Troy Hunt

JUNE 24, 2024

I've been harbouring some thoughts about the state of data breaches over recent months, and I feel they've finally manifested themselves into a cohesive enough story to write down. Data Breach Victims are Making it Worse I'm talking about class actions.

Data breaches 293

Data breaches Identity Theft InfoSec Accountability 293

Schneier on Security

AUGUST 19, 2021

It’s a big one : As first reported by Motherboard on Sunday, someone on the dark web claims to have obtained the data of 100 million from T-Mobile’s servers and is selling a portion of it on an underground forum for 6 bitcoin, about $280,000.

Mobile 361

Mobile Data breaches Phishing Cybercrime 361

Krebs on Security

NOVEMBER 19, 2024

Finastra, which provides software and services to 45 of the world’s top 50 banks, notified customers of the security incident after a cybercriminal began selling more than 400 gigabytes of data purportedly stolen from the company.

Data breaches 269

Data breaches Banking Cybercrime Advertising 269

Troy Hunt

MARCH 18, 2024

Whilst I did this in that handful of aforementioned cases as part of the breach verification process, this is something that happens entirely manually and is infeasible en mass. HIBP only ever stores email addresses and never the additional fields of personal information that appear in data breaches.

Data breaches 342

Data breaches Encryption Identity Theft InfoSec 342

Krebs on Security

AUGUST 16, 2021

Communications giant T-Mobile said today it is investigating the extent of a breach that hackers claim has exposed sensitive personal data on 100 million T-Mobile USA customers, in many cases including the name, Social Security number, address, date of birth, phone number, security PINs and details that uniquely identify each customer’s mobile (..)

Mobile 347

Mobile Data breaches Accountability Wireless 347

Krebs on Security

AUGUST 16, 2022

That same month, they also sold data on 1.4 But this history was either overlooked or ignored by Group-IB , the Singapore-based cybersecurity firm apparently hired by Banorte to help respond to the data breach. “We ask you to remove this post containing Banorte data.

Data breaches 301

Data breaches Banking Cybercrime Marketing 301

Troy Hunt

NOVEMBER 13, 2024

Additionally, the threat actor with… pic.twitter.com/tqsyb8plPG — HackManac (@H4ckManac) February 28, 2024 When Jason found his email address and other info in this corpus, he had the same question so many others do when their data turns up in a place they've never heard of before - how?

Data breaches 282

Data breaches Passwords B2B Technology 282

Troy Hunt

APRIL 19, 2023

I want to try something new here - bear with me here: Data breach processing is hard and the hardest part of all is getting in touch with organisations and disclosing the incident before I load anything into Have I Been Pwned (HIBP). Meaning web Subscriptions may potentially lead to more money in your pocket.

Data breaches 57

Data breaches 57

Troy Hunt

JUNE 30, 2024

Last week, I wrote about The State of Data Breaches and got loads of feedback. Let me explain: Hackers This is where most data breaches begin, with someone illegally accessing a protected system and snagging the data. It's awkward, talking to the first party responsible for the breach.

Data breaches 256

Data breaches Government InfoSec Passwords 256

Schneier on Security

SEPTEMBER 16, 2022

It’s big : The breach appeared to have compromised many of Uber’s internal systems, and a person claiming responsibility for the hack sent images of email, cloud storage and code repositories to cybersecurity researchers and The New York Times. “This is a total compromise, from what it looks like.”

Data breaches 276

Data breaches Engineering Phishing Hacking 276

Tech Republic Security

AUGUST 2, 2024

Australian regulators allege that cyber security failures at Optus and Medibank contributed to data breaches in 2022, leading to theft of sensitive customer data.

Data breaches 186

Data breaches Hacking 186

Tech Republic Security

OCTOBER 7, 2024

These 15 cyber attacks or data breaches impacted large swaths of users across the United States and changed what was possible in cybersecurity.

Data breaches 178

Data breaches Cyber Attacks Cybersecurity Software 178

Tech Republic Security

AUGUST 27, 2024

The number of organisations that experienced a SaaS data breach in the last 12 months is 5% higher than the previous year according to AppOmni.

Data breaches 195

Data breaches CISO 195

Security Affairs

OCTOBER 25, 2024

The Change Healthcare data breach in the February 2024 impacted over 100 million, the largest-ever healthcare data breach in the US. UnitedHealth Group announced that the data breach suffered by Change Healthcare in February 2024 impacted more than 100 million individuals.

Data breaches 129

Data breaches Healthcare Cybercrime Insurance 129

Security Affairs

JANUARY 11, 2025

US marijuana dispensary STIIIZY warns customers of leaked IDs and passports following a November data breach. US marijuana dispensary STIIIZY disclosed a data breach after a vendor’s point-of-sale system was compromised by cybercriminals.

Data breaches 110

Data breaches Retail Cybercrime Government 110

Security Affairs

OCTOBER 11, 2024

The Internet Archive disclosed a data breach, the security incident impacted more than 31 million users of its “The Wayback Machine.” As of September 5, 2024, the Internet Archive held more than 42.1 million print materials, 13 million videos, 1.2

Data breaches 121

Data breaches Internet Internet DDOS 121

Security Affairs

OCTOBER 18, 2024

Omni Family Health disclosed a data breach affecting nearly 470,000 current and former patients and employees. Omni Family Health is notifying nearly 470,000 individuals that their personal information was compromised in a data breach resulting from a cyberattack that occurred earlier this year.

