Collaborate Disseminate
Google’s Threat Intelligence Group writes: Google Threat Intelligence Group (GTIG) has continued to track an expansive extortion campaign by UNC6671, a threat actor operating under the “BlackFile” brand, that targets organizations via… Continue reading Welcome to BlackFile: Inside a Vishing Extortion Operation
Scott McClallen reports: A federal jury in the Eastern District of Michigan convicted a Michigan nurse and home health care agency owner yesterday for operating a $1.6 million scheme to defraud Medicare. Court documents say that Ruby Scott, 55, of Farm… Continue reading Michigan Nurse Convicted in $1.6M Medicare Fraud Scheme Using Stolen Patient Records
The Supreme Court of California has ruled in J.M. v. Illuminate Education, Inc., a case closely watched by those concerned about holding edtech vendors liable in the event of a data breach. As background on the case: In December 2021, Illuminate suffer… Continue reading Illuminate wins another round in court, but it may not all be over
On the Spot News reports: An investigation has revealed than nearly 50 staff at a Merseyside hospital group accessed horrific details of the condition of those attacked in Southport. The investigation has only just come to light, with victims finding o… Continue reading UK: Hospital workers inappropriately accessed details of Southport victims, investigation finds
Dalbir Singh & Associates ignored multiple attempts at responsible disclosure but finally locked down its misconfigured Amazon bucket, only to expose it again. Now the data is in the hands of criminals trying to extort them. On April 6, DataBreach… Continue reading No need to hack when it’s leaking: Dalbir Singh & Associates law firm edition
Jonathan Greig reports: German and U.S. authorities arrested the alleged administrator behind Dream Market, a popular dark web forum that shut down in 2019. During a May 7 raid on three locations, German and U.S. law enforcement arrested Owe Martin And… Continue reading Alleged Dream Market admin arrested in Germany
In August 2025, research agency Bevolkingsonderzoek Nederland revealed that half a million women who had undergone cervical cancer screening had their data stolen. The research agency paid Nova ransomware gang’s demand, which Nova confirmed, but … Continue reading NL: Dutch watchdog says healthcare lab failed data security rules before cyberattack affecting 850,000
Maxine Brigue reports: The Information Commissioner’s Office (ICO) has fined utility company South Staffordshire Water £963,900 after a cyber attack that resulted in users’ personal information being extracted and published on the dark web. The fine wa… Continue reading UK: Regulator fines water company almost £1m for cybersecurity failures
James Lowson reports: A police officer based in Aylesbury was found guilty of breaching data protection laws after she photographed confidential information. At Reading Magistrates’ Court on April 28, PC Lily Maxey was found guilty of breaching data pr… Continue reading UK: Aylesbury police officer found guilty of data protection breaches after snapping confidential information
Connor Jones reports: A US commercial bank just tattled on itself to the Securities and Exchange Commission (SEC) for plugging a bunch of customer data into an unauthorized AI application. Community Bank, which operates in southwestern Pennsylvania, Oh… Continue reading US bank reports itself for revealing customer data to unauthorized AI application