Collaborate Disseminate
This is a multi-part interview with the individual known as “Nam3L3ss” who leaked more than 100 databases on a popular hacking forum and will soon be leaking many more. Read the Preface. In Part 1, he answered some questions about his backg… Continue reading Conversation with a “Nam3L3ss” Watchdog, Part 2: Methods
This is a multi-part interview with the individual known as “Nam3L3ss” who leaked more than 100 databases on a popular hacking forum and will soon be leaking many more. Read the Preface. In Part 1, we talked about his background and what mo… Continue reading Conversation with a “Nam3L3ss” Watchdog, Part 3: Ethics and Goals
Over on SuspectFile, Marco A. De Felice writes: This interview provides a detailed look at Dragon Ransomware, a group active in the cybercrime landscape that combines a defined organizational structure with advanced technological expertise. Their state… Continue reading The Fine Line Between Ideology and Crime: Understanding the True Purpose of Dragon Ransomware – The Interview
Mark P. Henriques of Womble Bond Dickinson has a content-rich post for defense lawyers: Class actions arising from data breach represented the fastest growing segment of class action filings. In 2023, more than 2000 class actions were filed, more than … Continue reading Defending Data Breach Class Actions
Ian Barker reports: Phishing remains one of the most significant cyber threats impacting organizations worldwide and a new report shows credential theft attacks surged dramatically in the second half of 2024, rising by 703 percent. The report from Slas… Continue reading Credential phishing attacks up over 700 percent
Abdulrahman H. Alamri and Lexie Mooney of Dragos write: The third quarter (July – September) of 2024 brought transformative shifts to the ransomware landscape, emphasizing its dynamic and continuously evolving nature. The ransomware threat ecosystem re… Continue reading Dragos Industrial Ransomware Analysis: Q3 2024
DataBreaches will leave it to others to critique Byte Federal’s data security prior to their reported incident(s), but DataBreaches is giving them a huge “bravo!” for their detailed disclosure that explains, to the best of their knowl… Continue reading A positive example of forthright breach disclosure
Some former employees of Granite School District in Utah are reporting frustration and anger with the district’s incident response to an attack by the Rhysida group. One has written up what he found when he examined the publicly leaked data. On S… Continue reading Granite School District breach worse than the district has revealed — former employee
There’s been what appears to be a concerning breach involving a mental health services provider. Data allegedly from Kitsap Mental Health Services (KMHS) in Washington has been leaked on a relatively new dark web site. DataBreaches sent an inquir… Continue reading Did Kitsap Mental Health Services suffer a breach of patient data?
How many patient data breaches can a covered entity have before HHS OCR opens a serious investigation into their compliance with the HIPAA Security Rule? According to DataBreaches’ count, UT Southwestern Medical Center in Texas has disclosed at l… Continue reading UT Southwestern Medical Center has disclosed at least four breaches since July 2023. Is HHS investigating?