Data breaches 139

Data breaches Healthcare Insurance Engineering 139

Security Affairs

NOVEMBER 11, 2024

Amazon disclosed a data breach exposing employee data, with information allegedly stolen in the May 2023 MOVEit attacks. Amazon disclosed a data breach that exposed employee information after data was allegedly stolen during the May 2023 MOVEit attacks.

Data breaches 126

Data breaches Hacking Ransomware Technology 126

Security Affairs

DECEMBER 16, 2024

ConnectOnCall disclosed a data breach impacting over 900,000 individuals, exposing their personal information. The company disclosed a data breach that exposed personal information and medical information of more than 900,000 individuals. concludes the notice.

Data breaches 108

Data breaches Identity Theft Healthcare Insurance 108

Malwarebytes

JANUARY 6, 2025

A US chain of dental offices known as Westend Dental LLC denied a 2020 ransomware attack and its associated data breach, instead telling their customers that data was lost due to an accidentally formatted hard drive. Unfortunately for the organization, the truth was found out.

Data breaches 123

Data breaches Ransomware Passwords Insurance 123

Tech Republic Security

AUGUST 13, 2024

billion records from National Public Data, including social security numbers, were leaked on a dark web forum. On August 6, 2.7

Data breaches 218

Data breaches 218

Troy Hunt

MARCH 28, 2022

Data breaches impact us all as individuals, companies and as governments. Over the last 4 years, I've been providing additional access to data breach information in Have I Been Pwned for government agencies responsible for protecting their citizens.

Government 363

Government Data breaches 363

The Hacker News

DECEMBER 17, 2024

Meta Platforms, the parent company of Facebook, Instagram, WhatsApp, and Threads, has been fined 251 million (around $263 million) for a 2018 data breach that impacted millions of users in the bloc, in what's the latest financial hit the company has taken for flouting stringent privacy laws.

Data breaches 123

Data breaches Accountability 123

Tech Republic Security

OCTOBER 10, 2024

An attacker snuck in by creating two new user accounts. Fidelity Investments assures customers their investments were not affected.

Data breaches 198

Data breaches Accountability Financial Services Big data 198

Troy Hunt

JULY 5, 2021

The Nationaal Cyber Security Centrum of the Netherlands (NCSC-NL) now has access to monitor the exposure of government departments across all the data breaches that make their way into HIBP.

Government 361

Government Data breaches 361

Security Affairs

DECEMBER 6, 2024

Atrium Health disclosed a data breach affecting 585,000 individuals to the HHS, potentially linked to the use of online tracking tools. Healthcare company Atrium Health disclosed a data breach that impacted 585,000 individuals. The company notified the US Department of Health and Human Services (HHS).

Data breaches 111

Data breaches Identity Theft Accountability Technology 111

Troy Hunt

APRIL 10, 2022

In my ongoing bid to make more useful information on data breaches available to impacted national governments , today I'm very happy to welcome the 32nd national CERT to Have I Been Pwned, the Republic of North Macedonia!

Government 323

Government Data breaches 323

Security Affairs

DECEMBER 18, 2024

Meta has been fined 251M ($263M) for a 2018 data breach affecting millions in the EU, marking another penalty for violating privacy laws. The Irish Data Protection Commission (DPC) fined Meta 251 million ($263M) for a 2018 data breach impacting 29 million Facebook accounts.

Data breaches 106

Data breaches Accountability Risk Advertising 106

Troy Hunt

MARCH 6, 2024

This access now provides them with complete access to the exposure of their government domains in data breaches. Today, we're very happy to welcome Germany as the 35th country to use this service, courtesy of their CERTBund department.

Government 298

Government Data breaches Cybersecurity 298

Security Affairs

JANUARY 3, 2025

A recovery team, with help from a cybersecurity firm, worked to restore systems and assess the attack’s scope, including its potential impact on patient data. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,data breach)

Data breaches 76

Data breaches Ransomware Insurance Healthcare 76

Troy Hunt

JUNE 14, 2021

API access to query their domains will give them greater visibility into the impact of data breaches on the Finnish government. Today I'm very happy to welcome the Finnish government to Have I Been Pwned by granting their National Cyber Security Centre full and free access to query their government domains.

Government 355

Government Data breaches 355

Troy Hunt

MAY 18, 2021

The Swedish National Computer Security Incident Response Team CERT-SE now has full and free access to query all government domains via HIBP's API and gain insights into the impact of data breaches on their government departments.

Government 358

Government Data breaches 358

Lohrman on Security

DECEMBER 23, 2022

After a year full of data breaches, ransomware attacks and real-world cyber impacts stemming from Russia’s invasion of Ukraine, what’s next? Here’s part 1 of your annual roundup of security industry forecasts for 2023 and beyond.

Data breaches 320

Data breaches Ransomware 320

Troy Hunt

AUGUST 9, 2021

Providing governments with greater visibility into the impact of data breaches on their staff helps protect against all manner of online attacks. They are now the 26th government to have complete and free API level access to query their government domains.

Government 360

Government Data breaches 360

Troy Hunt

MAY 24, 2021

As of today, the Trinidad and Tobago Cyber Security Incident Response Team (TT-CSIRT) has full and free access to query their government domains and gain visibility into where they've impacted by data breaches.

Government 353

Government Data breaches 353