Collaborate Disseminate
As seen on the SLSH Telegram channel: We would like to announce that we have gained full access to REsecurity systems 🙂 We took everything: – All internal chats and logs – Full employee data: names, emails, tokens, etc.. – Threat inte… Continue reading ShinyHunters claims to have compromised Resecurity, but it looks like they fell for a honeypot
1News reports: At least 108,000 users of one of the country’s largest patient information portals, ManageMyHealth, are believed to have been affected by a data breach on Wednesday. Impacted customers who used the online service, which allowed cli… Continue reading NZ: ManageMyHealth data breach: More than 108k users potentially affected
Mark Emem reports a settlement in litigation stemming from a Consulting Radiologists Ltd. data breach in February 2024. The incident had been added to LockBit’s leak site in April 2024. A US healthcare firm has agreed to pay out millions of dolla… Continue reading Healthcare Firm Handing $2,000,000+ To Customers After Data Breach Exposes ‘Highly Confidential’ Information of 512,000 People
Caleb Skeath, Micaela McMurrough, Alexandra Bruer, and Bryan Ramirez of Covington and Burling write: On December 16, 2025, the U.S. National Institute of Standards and Technology (“NIST”) published a preliminary draft of the Cybersecurity Framework Pro… Continue reading NIST Publishes Preliminary Draft of Cybersecurity Framework Profile for Artificial Intelligence for Public Comment
Sergiu Gatlan reports: The European Space Agency (ESA) confirmed that attackers recently breached servers outside its corporate network, which contained what it described as “unclassified” information on collaborative engineering activities… Continue reading European Space Agency confirms breach of “external servers”
This is the press release referred to in a recent post: NEW YORK – New York Attorney General Letitia James today announced that her office has secured $500,000 in penalties from OrthopedicsNY, LLP (OrthopedicsNY) for failing to protect patients’ privat… Continue reading Attorney General James Secures $500,000 from Capital Region Health Care Provider for Failing to Protect Patients’ Information
A federal district court in the Southern District of Florida has accepted the guilty pleas of two men to conspiring to obstruct, delay, or affect commerce through extortion in connection with ransomware attacks occurring in 2023. According to court doc… Continue reading Two Cybersecurity Professionals Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware
Eric T. Berkman reports: A software company could not face “downstream” liability for a data breach that resulted in an end-user having to settle a class action suit, the 1st U.S. Circuit Court of Appeals has decided. The end-user, Zoll Services, purch… Continue reading Software company lacked ‘downstream’ liability for data breach
Jonathan Greig reports: U.S. and Australian cyber agencies confirmed that hackers are exploiting a vulnerability that emerged over the Christmas holiday and is impacting data storage systems from the company MongoDB. The issue drew concern on December … Continue reading US, Australia say ‘MongoBleed’ bug being exploited
Suzanne Smalley reports: France’s data protection regulator has fined the software company Nexpublica France €1.7 million ($2 million) for poor cybersecurity practices in the wake of a data breach. In November 2022, users of a Nexpublica portal reporte… Continue reading French software company fined $2 million for cyber failings leading to data breach