EU-wide Breach Notification Template On The Horizon
Alston & Bird writes: Read more at JDSupra.
Inc Ransomware Claims 1.2TB Data Breach at Dollar Tree (UPDATED WITH CORRECTION)
Update and Correction of July 31: Dollar Tree has firmly denied any breach and states that the breach was a breach of 99 Cents Only Stores. Dollar Tree’s involvement with the bankrupt discount chain was limited and “did not acquire their corporate entity, systems/network, or data. Any allegation of Dollar Tree’s involvement is inaccurate.” HackRead […]
Sex toy maker Lovense left millions of users vulnerable to email ID leaks, account takeovers
The Indian Express reports: A cybersecurity researcher has identified critical vulnerabilities in an app developed by sex toy manufacturer Lovense that not only exposed the private email addresses of users but also enabled threat actors to hijack a user’s account on the platform. The anonymous researcher published their findings about the two in-app security flaws […]
Orange, France’s largest telecoms company, hit by cyberattack
The Record reports: Orange, one of France’s largest companies and among the biggest mobile service providers in both Europe and Africa, announced on Monday detecting a cyberattack affecting one of its internal systems. The company — which serves a customer base of more than 290 million people, and has retail, business and enterprise clients — […]
NASCAR confirms data breach after hackers ‘demanded $4m ransom’
NASCAR has confirmed it was the victim of a data breach after hackers demanded a $4million ransom following a ransomware attack. The racing organization says it suffered the breach between March 31, 2025 and April 3, 2025. Correspondence with multiple state regulators this week (including this example from New Hampshire) confirms the data breach, and says […]
DOJ pursues $2.3M in Bitcoin recovered from a suspected ‘Chaos’ ransomware operator
Invezz reports: Federal prosecutors have launched a forfeiture action to claim $2.3 million in Bitcoin allegedly tied to a ransomware actor from the newly identified Chaos group. According to a July 28 press release from the US Attorney’s Office for the Northern District of Texas, the Department of Justice filed a civil complaint seeking the forfeiture of […]
Russia’s Aeroflot suffers IT failure, hackers claim responsibility
Reuters reports: Russian airline Aeroflot cancelled dozens of flights on Monday after what it called a failure in its information systems, and a shadowy hacking group claimed responsibility for what it said was a crippling cyberattack. The national carrier did not provide further details about the cause of the problem or how long it would take […]
Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack
TechCrunch reports: U.S. insurance giant Allianz Life has confirmed to TechCrunch that hackers stole the personal information of the “majority” of its customers, financial professionals, and employees during a mid-July data breach. The company disclosed the data breach on Saturday in a legally required filing with Maine’s attorney general, but did not immediately provide a number of […]
Clorox lawsuit says help-desk contractors handed over passwords in 2023 cyberattack
The Record reports: Cleaning product giant Clorox has filed a lawsuit against Cognizant, a company it hired to operate its IT services call-in help desk, accusing the contractor of being directly responsible for a 2023 cyberattack that cost hundreds of millions. The case, filed on Tuesday in California Superior Court, alleges that contractors working for […]
Major Russian-language hacking forum administrator arrested; forum seized
Help Net Security reports that an alleged administrator of xss.is, a dominant Russian-speaking cybercrime forum, was arrested in Kyiv, Ukraine, on 22 July. The takedown followed a long-running investigation led by the French Police and Paris Prosecutor, in close cooperation with Ukrainian authorities and Europol. As Help Net summarizes the allegations: The forum’s administrator is […]