Collaborate Disseminate
Breaches involving school-related vendors such as PowerSchool and Instructure are causing major headaches for schools, students, and parents. They are also getting more attention from Congress. While some breaches have not exposed core data or personal… Continue reading Homeland Security wants to know about the Instructure breach; we still want to know about the Navigate360 breach
Ah, more drama in the cybercrime ecosystem. Matthew J. Schwartz reports: A ransomware organization is suffering an extreme case of turnabout is fair play through a data breach that splaying internal correspondence across the internet. “The Gentl… Continue reading The Gentlemen Ransomware Group Becomes a Victim
From the way-too-slow-learning-curve dept. Steve Alder reports: Healthcare organizations are exposing a vast amount of patient data by failing to implement even basic security measures for DICOM servers, according to a recent Trend Micro TrendAI analys… Continue reading Thousands of DICOM servers exposed due to shameful lack of basic security measures
Jung Da-hyun reports: A recent data breach at the National Center for the Rights of the Child (NCRC), exposing sensitive personal records of adoptees, is drawing criticism from overseas adoptee groups and raising questions about the agency’s cred… Continue reading Korea’s child rights agency data mishandling exposes a lot of sensitive and personal info
In May 2015, DataBreaches reported that on April 30, 2015, the Department of Justice had announced the indictment of twin brothers Muneeb and Sohaib Akhter of Virginia. The twins. who were 23 years old, were indicted on charges of aggravated identity t… Continue reading A government contractor hired twin brothers who were convicted felons. A year later, they regretted it.
DataBreaches posted the following opinion piece on LinkedIn this morning in my Dissent Doe, PhD account: Last night, Canvas was restored, and the Instructure leak site listing was removed from the threat actors’ leak site. The listing is still no… Continue reading One size does not fit all — sometimes, victims probably should pay ransom
When Instructure did not contact ShinyHunters to negotiate any payment after ShinyHunters attacked them for a second time in April, the threat actors threatened to leak every school’s data, and posted a notice telling schools how to contact them… Continue reading Developing: ShinyHunters Hacks Instructure Again; Canvas Down
There’s an update to the ChipSoft ransomware attack. DigitalShield reports that although ChipSoft hasn’t revealed whether it paid Embargo ransom, it did disclose that some negotiations had occurred. One of the most striking elements of the… Continue reading Cybersecurity Stolen ChipSoft claims patient data confirmed destroyed following cyberattack
He’s 20 years old and has just been sentenced to 6 1/2 years in prison. The U.S. Attorney’s Office for the District of Columbia announced today: WASHINGTON – Marlon Ferro, 20, of Santa Ana, California, was sentenced today in U.S. Dist… Continue reading ‘GothFerrari’ Sentenced to 78 Months in Prison for Role in Massive Cryptocurrency Heist
Sarah Motter reports: Missouri regulators say a major national vendor is stonewalling their investigation into a cybersecurity breach that could affect millions of consumers. The Missouri Department of Commerce and Insurance now says it is escalating i… Continue reading Missouri regulators escalate pressure on Conduent over data breach potentially affecting millions