LATEST POST
Senate HELP committee chairman seeks info on NYC Health + Hospital data breach
Fierce Healthcare reports that a legislator is seeking answers about the recently disclosed breach affecting 1.8 million patients: Senate Health, Education, Labor and Pensions (HELP) Committee Chairman Sen. Bill Cassidy, M.D., R-La., is seeking information from New York City officials about a late 2025 cybersecurity breach at NYC Health + Hospitals, the largest public U.S. health system. […]
Data of 600,000 Gaza households exposed in WFP cyberattack
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000 households in Gaza, the UN’s food agency has confirmed, in what may be the largest-known breach of humanitarian beneficiary data to date. WFP is investigating a “security-related incident” in which “unauthorised actors” accessed personal information […]
Conduent Hack Victim Count Now Tops 62.2 Million
HealthcareInfoSecurity reports that Conduent has updated its already-large data breach numbers: The victim tally in back-office support services firm Conduent Business Services‘ 2024 hack has more than doubled to over 62.2 million people. The revised, eye-popping total Conduent reported to federal regulators apparently in recent days brings the breach closer to tying the nearly 79 […]
NSA is using Anthropic’s Mythos for cyber attacks
Financial Times reports: Anthropic is helping the US National Security Agency deploy its powerful Mythos AI model for offensive cyber operations, embedding engineers inside the agency despite an ongoing legal battle with the Pentagon. The San Francisco-based company had installed about half a dozen staff within the NSA as so-called forward-deployed engineers to guide […]
Hackers Asked Meta AI to Change the Passwords of High-Profile Instagram Accounts. It Did.
404 Media reports: Hackers say that they used Meta’s AI support chatbot to break into a host of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account. The claims coincide with a series of high-profile Instagram account takeovers, including the Barack Obama White House account, the Chief Master […]
Proposed State Laws For Breach Notification Could Increase Incident Response Costs
Two proposed state laws could impact incident response and costs: New Jersey Assembly Bill 1852 and New York Senate Bill 3078. As the National Law Review reports: New Jersey’s proposed bill narrows permissible notice methods to written notice or electronic notice. It removes the existing substitute-notice pathway that many companies rely on when notice costs are […]
California AG’s lawsuit claims 23andMe hack exposed 855,000 Californians’ genetic data
KRCR reports: California Attorney General Rob Bonta announced a lawsuit Thursday against genetic testing company 23andMe, now known as Chrome Holding Company, accusing the company of failing to protect millions of users’ sensitive genetic information during a massive 2023 data breach. According to the lawsuit, the breach exposed the personal information of nearly 7 million users […]
Fake ChatGPT download site infects Windows and Mac users with malware
Malwarebytes reports: A convincing fake website is impersonating OpenAI’s ChatGPT download page and infecting visitors with malware designed to steal passwords, browser data, cryptocurrency wallets, and other sensitive information. The site, openew[.]app, closely mimics OpenAI’s real ChatGPT download experience and offers what appear to be official desktop apps for both Windows and macOS. Instead, Windows users […]