HHS OCR Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP
Settlement Marks OCR’s 15th Ransomware Enforcement Action and 10th Enforcement Action in OCR’s Risk Analysis Initiative Source: HHS
Microsoft’s Nuance coughs up $8.5M to rid itself of MOVEit breach suit
The Register reports: Microsoft-owned talk-to-text outfit Nuance has agreed to cough up $8.5 million to settle a class action lawsuit over the sprawling MOVEit Transfer mega-breach – although it admits no liability. The proposed deal [PDF], filed in a Massachusetts federal court last week, would draw a line under litigation brought by individuals who claimed that the company failed […]
Georgia SNAP call center cyberattack tied to incidents in 6 states: USDA
FOX 5 in Atlanta reports: A cyberattack that shut down Georgia’s SNAP (Supplemental Nutrition Assistance Program) call center may not have been an isolated incident. Officials with the United States Department of Agriculture tell FOX 5 that similar attacks have happened in six other states recently. The backstory: On July 28, the Georgia Department of […]
Afghans resettled in UK hit by new data breach
BBC reports: Thousands of Afghans brought to safety in the UK have had their personal data exposed, after a Ministry of Defence (MoD) sub-contractor suffered a data breach. The names, passport information and Afghan Relocations and Assistance Policy (Arap) details of up to 3,700 Afghans have potentially been compromised after Inflite The Jet Centre, which […]
Canada’s House of Commons hit by cyberattack from ‘threat actor’: internal email
CBC News reports: The House of Commons and Canada’s cybersecurity agency are investigating a significant data breach caused by an unknown “threat actor” targeting employee information. According to an internal email obtained by CBC News, the House of Commons alerted staff on Monday that there was an information breach. It said a malicious actor was […]
AT&T Data Incident Settlement Notice: $177 Million Settlement Fund for Eligible Claimants
Kroll Settlement Administration has issued a press release about the settlement in litigation stemming from AT&T data breaches in 2024.
Scattered Spider and ShinyHunters’ Next Move: Leaking Data
Data Breach Today reports: Extortionists tied to numerous attacks against high-profile brands have begun naming fresh victims and leaking supposedly stolen data. See Also: Securing Manufacturing’s Transition to the Cloud On Friday, individuals claiming to be part of the cybercrime collectives Scattered Spider, ShinyHunters and Lapsus$ launched a channel on social platform Telegram, posted partially redacted […]
Cencora & The Lash Group Settle Data Breach Litigation for $40 Million
There is a settlement in litigation stemming from a breach reported last year that affected more than three dozen Cencora/Lash Group clients, and more than 1.4 million patients at last public count. The HIPAA Journal now reports: Cencora & The Lash Group have agreed to pay $40 million to settle class action data breach litigation […]
Kokomo24/7, a Vendor for the Los Angeles Unified School District Hit by a Cyber Attack, Network Files Likely Compromised
TechNadu reports: A vendor that serves the Los Angeles Unified School District, Kokomo24/7, has notified authorities about a network file exposure on its internal systems and data storage environment. Investigators determined that the suspicious activity discovered on December 11, 2024, allowed cybercriminals to access sensitive personal information. Since Kokomo24/7 is a vendor for the Los Angeles Unified […]
French Telecom Firm Bouygues Says Data Breach Affects 6.4M Customers
SecurityWeek reports: French telecommunications company Bouygues Telecom was recently targeted in a cyberattack that resulted in the personal information of millions of customers getting compromised. Bouygues is one of France’s largest telecom companies. According to its website, it has nearly 27 million mobile service customers. The company discovered the cyberattack on August 4 and an […]