Security Affairs

FEBRUARY 4, 2025

Online food ordering and delivery platform GrubHub suffered a data breach that exposed the personal information of drivers and customers. This week the online food ordering and delivery firm GrubHub disclosed a data breach that exposed customer and driver information. The company reset affected passwords.

Data breaches 116

Data breaches Passwords Accountability Hacking 116

Adam Levin

FEBRUARY 21, 2020

The personal information of over 10.6 MGM Resorts confirmed the leaked data as being the result of a data breach that occurred last year. We are confident that no financial, payment card or password data was involved in this matter.”. million customers of MGM Resorts has been published online.

Data breaches 305

Data breaches Identity Theft Passwords Technology 305

Troy Hunt

SEPTEMBER 27, 2024

As it relates to the UK GDPR, there are two essential concepts to understand, and they're the first two bulleted items in their personal data breaches guide : The UK GDPR introduces a duty on all organisations to report certain personal data breaches to the relevant supervisory authority.

Data breaches 338

Data breaches Risk Passwords Government 338

SecureWorld News

DECEMBER 30, 2024

Recent cybersecurity statistics indicate that data breaches are escalating into a significant international concern. This underscores the need not only for strong preventive measures to protect critical information but also for a well-defined strategy to contain the damage if attackers successfully breach your defenses.

Data breaches 111

Data breaches Social Engineering Passwords Accountability 111

Adam Levin

OCTOBER 16, 2020

Barnes & Noble has confirmed a data breach following a cyberattack that took many of their services offline. . The bookseller sent an email to customers notifying them that their personal information had been exposed, but that their financial information had not been compromised. .

Data breaches 286

Data breaches VPN Passwords Accountability 286

Malwarebytes

OCTOBER 25, 2024

The Office for Civil Rights (OCR) at the HHS confirmed that it prioritized and opened investigations of Change Healthcare and UnitedHealth Group, focused on whether a breach of protected health information (PHI) occurred and on the entities’ compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Rules.

Healthcare 120

Healthcare Data breaches Passwords Identity Theft 120

Krebs on Security

AUGUST 19, 2024

New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. In April, a cybercriminal named USDoD began selling data stolen from NPD. Very informative.”

Passwords 355

Passwords Data breaches Accountability Data privacy 355

Malwarebytes

APRIL 15, 2025

The Hertz Corporation, on behalf of Hertz, Dollar, and Thrifty brands, is sending breach notifications to customers who may have had their name, contact information, driver’s license, andin rare casesSocial Security Number exposed in a data breach. Change your password. Check the vendors advice.

Data breaches 105

Data breaches Ransomware Passwords B2B 105

Security Affairs

MAY 15, 2025

Coinbase said rogue contractors stole data on under 1% of users and demanded $20M; the data breach was disclosed in an SEC filing. On May 11, 2025, the company received a ransom demand from a threat actor claiming to have customer and internal data. ” reads the filing with SEC. The final impact remains under review.

Data breaches 86

Data breaches Banking Accountability Retail 86

Krebs on Security

MAY 19, 2020

In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” “ Sanixer “) from the Ivano-Frankivsk region of the country.

Passwords 363

Passwords Accountability Hacking Password Management 363

The Last Watchdog

OCTOBER 23, 2024

Tip 1: Educating and Training the Workforce Regularly Human error remains one of the leading causes of data breaches. According to the Verizon 2024 Data Breach Investigations Report , 68% of cybersecurity breaches are caused by human error. Many cyber attacks exploit vulnerabilities in outdated software.

Small Business 162

Small Business Data breaches Backups Passwords 162

Troy Hunt

SEPTEMBER 3, 2020

You've possibly just found out you're in a data breach. The organisation involved may have contacted you and advised your password was exposed but fortunately, they encrypted it. Isn't the whole point of encryption that it protects data when exposed to unintended parties? But you should change it anyway.

Passwords 364

Passwords Encryption Data breaches Risk 364

Krebs on Security

JANUARY 11, 2021

Ubiquiti , a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The data may also include your address and phone number if you have provided that to us.”

