Collaborate Disseminate
Maxine Brigue reports: The Information Commissioner’s Office (ICO) has fined utility company South Staffordshire Water £963,900 after a cyber attack that resulted in users’ personal information being extracted and published on the dark web. The fine wa… Continue reading UK: Regulator fines water company almost £1m for cybersecurity failures
James Lowson reports: A police officer based in Aylesbury was found guilty of breaching data protection laws after she photographed confidential information. At Reading Magistrates’ Court on April 28, PC Lily Maxey was found guilty of breaching data pr… Continue reading UK: Aylesbury police officer found guilty of data protection breaches after snapping confidential information
Connor Jones reports: A US commercial bank just tattled on itself to the Securities and Exchange Commission (SEC) for plugging a bunch of customer data into an unauthorized AI application. Community Bank, which operates in southwestern Pennsylvania, Oh… Continue reading US bank reports itself for revealing customer data to unauthorized AI application
Breaches involving school-related vendors such as PowerSchool and Instructure are causing major headaches for schools, students, and parents. They are also getting more attention from Congress. While some breaches have not exposed core data or personal… Continue reading Homeland Security wants to know about the Instructure breach; we still want to know about the Navigate360 breach
Ah, more drama in the cybercrime ecosystem. Matthew J. Schwartz reports: A ransomware organization is suffering an extreme case of turnabout is fair play through a data breach that splaying internal correspondence across the internet. “The Gentl… Continue reading The Gentlemen Ransomware Group Becomes a Victim
From the way-too-slow-learning-curve dept. Steve Alder reports: Healthcare organizations are exposing a vast amount of patient data by failing to implement even basic security measures for DICOM servers, according to a recent Trend Micro TrendAI analys… Continue reading Thousands of DICOM servers exposed due to shameful lack of basic security measures
Jung Da-hyun reports: A recent data breach at the National Center for the Rights of the Child (NCRC), exposing sensitive personal records of adoptees, is drawing criticism from overseas adoptee groups and raising questions about the agency’s cred… Continue reading Korea’s child rights agency data mishandling exposes a lot of sensitive and personal info
In May 2015, DataBreaches reported that on April 30, 2015, the Department of Justice had announced the indictment of twin brothers Muneeb and Sohaib Akhter of Virginia. The twins. who were 23 years old, were indicted on charges of aggravated identity t… Continue reading A government contractor hired twin brothers who were convicted felons. A year later, they regretted it.
DataBreaches posted the following opinion piece on LinkedIn this morning in my Dissent Doe, PhD account: Last night, Canvas was restored, and the Instructure leak site listing was removed from the threat actors’ leak site. The listing is still no… Continue reading One size does not fit all — sometimes, victims probably should pay ransom
When Instructure did not contact ShinyHunters to negotiate any payment after ShinyHunters attacked them for a second time in April, the threat actors threatened to leak every school’s data, and posted a notice telling schools how to contact them… Continue reading Developing: ShinyHunters Hacks Instructure Again; Canvas Down