Security Affairs

JANUARY 11, 2025

US marijuana dispensary STIIIZY warns customers of leaked IDs and passports following a November data breach. US marijuana dispensary STIIIZY disclosed a data breach after a vendor’s point-of-sale system was compromised by cybercriminals.

Data breaches 115

Data breaches Retail Cybercrime Government 115

SecureWorld News

NOVEMBER 11, 2024

In 2016, Uber faced a cybersecurity crisis that ended up reshaping the conversation around data breaches and accountability. Hackers accessed a massive amount of sensitive data, including the names, email addresses, and phone numbers of 57 million riders and drivers, plus driver's license numbers for about 600,000 drivers.

Data breaches 109

Data breaches Accountability Cybersecurity Account Security 109

Troy Hunt

JUNE 24, 2024

I've been harbouring some thoughts about the state of data breaches over recent months, and I feel they've finally manifested themselves into a cohesive enough story to write down. That's who the board is accountable to, and maintaining the corporate reputation and profitability of the firm is their number one priority.

Data breaches 343

Data breaches Identity Theft InfoSec Accountability 343

Security Affairs

DECEMBER 6, 2024

Atrium Health disclosed a data breach affecting 585,000 individuals to the HHS, potentially linked to the use of online tracking tools. Healthcare company Atrium Health disclosed a data breach that impacted 585,000 individuals. Impacts vary depending on users’ browsers, cookies, and third-party account activity.

Data breaches 114

Data breaches Identity Theft Accountability Technology 114

Security Affairs

FEBRUARY 4, 2025

Online food ordering and delivery platform GrubHub suffered a data breach that exposed the personal information of drivers and customers. This week the online food ordering and delivery firm GrubHub disclosed a data breach that exposed customer and driver information.

Data breaches 117

Data breaches Passwords Accountability Hacking 117

Malwarebytes

OCTOBER 10, 2024

A non-profit that benefits millions of people has fallen victim to a data breach and a DDoS attack. It is often used for academic research and data analysis. Cybercriminals managed to breach the site and steal a user authentication database containing 31 million records. Check the vendor’s advice. Take your time.

Data breaches 135

Data breaches DDOS Internet Internet 135

Krebs on Security

OCTOBER 30, 2024

Change Healthcare says it has notified approximately 100 million Americans that their personal, financial and healthcare records may have been stolen in a February 2024 ransomware attack that caused the largest ever known data breach of protected health information. which suffered a data breach in 2015 affecting 78.8

Healthcare 300

Healthcare Insurance Computers and Electronics Data breaches 300

Malwarebytes

OCTOBER 25, 2024

The Office for Civil Rights (OCR) at the HHS confirmed that it prioritized and opened investigations of Change Healthcare and UnitedHealth Group, focused on whether a breach of protected health information (PHI) occurred and on the entities’ compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Rules.

Healthcare 125

Healthcare Data breaches Passwords Identity Theft 125

Security Affairs

DECEMBER 18, 2024

Meta has been fined 251M ($263M) for a 2018 data breach affecting millions in the EU, marking another penalty for violating privacy laws. The Irish Data Protection Commission (DPC) fined Meta 251 million ($263M) for a 2018 data breach impacting 29 million Facebook accounts. Rosen added.

Data breaches 107

Data breaches Accountability Risk Advertising 107

Security Affairs

MARCH 19, 2025

California Cryobank, the largest US sperm bank, suffered a data breach exposing customer information. The company disclosed a data breach that exposed customers’ personal information. ” reads the data breach notification letter shared with Maine Attorney General.”Out

Data breaches 111

Data breaches Banking Insurance Hacking 111

Troy Hunt

AUGUST 13, 2024

I decided to write this post because there's no concise way to explain the nuances of what's being described as one of the largest data breaches ever. Instead, we're left with 134M email addresses in public circulation and no clear origin or accountability. Thanks guys.

Data breaches 364

Data breaches Insurance Identity Theft Accountability 364

Security Affairs

APRIL 26, 2025

African multinational telecommunications company MTN Group disclosed a data breach that exposed subscribers’ personal information. “An unknown third-party has claimed to have accessed data linked to parts of our systems. Cell C has confirmed a data breach following a RansomHouse cyberattack that occurred last year.

