Multiple French news outlets are reporting that four men in their 20’s, alleged to be members of the ShinyHunters hacking group, have been arrested. Their real names have not been released publicly, but their online monikers were “ShinyHunters,” “Noct,” “Depressed,” and “Hollow.” French law enforcement has not issued any official statement confirming any arrests or […]
NetSec reports: The Qilin ransomware group has been noticed exploiting two critical vulnerabilities present in FortiOS/FortiProxy equipment. Although the group seems to be focusing on countries with Spanish language, it is likely that attacks exploiting these vulnerabilities will spread to other countries. The Qilin ransomware-as-a-service (RaaS) operation appeared in August 2022, known first as Agenda. Although it is not […]
The Record reports: Ransomware hackers stole the Social Security numbers and health insurance information for more than 740,000 people during an attack on a prominent Michigan hospital network. McLaren Health Care filed documents on Friday concerning a ransomware attack that took place in August 2024 — the second cyber incident to impact the healthcare giant in 12 months. The […]
Reuters reports: A U.S. judge granted preliminary approval on Friday to a $177-million settlement that resolves lawsuits against AT&T T.N over breaches in 2024 that exposed personal information belonging to tens of millions of the telecom company’s customers. U.S. District Judge Ada Brown in Dallas said in a ruling that the class-action settlement was fair and reasonable. […]
Retaining decades worth of unencrypted personal information connected to the internet is a data breach disaster waiting to happen, as this report from DefendOps Diaries illustrates: The recent cyberattack on Oxford City Council has underscored the vulnerabilities inherent in managing vast amounts of historical data. Over the weekend of June 7 and 8, 2025, unauthorized access to […]
DataBreaches.net reports that Aflac has notified the Securities & Exchange Commission (SEC) of a data security incident. The incident did not involve ransomware, and appears to have the same characteristics as breaches at two other U.S. insurers this month: Erie Insurance and Philadelphi Insurance Companies. The group known as Scattered Spider is suspected of being […]
Bleeping Computer responds to headlines from another site: News broke today of a “mother of all breaches,” sparking wide media coverage filled with warnings and fear-mongering. However, it appears to be a compilation of previously leaked credentials stolen by infostealers, exposed in data breaches, and via credential stuffing attacks. To be clear, this is not a […]
The Charlotte Observer reports: Two lawsuits were filed this week in federal court against Belk for a data breach and then for allegedly concealing the cyberattack. In both cases, the plaintiffs are also seeking certification for class-action suits. Belk failed to protect sensitive personal current and former employee and customer information, according to the lawsuits, […]
SecurityWeek reports that heartless criminals targeted Krispy Kreme donuts last year: Donut and coffee retail chain Krispy Kreme has confirmed that the ransomware attack that came to light in late 2024 resulted in a data breach. Krispy Kreme revealed being hit by a cyberattack on December 11, saying that the incident had led to operational disruptions. Roughly […]
Reuters reports: Swiss bank UBS on Wednesday said it had suffered a data leak due to a cyber attack against one of its providers, but that no client data was affected. Swiss newspaper Le Temps said that files containing details of tens of thousands of UBS employees had been stolen from business service company Chain […]
