Data Breach Today

OCTOBER 31, 2023

Researchers Discover 'Prolific Puma' Service Used by Hackers, Phishers and Scammers Researchers have discovered an underground offering with the codename "Prolific Puma," which since 2020 has been the "largest and most dynamic" cybercrime link-shortening service on the market.

Phishing 299

Phishing Marketing IT 299

Data Breach Today

JANUARY 17, 2024

Closing Time for Alcohol Delivery Service Follows Fed Crackdown for Poor Security It's last call for Drizly, the alcohol delivery service Uber bought for $1.1 billion in 2021.

Data breaches 284

Data breaches Cybersecurity Security IT 284

Data Breach Today

JANUARY 16, 2024

$295 Million in Digital Assets Lost Last Year to Wallet Drainers, Researchers Warn Cryptocurrency phishing scams designed to send crypto owners to fake versions of legitimate sites, recently disseminated via hijacked high-profile social media accounts, highlight the ongoing use of drainer scam-as-a-service offerings, which researchers say last year (..)

Phishing 296

Phishing 296

Data Breach Today

FEBRUARY 21, 2024

As Vendor Breaches Surge, Medical Practices Need 20/20 Visibility on Third Parties An Arizona firm that provides administrative services to a dozen ophthalmology practices in several states is notifying nearly 2.4 The hack is among the latest recent major data breaches involving vendors of critical services to healthcare firms.

Data breaches 243

Data breaches 243

Data Breach Today

DECEMBER 12, 2023

Independent Review Issues 37 Recommendations to Police Service of Northern Ireland Following an information security breach rated as the worst in U.K.

Cybersecurity 270

Cybersecurity Information Security Security 270

Krebs on Security

NOVEMBER 6, 2023

Last week, KrebsOnSecurity broke the news that one of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Apathyp told the proprietor that his chosen password on the service was “ 12Apathy.” However, in Sept.

Passwords 222

Passwords IT 222

Data Breach Today

AUGUST 31, 2023

The Panelists Also Discuss Improving the User Experience and Verifying Identities In the latest "Proof of Concept," two CyberEd board members, Connecticut state CISO Jeff Brown and Maricopa County CISO Lester Godsey, join ISMG editors to discuss securing digital government services, improving user experiences and balancing user convenience with robust (..)

Government 284

Government Security 284

Data Breach Today

APRIL 19, 2024

Also: Omni Hack Exposed Customer Data; More Ivanti Vulnerabilities Come to Light This week, police disrupted the LabHost phishing-as-a-service site, customer data compromised in Omni Hotels hack, more Ivanti vulnerabilities found, Moldovan botnet operator faces U.S.

Phishing 157

Phishing Data breaches Ransomware 157

Data Breach Today

DECEMBER 6, 2023

East River Medical Imaging Says Nearly 606,000 Affected A New York medical imaging services provider is notifying nearly 606,000 individuals that their information was potentially accessed and copied in a recent hacking incident.

Access 281

Access 281

Krebs on Security

OCTOBER 31, 2023

The top-level domain for the United States — US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. A graphic describing the operations of a malicious link shortening service that Infoblox has dubbed “Prolific Puma.”

Phishing 254

Phishing IT Privacy Government 254

Krebs on Security

OCTOBER 9, 2023

Postal Service (USPS) customers. Here’s a look at an extensive SMS phishing operation that tries to steal personal and financial data by spoofing the USPS, as well as postal services in at least a dozen other countries. A phishing page targeting An Post, the state-owned provider of postal services in Ireland.

Phishing 263

Phishing Analytics Passwords Government 263

Data Breach Today

NOVEMBER 16, 2023

Buying Master MSSP Will Bring MDR, SOC and Vulnerability Management to MSPs, MSSPs SonicWall acquired a longtime master MSSP partner to bring MDR, SOC and vulnerability management capabilities to its managed service providers.

Cloud 273

Cloud IT 273

Data Breach Today

FEBRUARY 28, 2023

Marshals Service, compromising and exfiltrating sensitive data law enforcement data. Agency Confirms Sensitive Law Enforcement Information Compromised Hackers maliciously encrypted a system belonging to the U.S. The system was disconnected shortly and the Department of Justice initiated a forensic investigation," said an agency spokesman.

Ransomware 262

Ransomware Encryption 262

Data Breach Today

NOVEMBER 27, 2023

Wipro Americas 2 CEO Suzanne Dann on How Generative AI Can Address Risk, Compliance Generative AI can improve operational efficiencies, enhance risk and compliance and elevate the client experience for financial services firms, said Wipro's Suzanne Dann.

Financial Services 263

Financial Services Compliance Risk 263

Krebs on Security

DECEMBER 6, 2023

At the end of November 2023, ICANN launched the Registration Data Request Service (RDRS), which is designed as a one-stop shop to submit registration data requests to participating registrars. This video from ICANN walks through how the system works. The RDRS portal.

