Collaborate Disseminate
Two reports that I have been reading today: ARcare ARcare in Arkansas is notifying people whose personal and/or medical information may have been accessed or acquired in a malware incident. The malware enabled an unauthorized actor to access or acquire… Continue reading ARcare reports breach; Smile Brands updates its disclosure to 2.6 million affected
Lorenzo Franceschi-Bicchierai reports: On Monday, the Bored Ape Yacht Club NFT project announced that its Instagram account had been hacked in a tweet. “There is no mint going on today. It looks like BAYC Instagram was hacked. Do not mint anything, cli… Continue reading Bored Ape Yacht Club Instagram Hacked, NFTs Worth Millions Stolen
Healthplex, Inc. in New York provides dental insurance plans. On November 24, 2021, an employee reportedly fell for a phishing attempt. As a result, the insurer notified 76,262 of their insured members whose personal information may have been impacted… Continue reading New York dental insurer reports phishing incident, French hospital group hit in ransomware incident
On April 20, DataBreaches.net reported that a threat actor contacted this site to say that a researcher, @ido_cohen2, had been scared off the internet after the threat actor’s colleague(s) used a fake Emergency Data Request (EDR) to obtain the re… Continue reading Silent no more: Exposing a campaign that intimidated researchers and journalists
From their notice: The Mental Health Center of Greater Manchester (“MHCGM”) is providing notice of a recent data security event that occurred at a third-party community partner MHCGM had used for data storage, Center for Life Management (&#… Continue reading NH: Center for Life Management breach impacted mental health clients
From their notification: Illinois Gastroenterology Group, PLLC (“IGG”) is providing notice of a recent incident that may affect the security of certain individuals’ information. On October 22, 2021, IGG discovered unusual activity wit… Continue reading Illinois Gastroenterology Group is providing notification of breach first discovered last October
Benjamin Freed reports: A school district in Coventry, Connecticut, notified families of its students this week that students’ data may have been swept up in a breach of one of its vendors earlier this year. The breach-notification letter, dated Tuesd… Continue reading Illuminate Education breach that affected NYC schools spreads to other districts
Seen on the county’s website, dated April 22, 2022: Notice of Data Privacy Event Scott County, Iowa (“Scott County”) is providing notice of a data privacy event. To date, we have no evidence of actual or attempted misuse of information as a resul… Continue reading Scott County, Iowa discloses data security incident
As reported previously, Lewis and Clark Community College was hit with a ransomware attack in November, 2021. They announced it immediately due to impact on the functioning of their systems, but it appears that they are just now issuing breach notifica… Continue reading Lewis and Clark Community College sends out notifications concerning ransomware incident
The Twitter account of a researcher known on Twitter as @ido_cohen2 is gone and their DarkFeed.io site has an “under maintenance” notice for the past day. According to a source, they have been scared away for good. Have they been? Over the … Continue reading Has a security researcher been scared away?