LATEST POST
Polish police detain alleged cybercriminal with Phobos ransomware ties
The Record reports: A 47-year-old man was arrested in Poland for his alleged involvement with the Phobos ransomware operation. … Phobos was a ransomware gang that attacked more than 1,000 organizations worldwide, targeting hospitals, schools, government agencies and more. U.S. prosecutors previously said operators of Phobos and a related strain called 8Base collected upwards of […]
South Korea slaps $25M fine on Dior, Louis Vuitton, Tiffany over Salesforce breach
Bleeping Computer reports: South Korea has fined luxury fashion brands Louis Vuitton, Christian Dior Couture, and Tiffany $25 million for failing to implement adequate security measures, which facilitated unauthorized access and the exposure of data belonging to more than 5.5 million customers. All three brands are part of the Louis Vuitton Moët Hennessy (LVMH) group […]
Indian pharmacy chain giant exposed customer data and internal systems
TechCrunch reports: A security lapse by one of India’s largest pharmacy chains allowed outsiders to gain full administrative control of its platform, exposing customer order data and sensitive drug-control functions, TechCrunch has exclusively learned. The issue affected DavaIndia Pharmacy, the pharmacy arm of Zota Healthcare, which operates a large network of retail outlets across India. […]
Texas Attorney General Ken Paxton Demands Information from Blue Cross Blue Shield of Texas and Conduent as Part of Investigation into Data Breach
A press release from the Texas State Attorney General: Attorney General Ken Paxton issued Civil Investigative Demands (“CIDs”) to Blue Cross Blue Shield of Texas (“BCBS”) and Conduent Business Services LLC (“Conduent”), demanding documents and information pertinent to the investigation of the Conduent data breach that exposed the sensitive personal data of approximately four million […]
More US investors sue South Korean government over handling of Coupang data breach
TechCrunch reports: Coupang’s massive data breach in South Korea has now become a geopolitical flashpoint as a growing number of the company’s U.S. investors take legal action against the South Korean government. What began as a regulatory investigation into data security failures has expanded into a broader dispute over alleged unfair treatment of the U.S.-headquartered company. While […]
Comcast agrees to $117.5M data breach class action settlement over 2023 “Citrix Bleed” Incident
Top Class Actions reports: Read more at Top Class Actions. The official settlement website has not been posted yet. All consumers should be alert to the possibility that you may receive scam or phishing attempts claiming you are entitled to a settlement. Wait for the official settlement site to learn how class members are being […]
Discord Age Verification Faces Backlash — Could Your ID Leak Like Before?
The International Business Times reports: Discord is preparing to enforce a global age verification system from early March that will require users to confirm their age using a face scan or a government‑issued ID before accessing adult content. The new measures are designed to protect younger users but have prompted backlash from privacy advocates and […]
Hacktivist Exposes 536,000 Stalkerware Buyers in Security Breach
When the spyer becomes the spyee? TechBuzz reports: A hacktivist just turned the tables on half a million people who paid to spy on others. More than 536,000 payment records from customers of phone surveillance apps like uMobix, Xnspy, and Geofinder hit the open web this week, exposing email addresses and partial card numbers of […]