Google Database Reveals Thousands of Privacy Incidents

Joseph Cox reports: Google has accidentally collected childrens’ voice data, leaked the trips and home addresses of car pool users, and made YouTube recommendations based on users’ deleted watch history, among thousands of other employee-reported priva… Continue reading Google Database Reveals Thousands of Privacy Incidents

Ca: New online breach reporting forms for federal institutions and businesses

From the Office of the Privacy Commissioner of Canada, May 24: The Office of the Privacy Commissioner of Canada (OPC) has launched a new online breach reporting form for federal institutions subject to the Privacy Act as well as updated its online brea… Continue reading Ca: New online breach reporting forms for federal institutions and businesses

Swiss law enforcement actions appear linked to seizure of BreachForums

There have been a few developments likely related to the seizure of BreachForums. As a preview, recall that Kantonspolizei Zürich was one of the cooperating entities in the takedown and that the seizure notice had two avatars behind bars. One avatar wa… Continue reading Swiss law enforcement actions appear linked to seizure of BreachForums

Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

Zack Whittaker reports: The ransomware gang that hacked into U.S. health tech giant Change Healthcare used a set of stolen credentials to remotely access the company’s systems that weren’t protected by multifactor authentication (MFA), according to the… Continue reading Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

Cybersecurity firm suspects Russia-linked hacking group behind cyberattack on Texas water facility

Tom Olson reports: A hacking group with ties to the Russian government is suspected of carrying out a cyberattack in January that caused a tank at a Texas water facility to overflow, experts from US cybersecurity firm Mandiant said Wednesday. The attac… Continue reading Cybersecurity firm suspects Russia-linked hacking group behind cyberattack on Texas water facility

Ie: Authorities investigating ransomware attack on charity that works with vulnerable children

The Journal reports: A police investigation has been launched after a charity that works with vulnerable children suffered a data breach in a ransomware attack. Extern, a cross-border social justice charity with offices in Belfast and Co Kildare, has c… Continue reading Ie: Authorities investigating ransomware attack on charity that works with vulnerable children

Hacker’s attempt to sue police is ‘abuse of process’

RL360 Insurance Company Limited is an international offshore savings, protection and investment provider, headquartered in the Isle of Man. According to Wikipedia, it is part of the International Financial Group Limited. Threefm reports that John Henry… Continue reading Hacker’s attempt to sue police is ‘abuse of process’

Updating: Fake seizure notice appears on AlphV site as part of suspected exit scam

In the wake of an accusatory post on Ramp Forum that claimed that AlphV admins allegedly stole a $22 million payment to an affiliate by Change Healthcare and then suspended the affiliate’s account, AlphV hastened what appears to be an exit scam o… Continue reading Updating: Fake seizure notice appears on AlphV site as part of suspected exit scam

HHS Statement Regarding the Cyberattack on Change Healthcare

March 5. The U.S. Department of Health and Human Services (HHS) is aware that Change Healthcare – a unit of UnitedHealth Group (UHG) – was impacted by a cybersecurity incident in late February. HHS recognizes the impact this attack has had on health ca… Continue reading HHS Statement Regarding the Cyberattack on Change Healthcare