Collaborate Disseminate
Eduard Kovacs reports: Private equity giant Apollo Global Management has disclosed a data breach that exposed sensitive personal information. According to a data breach notice sent to affected individuals, a social engineering attack enabled threat act… Continue reading Personal Information Exposed in Apollo Global Data Breach
Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated leak site, but without any substantive proof — only a few screenshots showing access to a user account on reliaquest.okta[.]com/enduser/settings. ReliaQuest did no… Continue reading ShinyHunters provided no real proof they hacked ReliaQuest– because they didn’t get anywhere: ReliaQuest
Cybersecurity firm ReliaQuest has reported its research findings about ShinyHunters multiple times recently. On August 17, @ReliaQuestTR tweeted that they were tracking yet another ShinyHunters campaign. But after another forum user replied on August … Continue reading ShinyHunters claims hack of ReliaQuest but provides no proof
WSFB reports: State officials say a data breach involving the Connecticut Medicaid program’s provider portal exposed payment and claims information tied to roughly 41,000 HUSKY Health members. The Connecticut Department of Social Services said Gainwell… Continue reading Connecticut says data from 41,000 Medicaid members exposed in portal breach; the second portal incident this year
In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not paid them and whose data was leaked. By June 29, there were 48 law firms. Now there are 64, and, in somewhat surprising claims, SRG says a recent attack was actuall… Continue reading Troutman Pepper Locke Silent as Threat Actors Leak Client Data, Tens of Thousands of SSNs
The phone rang, and when “Eddie” (not his real name) picked up, the caller identified herself as being from American Express. Even though Eddie didn’t have any American Express account, he wasn’t initially suspicious. According … Continue reading Scammers Pose as NYPD Officers in “Well-Done” Video-Call Impersonation Scam
So I didn’t know what the doctrine of bailment is. If you don’t either, you may want to read this post by Jake L. Ramsey of Offit Kurman. It starts by noting the presentation at BlackHat by two OpenAI engineers about the Hugging Face incid… Continue reading AI, Data Breaches, and an Old Lesson from the Law of Bailment
Amar Ćemanović reports: Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The event has reportedly exposed sensitive personal information, including Social Security numbers, fina… Continue reading Largest Applebee’s franchisee says hackers stole sensitive data
There’s an update to a previously reported case of a disgruntled former employee who tried to extort his employer, Brightly Software. Graham Cluley reports: When Cameron Curry discovered that his contract as a data analyst wasn’t going to … Continue reading Prison for data analyst who tried to extort $2.5 million from his employer
Max Rego reports: The Department of Justice (DOJ) on Tuesday unsealed an indictment charging 17 Iranian nationals with targeting American and foreign institutions via a cyber theft campaign on behalf of Iran’s Islamic Revolutionary Guard Corps (IRGC). … Continue reading DOJ secures indictment of 17 Iranians accused of ‘massive’ cyber theft campaign