selfie photos of applicants who signed up and paid the site to obtain a U.K immigration visa, TechCrunch has learned. An anonymous person notified TechCrunch… Continue reading UK Visa Portal spilled thousands of applicants’ passports and selfies online — and hasn’t fixed the leak
There is an update to an arrest made in Greece in November as part of Operation Endgame. Ekathimerini reports: A 39-year-old Albanian national known online as “Venom” was extradited to France in mid-May after his arrest last November at his apartment i… Continue reading Malware seller known as “Venom” extradited to France
Daryna Antoniuk reports: The Lithuanian Prosecutor General’s Office said Friday that attackers gained unauthorized access to more than 600,000 records managed by the Centre of Registers, the state agency responsible for handling property and legal enti… Continue reading Lithuania investigates theft of 600,000 state registry records
If you ask most people what breach PowerSchool experienced, their first response might be the 2024 hacking incident that affected tens of millions of students. But even before that breach, there was another significant breach involving PowerSchool that… Continue reading PowerSchool’s $17.25 Million Settlement Exposes Years of Student Data Tracking