Passwords 362

Passwords Authentication Firmware Accountability 362

Malwarebytes

FEBRUARY 25, 2025

Employment screening company DISA Global Solutions has filed a data breach notification after a cyber incident on their network. The attacker may have accessed over three million files containing personal information. These data brokers gather information from several sources and sell them on to interested buyers.

Data breaches 101

Data breaches Passwords Phishing Password Management 101

Security Affairs

JANUARY 30, 2025

“This database contained a significant volume of chat history, backend data and sensitive information, including log streams, API Secrets, and operational details.” It was hosted at oauth2callback.deepseek.com:9000 and dev.deepseek.com:9000.” ” reads the report published by Wiz. ” concludes the report.

Authentication 123

Authentication Passwords Hacking Risk 123

SecureWorld News

FEBRUARY 6, 2025

Grubhub recently confirmed a data breach stemming from a third-party vendor, exposing the ongoing risks associated with supply chain security. Hashed passwords for certain legacy systems (though Grubhub proactively rotated affected credentials).

Data breaches 91

Data breaches Accountability Social Engineering Passwords 91

Webroot

APRIL 22, 2025

Whether its an email address, a credit card number, or even medical records, your personal information is incredibly valuable in the wrong hands. Because whether you know it or not, many companies are collecting and storing your private data. billion people received notices that their information was exposed in a data breach.

Data breaches 72

Data breaches Identity Theft Passwords eCommerce 72

Security Affairs

JANUARY 15, 2025

A previously unknown threat actor released config files and VPN passwords for Fortinet FortiGate devices on a popular cybercrime forum. A previously unknown threat actor named Belsen Group published configuration files and VPN passwords for over 15,000 Fortinet FortiGate appliances. “The data includes: IPs.

VPN 133

VPN Passwords Firewall Firmware 133

Security Affairs

OCTOBER 31, 2024

Peruvian Interbank confirmed a data breach after threat actors accessed its systems and leaked stolen information online. Interbank disclosed a data breach after a threat actor claimed the hack of the organization and leaked stolen data online. TB of company data related to 3 million customers.

Data breaches 130

Data breaches Financial Services Hacking Mobile 130

Troy Hunt

JUNE 30, 2024

Last week, I wrote about The State of Data Breaches and got loads of feedback. Let me explain: Hackers This is where most data breaches begin, with someone illegally accessing a protected system and snagging the data. It's awkward, talking to the first party responsible for the breach.

Data breaches 305

Data breaches Government InfoSec Passwords 305

eSecurity Planet

MAY 14, 2025

Bitwarden and Dashlane are two popular password managers that offer business plans in addition to their products for individuals. 5 Bitwarden is a popular business password manager with features like user management, custom session length, and integrations with SIEM products. However, Dashlane is still a great choice for businesses.

Password Management 87

Password Management Passwords Data breaches Encryption 87

Security Affairs

OCTOBER 28, 2024

French internet service provider (ISP) Free disclosed a cyber attack, threat actors allegedly had access to customer personal information. that provides voice, video, data, and Internet telecommunications to consumers in France. The seller also published a sample of the stolen data and some screenshots. Free S.A.S.

Cyber Attacks 128

Cyber Attacks Telecommunications Data breaches Banking 128

Malwarebytes

APRIL 24, 2025

The tech giant may have used this data for targeted advertising, according to Blue Shield, which is one of the largest health insurers in the US. In a data breach notice on its website, Blue Shield says it had begun notifying certain members of a potential data breach that may have included elements of their protected health information.

Insurance 117

Insurance Data breaches Passwords Phishing 117

Security Affairs

OCTOBER 21, 2024

Despite being informed weeks prior, the organization’s failure to rotate exposed API keys, particularly the Zendesk token with access to over 800,000 support tickets, reflects poor incident response. Poor cyber hygiene increases the risk of further data breaches and could undermine user trust.

Internet 130

Internet Internet Data breaches Authentication 130

Malwarebytes

MAY 8, 2025

For decades, passwords have been our default method for keeping online accounts safe. A team at Cybernews conducted a study of over 19 billion newly exposed passwords which showed were looking at a a widespread epidemic of weak password reuse. Does that make the password obsolete? But our opponents have.