Phishing 216

Phishing GDPR Personal data Communications 216

Data Breach Today

AUGUST 4, 2023

IT Complications' at Prospect Medical Holdings Shut Down Ambulances, Appointments A ransomware attack has forced a California-based hospital chain to divert ambulances from its emergency rooms and cancel appointments for services.

Ransomware 246

Ransomware IT 246

Data Breach Today

JULY 26, 2023

Paramedics Can’t Access NHS Patient Records, Resort to Using Pen and Paper A cyberattack against a Swedish software and services vendor has reportedly severed access to digital health records for at least two National Health Service ambulance services in the United Kingdom.

Paper 242

Paper Access 242

Data Breach Today

MAY 23, 2022

Attack Began on May 9; Patient Records Currently Inaccessible The healthcare services in the island country of Greenland, an autonomous Danish dependent territory, have been crippled by a cyberattack that began on May 9, 2022.

Access 260

Access IT 260

Data Breach Today

JULY 29, 2022

Customers of 'Robin Banks' Platform Have Netted $500,000 Fifty bucks gets cybercriminals access to a phishing-as-a-service platform for campaigns impersonating major brands in the United States and other English-speaking countries.

Phishing 336

Phishing Access 336

Data Breach Today

MARCH 8, 2023

An Estimated 600,000 Customers Affected by Breach Records of more than half a million customers of a lending service owned by India's largest private sector bank are apparently downloadable for free on a criminal data breach forum. HDFC Bank says it detected a data breach at one of its service providers that processes customer information.

Financial Services 257

Financial Services Data breaches IT 257

Data Breach Today

MARCH 23, 2022

Organization's Data Center Isolated to Contain Targeted Ransomware Attack Greek postal service Hellenic Post says a ransomware incident has forced it to pull a majority of its operations offline. It is working with IT security experts to probe the attack and restore services.

Ransomware 282

Ransomware Security IT 282

Data Breach Today

DECEMBER 20, 2022

Breach Is Latest in Long List of Complex Vendor Incidents An Oklahoma-based provider of administrative and technology services to healthcare organizations is notifying more than 271,000 individuals that their personal information may have been compromised in a hacking incident involving a third-party data storage vendor.

328

328

Data Breach Today

MAY 9, 2022

New Microsoft Services Help Clients Hunt Threats and Extend XDR Beyond the Endpoint Microsoft plans to roll out new managed services that give organizations the expertise needed to proactively hunt for threats and extend XDR beyond the endpoint.

Security 300

Security 300

Security Affairs

DECEMBER 12, 2023

The Ukrainian government’s military intelligence service announced the hack of the Russian Federal Taxation Service (FNS). Hackers of the Main Intelligence Directorate of the Ministry of Defense of Ukraine announced they have compromised the Russian Federal Taxation Service (FNS). ” concludes the statement.

Military 111

Military Government Communications IT 111

Data Breach Today

APRIL 8, 2024

The risks highlight the security concerns about AI-as-a-service offerings.

Risk 176

Risk Access Security 176

Data Breach Today

AUGUST 9, 2023

Authorities In Multiple Countries Arrest Operators of 16Shop An international law enforcement operation took down a phishing-as-a-service website that security researchers say was responsible for more than 150,000 phishing domains. The site, 16shop, sold phishing kits that targeted more than 70,000 people in 43 countries.

Phishing 244

Phishing Security 244

Krebs on Security

JUNE 21, 2023

biz , a long-running crypting service that is trusted by some of the biggest names in cybercrime. Thanks to the high demand for reliable crypting services, there are countless cybercriminals who’ve hung out their shingles as crypting service providers. This story explores the history and identity behind Cryptor[.]biz

e-Delivery 208

e-Delivery Passwords Cybersecurity Sales 208

Data Breach Today

AUGUST 10, 2023

Authorities in Multiple Countries Arrest Operators of 16shop An international law enforcement operation took down a phishing-as-a-service website that security researchers say was responsible for more than 150,000 phishing domains. The site, 16shop, sold phishing kits that targeted more than 70,000 people in 43 countries.

Phishing 240

Phishing Security 240

Data Breach Today

APRIL 21, 2020

SEC Filing Shows Company Still Assessing Maze Attack IT services and consulting giant Cognizant is still assessing the damage from a ransomware attack on Friday. And it's warning that the incident is disrupting services to some of its clients and could affect the company's revenue.

Ransomware 348

Ransomware IT 348

Krebs on Security

JULY 29, 2022

The 911 service as it existed until July 28, 2022. re, a proxy service that since 2015 has sold access to hundreds of thousands of Microsoft Windows computers daily, announced this week that it is shutting down in the wake of a data breach that destroyed key components of its business operations. A cached copy of flashupdate[.]net

Data breaches 246

Data breaches Retail Sales Compliance 246