The Record reports two wins for law enforcement this week. U.S. prosecutors announced two milestones this week in their cases against major ransomware groups. Karen Serobovich Vardanyan, a 34-year-old Armenian national, pleaded guilty Wednesday in an Oregon federal court to conspiracy and computer fraud. For about six months beginning in November 2019, he accessed companies’ computer networks […]
The Register reports: Accenture has confirmed an “isolated matter” after a cybercriminal put up for sale what they allege is 35GB of the consulting giant’s internal data, including source code, cryptographic keys, and cloud credentials. The listing, seen by The Register, appeared on a cybercrime forum on July 6 under the title “Accenture Data Breach,” posted […]
BankInfoSecurity reports: A publicly traded home medical equipment and services supplier has told U.S. regulators that hackers recently stole a potentially large volume of patients’ sensitive health and personal information, including data from external electronic health record portals, in a social engineering incident. Pennsylvania-based AdaptHealth in a July 2 filing to the U.S. Securities and […]
DataBreaches.net has followed up on a breach involving very sensitive personal information. The breach has been called “BlueLeaks 2.0” in some circles, and “Navigate360” in other publications, but it occurred when a hacktivist acquired 8.3 million tips from various tiplines that were supposed to protect the anonymity of the tipsters. As DataBreaches.net reports, neither P3 […]
TechCrunch reports: The U.S. Army has reportedly fixed two of its websites that had been defaced to display pro-Kurdish messages and to call out President Donald Trump, the latest case of hackers compromising systems run by the federal government in recent months. Security researcher Ronald Lovelace told Cyberscoop, which first reported the defacements, that error pages were modified on […]
The Record reports: The world’s largest medical device company is notifying more than 3.8 million people that their data may have been exposed in an attack reportedly linked to the ShinyHunters cybercrime group. On April 24, Medtronic confirmed an unauthorized party had accessed data in certain corporate IT systems, but said it had not identified […]
Security Boulevard reports: An emerging ransomware campaign is targeting small businesses with phishing emails that impersonate Interpol. The fake notices claim the recipient’s organization is under investigation for suspicious activity and that investigators have obtained information and video evidence tied to alleged criminal conduct. The lure is designed to create urgency and push the victim […]
On June 27, AdaptHealth notified the Securities and Exchange Commission of a data breach originating at an unnamed contractor: AdaptHealth Corp. (the “Company”) is investigating a security incident whereby a threat actor gained unauthorized access to Company systems and exfiltrated certain data therefrom. Upon learning of the incident, the Company promptly activated its incident response […]
HackRead reports: Fake Interpol investigation emails are targeting small businesses with Proton Drive links that deliver ransomware, encrypt files, and route victims to Tox chat. Small businesses are being targeted by fake Interpol investigation emails that impersonate law enforcement officials and pressure recipients to open files presented as evidence of suspicious company activity. In reality, doing […]
CNN reports: When an executive at a US law firm’s phone rang in April, the voice on the other end was urgent: A computer virus was spreading through the firm. The caller said they were from IT support and needed physical access to the lawyer’s computer because remote fixes to stop the attack weren’t working. […]
