In a week when some big data breaches, like Ticketmaster and Santander, have already been disclosed and confirmed, yet another big breach is now being claimed. An individual calling themself “Sp1d3r” claims to have acquired data on 190 million people who contacted QuoteWizard to get quotes on insurance. The threat actor claims the data includes: […]
Snowflake has issued a statement disputing claims made by some threat actors that were published by a security vendor. The vendor, in response to a legal threat from Snowflake, subsequently deleted their article. The Hacker News reports: Cloud computing and analytics company Snowflake said a “limited number” of its customers have been singled out as […]
ABC News in Australia reports: An Australian company that runs a strategically crucial heavy rare earth project has been revealed to have been targeted in a suspected cyber attack as Treasurer Jim Chalmers orders Chinese investors to be removed. On Monday Mr Chalmers instructed Yuxio Fund and four other international companies linked to China to […]
Bleeping Computer reports that nationally licensed debt collection agency Financial Business and Consumer Solutions (FBCS) has updated its breach disclosure to indicate that more than 3 million people were affected by a breach in February. FBCS, which collects debts involving consumer credit, auto loans and leases, student loans, commercial, and healthcare, initially reported in April […]
In February, Cencora (formerly known as AmerisourceBergen/Lash Group) filed notice of a cybersecurity incident with the Securities and Exchange Commission: On February 21, 2024, Cencora, Inc. (the “Company”), learned that data from its information systems had been exfiltrated, some of which may contain personal information. Upon initial detection of the unauthorized activity, the Company immediately took containment […]
A press release from the Securities and Exchange Commission (SEC): Washington D.C., May 22, 2024 — The Securities and Exchange Commission today announced that The Intercontinental Exchange, Inc. (ICE) agreed to pay a $10 million penalty to settle charges that it caused the failure of nine wholly-owned subsidiaries, including the New York Stock Exchange, to […]
From the Federal Trade Commission: The Federal Trade Commission has finalized an order against Blackbaud Inc. settling allegations that its lax security practices allowed a hacker to breach the company’s network and access the personal data of millions of consumers including Social Security and bank account numbers. In a complaint first announced in February 2024, the FTC […]
BreachForums, a popular hacking forum where users can sell, leak, or share stolen data or information, was seized this week by the FBI, DOJ, and international partners. Because none of the governments have issued any press releases or statements yet, there is much that has yet to be confirmed or disconfirmed, but on Wednesday, a […]
DarkReading reports that Spanish banking giant Santander has disclosed a recent data breach at a third-party provider. Bank customers in Chile, Spain, and Uruguay have reportedly been affected. “No transactional data, nor any credentials that would allow transactions to take place on accounts are contained in the database, including online banking details and passwords,” according to […]
Not every big breach these days is a cyberattack. Sometimes it is just human error. Pensions & Investments recently reported that more than 451,000 people were affected by an incident that occurred at J.P. Morgan Chase Bank. The breach was disclosed to the Maine Attorney General’s office on April 29. The bank, which is a […]