Data breaches 108

Data breaches Telecommunications Financial Services Mobile 108

Heimadal Security

MARCH 20, 2025

While artificial intelligence has transformed the ability to prevent, detect, […] The post The Social Security data breach compromised ‘billions’ of accounts. A year later, new security threats have gained traction. Here’s one easy, free way to protect yourself. appeared first on Heimdal Security Blog.

Data breaches 103

Data breaches Artificial Intelligence Accountability Cybersecurity 103

eSecurity Planet

DECEMBER 5, 2024

The NPD data breach puts millions at risk of identity theft. In this video, our cybersecurity specialist will walk you through key steps to protect yourself — like checking your credit and freezing your accounts. Act now to secure your identity! Read more: 2.9 Read more: 2.9

Data breaches 104

Data breaches Identity Theft Accountability Risk 104

SecureWorld News

FEBRUARY 6, 2025

Grubhub recently confirmed a data breach stemming from a third-party vendor, exposing the ongoing risks associated with supply chain security. Grubhub detected unusual activity within its environment, later traced to an account associated with a third-party service provider used for customer support. What happened?

Data breaches 93

Data breaches Accountability Social Engineering Risk 93

Security Affairs

APRIL 11, 2025

Laboratory Services Cooperative discloses a data breach from October 2024 that exposed personal and medical info of 1.6 Laboratory Services Cooperative disclosed a data breach that impacted the personal and medical information of 1.6 ” reads the notice of data breach. million individuals.

Data breaches 99

Data breaches Insurance Banking Accountability 99

Security Affairs

MAY 15, 2025

Coinbase confirmed rogue contractors stole customer data and demanded a $20M ransom in a breach reported to the SEC. Coinbase said rogue contractors stole data on under 1% of users and demanded $20M; the data breach was disclosed in an SEC filing. “Criminals targeted our customer support agents overseas.

Data breaches 88

Data breaches Banking Accountability Retail 88

Malwarebytes

APRIL 15, 2025

The Hertz Corporation, on behalf of Hertz, Dollar, and Thrifty brands, is sending breach notifications to customers who may have had their name, contact information, driver’s license, andin rare casesSocial Security Number exposed in a data breach. Check the vendors advice. Take your time.

Data breaches 110

Data breaches Ransomware B2B Passwords 110

Krebs on Security

JANUARY 19, 2023

T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years. APIs are essentially instructions that allow applications to access data and interact with web databases. .” Image: customink.com In a filing today with the U.S.

Mobile 339

Mobile Accountability Data breaches Identity Theft 339

Krebs on Security

AUGUST 16, 2021

” The intrusion came to light on Twitter when the account @und0xxed started tweeting the details. Reached via direct message, Und0xxed said they were not involved in stealing the databases but was instead in charge of finding buyers for the stolen T-Mobile customer data. . WHO HACKED T-MOBILE?

Mobile 338

Mobile Data breaches Accountability Wireless 338

Security Affairs

DECEMBER 8, 2024

“Additionally, Anna Jaques reminds its employees and patients to remain vigilant in reviewing financial account statements on a regular basis for any fraudulent activity. .” reads a statement published on the hospital’s website.

Data breaches 120

Data breaches Insurance Healthcare Ransomware 120

Krebs on Security

AUGUST 16, 2022

That same month, they also sold data on 1.4 But this history was either overlooked or ignored by Group-IB , the Singapore-based cybersecurity firm apparently hired by Banorte to help respond to the data breach. “We ask you to remove this post containing Banorte data.

Data breaches 328

Data breaches Banking Cybercrime Marketing 328

Security Affairs

JANUARY 3, 2025

Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,data breach) Emergency care and patient admissions remained unaffected during the incident. RUMC offered 12 months of free credit monitoring to those individuals with compromised Social Security numbers.

Data breaches 79

Data breaches Ransomware Insurance Healthcare 79

Krebs on Security

JANUARY 7, 2025

Besieged by scammers seeking to phish user accounts over the telephone, Apple and Google frequently caution that they will never reach out unbidden to users this way. The phishers also abused legitimate Google services to send Tony an email from google.com, and to send a Google account recovery prompt to all of his signed-in devices.

Phishing 338

Phishing Cryptocurrency Accountability Social Engineering 338

Security Affairs

JANUARY 16, 2025

The law firm Wolf Haldenstein disclosed a data breach that exposed the personal information of nearly 3.5 The law firm Wolf Haldenstein disclosed a 2023 data breach that exposed the personal information of nearly 3.5 The law firm pointed out that it has no evidence the exposed data has been misused.

