Category Archives: Breach Incidents

Insufficient Data Security and Disregard for Student Data Privacy Plague the DeKalb County School District; With Commentary by Jim Siegl

Posted on by

Keegan Brooks writes: The DeKalb County School District has been making thousands of files containing sensitive student and staff information widely accessible to anyone in the district. Types of information exposed have included social security number… Continue reading Insufficient Data Security and Disregard for Student Data Privacy Plague the DeKalb County School District; With Commentary by Jim Siegl→

Sunday notes: Welldyne, North Alabama Bone & Joint Clinic disclose breaches affecting patient data

Posted on by

A Sunday two-fer on health data breaches: WellDyneRx, LLC (“WellDyne”) issued a press release on May 6 concerning an incident they first detected on December 2. The Florida-headquartered pharmacy benefits service provider’s investigat… Continue reading Sunday notes: Welldyne, North Alabama Bone & Joint Clinic disclose breaches affecting patient data→

Cybercrime loves company: Conti cooperated with other ransomware gangs

Posted on by

Seems to be a lot of Conti-related analyses this week, as well as the $10 million reward offered by the government for information leadings to Conti’s leaders. From Intel471: Software developers often depend on the collective knowledge of the ind… Continue reading Cybercrime loves company: Conti cooperated with other ransomware gangs→

Conti and Hive ransomware operations: Leveraging victim chats for insights

Posted on by

Kendall McKay and colleagues Paul Eubanks and Jaime Filson of Talos issued a report this week with some interesting insights. EXECUTIVE SUMMARY Through open-source research, we obtained and analyzed over four months of chat logs — more than 40 separate… Continue reading Conti and Hive ransomware operations: Leveraging victim chats for insights→

Breast Cancer Support Organization Leaks Data Despite Multiple Notifications?

Posted on by

SafetyDetectives recently reported that Breastcancer.org has been exposing sensitive information in a misconfigured AWS bucket. According to their report, exposed data included more than 50,000 registered user avatars and more than 300,000 post images … Continue reading Breast Cancer Support Organization Leaks Data Despite Multiple Notifications?→

ARcare reports breach; Smile Brands updates its disclosure to 2.6 million affected

Posted on by

Two reports that I have been reading today: ARcare ARcare in Arkansas is notifying people whose personal and/or medical information may have been accessed or acquired in a malware incident. The malware enabled an unauthorized actor to access or acquire… Continue reading ARcare reports breach; Smile Brands updates its disclosure to 2.6 million affected→