Non-profit organizations are not immune to cyberattacks by unscrupulous threat actors. In this case, a third-party vendor was hit, as Yahoo! UK reports: An investigation has been launched after Southampton Hospitals Charity is among 1,500 potentially affected by a cyber attack. Southampton Hospitals Charity confirmed it is one of the charities targeted in a cyber-security […]
There is an update to the data security incident involving Ernst & Young, which ShinyHunters claimed responsibility for. Ernst & Young did not confirm that ShinyHunters was responsible for the breach, but in its latest update, ShinyHunters adds additional details to its claims and leaks the data. Ernst & Young disclosed the breach in July, […]
Financial Review reports: KPMG has sacked its former chief operating officer Eileen Hoggett from the firm’s partnership in a rare move after finding she had stored printed copies of confidential Lendlease board documents in her locker, shared them with her colleagues to win audit contracts, and repeatedly lied about it. A furious John Sams, the […]
Inside Higher Ed reports that recovery from the Canvas data breach encountered a glitch: In the aftermath, Instructure CEO Steve Daly vowed to be “transparent about what happened” and provide K–12 schools and higher education institutions “with information as quickly as we responsibly could.” Over the past two months, Instructure has worked “to conduct a detailed forensic […]
The Register reports: Accenture has confirmed an “isolated matter” after a cybercriminal put up for sale what they allege is 35GB of the consulting giant’s internal data, including source code, cryptographic keys, and cloud credentials. The listing, seen by The Register, appeared on a cybercrime forum on July 6 under the title “Accenture Data Breach,” posted […]
On June 27, AdaptHealth notified the Securities and Exchange Commission of a data breach originating at an unnamed contractor: AdaptHealth Corp. (the “Company”) is investigating a security incident whereby a threat actor gained unauthorized access to Company systems and exfiltrated certain data therefrom. Upon learning of the incident, the Company promptly activated its incident response […]
9to5Mac reports: A new report from Reuters details how Apple and its Indian supplier, Tata Electronics, are responding to a massive data breach that exposed sensitive files earlier this month. Here are the details. A few days ago, Tata Electronics confirmed that it fell victim to a cyberattack that, as reported by Reuters, stole confidential files from Apple and Tesla. […]
Help Net Security reports: LastPass disclosed that attackers used OAuth tokens compromised in a supply chain attack on Klue, a market intelligence platform that integrates with CRM and sales tools across organizations, to access customer data stored in its Salesforce environment. “On June 12th LastPass was made aware of an incident that occurred at Klue […]
Reuters reports: Consultancy firm Accenture (ACN.N), opens new tab said on Thursday it would take a majority stake in industrial cybersecurity firm Dragos and fully acquire asset intelligence company runZero and device security specialist NetRise in a combined deal valued at $4.18 billion. … The acquisitions will expand Accenture’s cybersecurity business into software for protecting industrial operations […]
Mashable reports: Nintendo of North America says it’s aware of what’s been described as a small third-party data breach affecting some of its employees. “Nintendo’s systems have not been compromised,” the company told Mashable in a statement, acknowledging that a third-party service was affected by an “issue.” Earlier this week, a hacking group calling itself ShadowByte$ […]
