Collaborate Disseminate
Sergiu Gatlan reports: The Norwegian National Security Authority (NSM) has confirmed that attackers used a zero-day vulnerability in Ivanti’s Endpoint Manager Mobile (EPMM) solution to breach a software platform used by 12 ministries in the count… Continue reading Norway says Ivanti zero-day was used to hack govt IT systems
Marianne Kolbasuk McGee reports: A global law firm is notifying nearly 153,000 individuals of a hacking incident that compromised several client files. The files contained sensitive personal information and affects vision care patients who had been vic… Continue reading Law Firm Hack Affects Victims of an Earlier Breach Again
Maya Miller reports an update by California Public Employee and Retirement System on the MOVEit breach by their vendor, PBI Research/Berwyn Group: In the Monday update, Frost said CalPERS has received nearly 4,000 calls about the breach at its own cust… Continue reading CalPERS CEO gives update on data hack that exposed Social Security numbers, birth dates
C. T. Bowen reports: Hillsborough County has notified more than 70,000 people that a global data breach may have put their personal information at risk. The breach involved the MOVEit file transfer tool, a third-party service that complies with federal… Continue reading Hillsborough notifies 70,000 of potential data breach in health, aging services
Panorama Eyecare in Colorado is a physician-owned firm providing business associate services to vision care providers: Earlier today, the firm was added to LockBit’s leak site with a claim that 798 GB of data had been exfiltrated from four of the… Continue reading Another business associate attack results in theft of patient data — Panorama Eyecare
Earlier this week, DataBreaches reported that Imagine360 had the unfortunate experience of discovering that two of their file-sharing platforms had both suffered breaches within days of each other: Citrix and Fortra/GoAnywhere. Today we bring you anoth… Continue reading College learns that two of its vendors were impacted by MOVEit breach.
Justin Henry reports: By exploiting a vulnerability in a widely used file transfer application, hackers were able to access the internal information of several large organizations, including three Am Law 50 law firms, highlighting the vulnerability of … Continue reading If Kirkland & Ellis Can’t Avoid Cyberattacks, Who Can?
With all the big attacks on third-party vendors, it’s not surprising that some entities are reporting two or more breaches in a short period of time. Imagine360, LLC, is a self-funded health plan for employers. On or around January 30, Imagine360… Continue reading Imagine360 discovers that two of its file-sharing platforms were hit within days of each other.
Joseph Menn reports: A satellite communications system serving the Russian military was knocked offline by a cyberattack late Wednesday and remained mostly down on Thursday, in an incident reminiscent of an attack on a similar system used by Ukraine at… Continue reading Cyberattack knocks out satellite communications for Russian military
Carly Page reports: Taiwan Semiconductor Manufacturing Company (TSMC), the world’s largest contract chipmaker, has confirmed it’s experienced a data breach after being listed as a victim by the LockBit ransomware gang. The Russia-linked LockBit r… Continue reading TSMC confirms data breach after LockBit cyberattack on third-party supplier