Data Breach News, Vendor News
June 17, 2025
998 views 49 secs 0

Remorseless extortionists claim to have stolen thousands of files from Freedman HealthCare

The Register reports: An extortion gang claims to have breached Freedman HealthCare, a data and analytics firm whose customers include state agencies, health providers, and insurance companies, and is threatening to dump tens of thousands of sensitive files early Tuesday morning. According to a claim posted Sunday on the shame site belonging to World Leaks, […]

Education Sector, Data Breach News, Vendor News
June 13, 2025
826 views 23 secs 0

School Districts Unaware BoardDocs Software Published Their Private Files

Company said it notified customers nationwide after a tech glitch exposed confidential data, but multiple districts said they knew nothing about it. The 74 reports that although Diligent Corporation claims they notified all BoardDocs clients of a recently discovered data leak, many school districts had no awareness of any incident until The 74 contacted them. […]

Data Breach News, Legal News, News, Vendor News
June 11, 2025
1080 views 28 secs 0

Marriott wins appeal to block class action over data breach

The Daily Record reports an appellate decision that is probably quite a relief to Marriott International: The U.S. Court of Appeals for the 4th Circuit has reversed a lower Maryland court’s recertification of plaintiff classes in a pair of consolidated lawsuits filed against Marriott and an information technology service provider for a 2018 data breach, handing down a major […]

Vendor News, Data Breach News
June 03, 2025
460 views 40 secs 0

Security bug at compliance firm Vanta exposed customer data to other users

TechRadar reports: Security and compliance automation company Vanta has confirmed sharing sensitive customer data with other customers by mistake. In a statement (via TechCrunch), the company said a change it had made in the code resulted in a security breach. In it, some sensitive data from a small subset of customers was shared with other customers. […]

Data Breach News, News, Vendor News
May 29, 2025
1146 views 22 secs 0

LexisNexis breach: Data broker hack exposed trove of sensitive information, including Social Security numbers

Personal information on more than 364,000 people may have been compromised as part of a third-party hack. Fast Company reports: Data analytics firm LexisNexis Risk Solutions said it suffered a data breach that could have affected the names, Social Security numbers, driver’s license numbers, and contact information of more than 364,000 people. The company said […]

Data Breach News, News, Vendor News
May 26, 2025
1133 views 0 secs 0

Indian IT giant Tata Consultancy Services investigating possible link to M&S cyber-attack

Tata Consultancy Services is conducting an internal investigation to determine whether it was the gateway for the cyber-attack on Marks & Spencer. The BBC reports: Tata Consultancy Services (TCS) has provided services to M&S for more than a decade. Earlier this week, M&S said the hackers who had brought huge disruption to the retailer had […]

News, Vendor News
May 22, 2025
1058 views 11 secs 0

Russian Intelligence Hackers Stalk Western Logistics Firms

GovInfoSecurity reports: A slew of Western cybersecurity agencies warned Wednesday that Russian intelligence is targeting logistics and technology companies in a prolonged hacking campaign that includes an emphasis on internet-connected cameras situated along border crossings and military installations. The advisory includes indicators of compromise typical of an attack by Unit 26165 of the Russian Main Intelligence Directorate. […]

Data Breach News, Education Sector, News, Vendor News
May 21, 2025
1028 views 2 mins 0

Massachusetts student pleads guilty to hacking and extorting PowerSchool and an unnamed telecom

The U.S. Attorney’s Office for the District of Massachusetts announced yesterday that  Matthew D. Lane, 19, a student at Assumption University in Worcester, Mass., was charged and has agreed to plead guilty in connection with hacking into the computer networks of two U.S.-based companies and extorting the companies for ransoms. The two companies were not named in the Information […]