Collaborate Disseminate
Ben Smith reports: Lawmakers are only now learning that hackers breached a congressional medical contractor more than two months ago. RXNT, a healthcare software company used by the Office of the Attending Physician (OAP) to manage prescription service… Continue reading Congress Learns of Prescription Data Hack Months Later
Claim Depot reports: Extant Aerospace, a defense and space electronics company based in Melbourne, Florida, disclosed a data breach that affected 3,012 individuals in the United States. The company, legally known as Symetrics Industries LLC, manufactur… Continue reading Extant Aerospace Data Breach Exposed SSNs for More Than 3,000 People
Media outlets have been understandably eager to learn whether Instructure paid ShinyHunters after the latter attacked them for a second time on May 7. Considering that they pledged to be more transparent, DataBreaches doesn’t fully understand why… Continue reading Another detail emerges about Instructure’s agreement with ShinyHunters; Debate continues about whether to pay
Google’s Threat Intelligence Group writes: Google Threat Intelligence Group (GTIG) has continued to track an expansive extortion campaign by UNC6671, a threat actor operating under the “BlackFile” brand, that targets organizations via… Continue reading Welcome to BlackFile: Inside a Vishing Extortion Operation
Scott McClallen reports: A federal jury in the Eastern District of Michigan convicted a Michigan nurse and home health care agency owner yesterday for operating a $1.6 million scheme to defraud Medicare. Court documents say that Ruby Scott, 55, of Farm… Continue reading Michigan Nurse Convicted in $1.6M Medicare Fraud Scheme Using Stolen Patient Records
The Supreme Court of California has ruled in J.M. v. Illuminate Education, Inc., a case closely watched by those concerned about holding edtech vendors liable in the event of a data breach. As background on the case: In December 2021, Illuminate suffer… Continue reading Illuminate wins another round in court, but it may not all be over
On the Spot News reports: An investigation has revealed than nearly 50 staff at a Merseyside hospital group accessed horrific details of the condition of those attacked in Southport. The investigation has only just come to light, with victims finding o… Continue reading UK: Hospital workers inappropriately accessed details of Southport victims, investigation finds
Dalbir Singh & Associates ignored multiple attempts at responsible disclosure but finally locked down its misconfigured Amazon bucket, only to expose it again. Now the data is in the hands of criminals trying to extort them. On April 6, DataBreach… Continue reading No need to hack when it’s leaking: Dalbir Singh & Associates law firm edition
Jonathan Greig reports: German and U.S. authorities arrested the alleged administrator behind Dream Market, a popular dark web forum that shut down in 2019. During a May 7 raid on three locations, German and U.S. law enforcement arrested Owe Martin And… Continue reading Alleged Dream Market admin arrested in Germany
In August 2025, research agency Bevolkingsonderzoek Nederland revealed that half a million women who had undergone cervical cancer screening had their data stolen. The research agency paid Nova ransomware gang’s demand, which Nova confirmed, but … Continue reading NL: Dutch watchdog says healthcare lab failed data security rules before cyberattack affecting 850,000