Data breaches 99

Data breaches Identity Theft Consumer Protection Data collection 99

Security Affairs

DECEMBER 29, 2024

notifies customers of credit card data breach, after threat actors hacked a third-party app from its e-commerce provider. disclosed a data breach that exposed its customers’ credit card data after threat actors hacked a third-party application from its e-commerce providerBigCommerce.

Data breaches 84

Data breaches Computers and Electronics Hacking Wireless 84

Security Boulevard

APRIL 7, 2025

In recent months, the fallout from the 23andMe data breach has offered a sobering reminder of the real-world implications of poor data securityand the profound responsibility companies bear when entrusted with sensitive consumer information.

Data breaches 59

Data breaches Accountability 59

Malwarebytes

FEBRUARY 25, 2025

Employment screening company DISA Global Solutions has filed a data breach notification after a cyber incident on their network. Protecting yourself after a data breach There are some actions you can take if you are, or suspect you may have been, the victim of a data breach. Check the vendors advice.

Data breaches 105

Data breaches Passwords Phishing Password Management 105

Malwarebytes

FEBRUARY 14, 2025

Over the years Zacks has suffered a few data breaches. In 2023, data allegedly belonging to Zacks containing 8,615,098 records was leaked online. The most recent data in this database is from May 2020. This would be the 2nd (hacked back in 2020) major data breach for Zacks. Check the vendors advice.

Accountability 90

Accountability Data breaches Passwords Phishing 90

Security Affairs

APRIL 18, 2025

Legends International disclosed a data breach from November 2024 that affected employees and visitors to its managed venues. ” reads the data breach notification letter sent to impacter individuals. An investigation was launched with assistance from external cybersecurity experts. Law enforcement was also notified.”

Data breaches 106

Data breaches Identity Theft Technology Accountability 106

Webroot

APRIL 22, 2025

If a company you do business with becomes part of a data breach, cybercriminals may have full access to your confidential information. Unfortunately, data breaches are on the rise and affecting more companies and consumers than ever. billion people received notices that their information was exposed in a data breach.

Data breaches 72

Data breaches Identity Theft Passwords eCommerce 72

Security Affairs

MAY 15, 2025

Nova Scotia Power confirmed a data breach involving the theft of sensitive customer data after the April cybersecurity incident. This week, the company disclosed a data breach after the April security incident and revealed that threat actors stole sensitive customer data. Nova Scotia Power Inc.

Data breaches 74

Data breaches Energy and Utilities Accountability Insurance 74

Security Affairs

MAY 21, 2025

Cryptocurrency exchange Coinbase announced that the recent data breach exposed data belonging to 69,461 individuals. Coinbase disclosed that a data breach impacted 69,461 individuals after overseas support staff improperly accessed customer and corporate data. The final impact remains under review.

Data breaches 76

Data breaches Banking Accountability Retail 76

Security Affairs

JUNE 10, 2025

Attackers compromised a system account and used it to unlawfully access and download crash reports. “On May 12, 2025, TxDOT identified unusual activity in the Crash Reporting Information System (CRIS) originating from a system account.” ” reads the data breach notification letter.

Data breaches 67

Data breaches Insurance Accountability Hacking 67

Security Affairs

APRIL 15, 2025

Hertz Corporation disclosed a data breach after customer data was stolen via Cleo zero-day exploits in late 2024, affecting Hertz, Thrifty, and Dollar brands. Car rental giant Hertz Corporation disclosed a data breach that impacted its Hertz, Thrifty, and Dollar brands.

Data breaches 67

Data breaches Ransomware Software Hacking 67

Security Affairs

MAY 5, 2025

Kelly Benefits has determined that the impact of the recently disclosed data breach is much bigger than initially believed. Benefits and payroll solutions firm Kelly & Associates Insurance Group, aka Kelly Benefits, announced that the impact of a recently disclosed data breach is much bigger than initially estimated.

Data breaches 69

Data breaches Insurance Hacking Accountability 69

Security Affairs

OCTOBER 28, 2024

. “Free was “the victim of a cyberattack targeting a management tool” leading to “unauthorized access to some of the personal data associated with the accounts of certain subscribers ,” the second largest telephone operator in France confirmed to Agence France-Presse (AFP) on Saturday, October 26.

Cyber Attacks 129

Cyber Attacks Telecommunications Data breaches Banking 129