Passwords 93

Passwords Artificial Intelligence Identity Theft Password Management 93

Troy Hunt

FEBRUARY 25, 2025

We've also added 244M passwords we've never seen before to Pwned Passwords and updated the counts against another 199M that were already in there. This is just one of many channels involved in cybercrime, but it's noteworthy due to the huge amount of freely accessible data.

Passwords 362

Passwords Accountability VPN Malware 362

Malwarebytes

NOVEMBER 4, 2024

In a data breach notification filed by the Attorney General for the state of Maine, the cybersecurity incident that affected Columbus, Ohio impacted half a million people. The attack was later claimed by the Rhysida ransomware group on their leak site, where the group posts information about victims that are unwilling to pay.

Data breaches 118

Data breaches Passwords Ransomware Phishing 118

Krebs on Security

DECEMBER 19, 2024

The cracked software is being resold as a cloud-based attack tool by at least two different services, one of which KrebsOnSecurity traced to an information technology firm based in Turkey. “We have been playing cat and mouse for a while with these guys,” said Matt Sciberras , chief information security officer at Invicti.

Hacking 246

Hacking Cybercrime Advertising Data breaches 246

Security Affairs

MARCH 20, 2025

A data breach at the Pennsylvania State Education Association exposed the personal information of over 500,000 individuals. The Pennsylvania State Education Association (PSEA) suffered a data breach that impacted 517,487 individuals. ” reads the data breach notification.

Education 66

Education Data breaches Identity Theft Insurance 66

The Last Watchdog

NOVEMBER 22, 2021

Until biometrics or a quantum solution change our everyday approach to encryption, passwords remain our first line of defense against data breaches, hackers, and thieves. Proper password hygiene doesn’t require a degree in rocket science. 1) Create sufficiently-complex passwords. No personal information.

Passwords 244

Passwords Password Management Accountability Data breaches 244

Krebs on Security

JANUARY 7, 2025

In the first step of the attack, they peppered the target’s Apple device with notifications from Apple by attempting to reset his password. The target told Michael that someone was trying to change his password, which Michael calmly explained they would investigate. “Password is changed,” the man said.

Phishing 335

Phishing Cryptocurrency Accountability Social Engineering 335

The Last Watchdog

JUNE 12, 2023

Information privacy and information security are two different things. Related: Tapping hidden pools of security talent Information privacy is the ability to control who (or what) can view or access information that is collected about you or your customers. They take all this private information, and then they sell it.

Information Security 202

Information Security Data breaches CISO Encryption 202

Malwarebytes

JUNE 1, 2024

Live Nation Entertainment has confirmed what everyone has been speculating on for the last week : Ticketmaster has suffered a data breach. As appropriate, we are also notifying regulatory authorities and users with respect to unauthorized access to personal information. Change your password. Watch out for fake vendors.

Data breaches 145

Data breaches Passwords Phishing Password Management 145

Hacker's King

DECEMBER 28, 2024

Data breaches and account hacks are a growing concern for users, especially with the personal and professional information shared on the platform. If youre worried about your Instagram account being hacked , it's essential to take proactive steps to protect your data. Revoke access to any app you no longer use or trust.

Data breaches 52

Data breaches Hacking Passwords Accountability 52

Security Affairs

MAY 13, 2025

This week, a cyber update published by the company on its website confirmed the data breach: “To proactively manage the incident, we immediately took steps to protect our systems and engaged leading cyber security experts. The personal data could include contact details, date of birth and online order history.

Data breaches 62

Data breaches Cyber Attacks Passwords Social Engineering 62

Krebs on Security

JULY 29, 2021

Every time there is another data breach, we are asked to change our password at the breached entity. But the reality is that in most cases by the time the victim organization discloses an incident publicly the information has already been harvested many times over by profit-seeking cybercriminals.

Passwords 363

Passwords Password Management Phishing Scams 363

Security Affairs

JULY 24, 2024

A cyber attack against Michigan Medicine resulted in the compromise of the personal and health information of approximately 57,000 patients. The academic medical center of the University of Michigan, Michigan Medicine, suffered a data breach that impacted 56953 patients. Michigan Medicine notified patients of the data breach.

Data breaches 145

Data breaches Insurance Accountability Cyber Attacks 145