Data Breach Today

JUNE 17, 2020

Senator Wyden Releases CIA's Own 2017 Report Into Leak of 'Vault 7' Hacking Tools An internal CIA report from 2017 - just released in heavily redacted form - found that the agency's failure to secure its own systems facilitated the massive "Vault 7" data breach that enabled classified information, including details of 35 CIA hacking tools, to be leaked (..)

IT 264

IT Security Data breaches 264

Data Breach Today

MAY 13, 2019

Massive 2017 Breach Continues to Bite the Credit Reporting Giant's Bottom Line Equifax has reported a loss in its latest quarter due to ongoing incident response, legal, investigative and corporate information security overhaul costs resulting from its 2017 data breach. The credit reporting giant says that so far, it's spent $1.4

Data breaches 261

Data breaches Information Security Security IT 261

Data Breach Today

AUGUST 12, 2021

Darknet Market Only Accepts Monero, Promotes Malware and Botnets, Bans Ransomware The notorious AlphaBay darknet marketplace appears to be getting rebooted by "DeSnake," who claims to have been the security administrator for the previous iteration, which law enforcement officials took down in 2017.

Marketing 312

Marketing Ransomware Security IT 312

Krebs on Security

JULY 1, 2021

Equifax’s 2017 megabreach that exposed the personal and financial details of 145.5 million Americans may have shocked the public, but it did little to stop more than a million employers from continuing to sell Equifax their employee payroll data, Bloomberg found in late 2017. Intuit’s FAQ on the changes is here.

Financial Services 360

Financial Services Government Authentication IT 360

Data Breach Today

FEBRUARY 25, 2021

$70 Million Allegedly Lost to Schemes Such as Bitcoiin2gen, Touted by Steven Seagal Authorities have accused Serbia-based scammers of capitalizing on the "initial coin offering" bubble that began in 2017 to their advantage, bilking global cryptocurrency investors out of $70 million via Bitcoiin2gen and other supposed coins, and hiring the likes of (..)

298

298

Data Breach Today

JULY 2, 2024

Department of Health and Human Services has hit a Pennsylvania-based healthcare system with a $950,000 settlement for potential HIPAA violations found during an investigation into a 2017 ransomware attack. It's HHS' third HIPAA enforcement action in a ransomware case so far.

Ransomware 269

Ransomware IT 269

Data Breach Today

OCTOBER 28, 2020

Among the 2017 Incidents Was a Mailing Mishap Exposing HIV Information Federal regulators have slapped health insurer Aetna with a $1 million HIPAA settlement for three 2017 breaches - including a mailing incident that exposed HIV information - that occurred within six months.

Data breaches 240

Data breaches Insurance 240

Krebs on Security

MAY 14, 2019

Microsoft today is taking the unusual step of releasing security updates for unsupported but still widely-used Windows operating systems like XP and Windows 2003 , citing the discovery of a “wormable” flaw that the company says could be used to fuel a fast-moving malware threat like the WannaCry ransomware attacks of 2017.

Ransomware 270

Ransomware Authentication Security IT 270

Data Breach Today

JANUARY 15, 2020

Federal Judge Gives Final Approval to Class Action Settlement Over 2017 Breach A federal judge in Atlanta has given final approval to a settlement that resolves a class action lawsuit against credit bureau Equifax, which in 2017 suffered one of the largest data breaches in history. The minimum cost to Equifax will be $1.38

Data breaches 235

Data breaches 235

Data Breach Today

APRIL 3, 2020

What missteps led to hackers stealing details on 145 million Americans from Equifax in 2017? The answer to that question can be found in numerous reports and a Justice Department indictment. Security researcher Adrian Sanabria says they're essential reading for anyone responsible for cybersecurity defenses.

Cybersecurity 260

Cybersecurity Security 260

Data Breach Today

SEPTEMBER 20, 2018

law for "multiple failures" that contributed to its massive 2017 data breach, including its failure to act on a critical vulnerability alert issued by the U.S. Multiple Failures' Cited as Watchdog Levies Maximum Possible Pre-GDPR Fine Credit bureau Equifax has been hit with the maximum possible fine under U.K.

Privacy 262

Privacy Data breaches GDPR Security 262

Data Breach Today

APRIL 27, 2022

government on Tuesday announced a reward of up to $10 million for information pertaining to six alleged Russian military hackers tied to the 2017 NotPetya destructive malware campaign. 6 Russian Military Intelligence Agents Charged With Launching NotPetya Destruction The U.S.

Military 260

Military Government 260

Data Breach Today

APRIL 22, 2019

Marcus Hutchins, aka MalwareTech, Says He Regrets Coding, Distributing 'Kronos' Marcus Hutchins, the British security researcher who helped stop the massive WannaCry ransomware outbreak in mid-2017, has pleaded guilty to developing and distributing "Kronos" banking malware when he was younger.

Ransomware 250

Ransomware Security 250

Data Breach Today

FEBRUARY 10, 2020

Justice Department Unveils Indictments Against Members of China's PLA Four members of China's People's Liberation Army have been indicted for allegedly hacking Equifax in 2017 and stealing the personal data of over 145 million Americans as well as a vast trove of the company's trade secrets and intellectual property, the U.S.

Personal data 255

Personal data 255

Data Breach Today

JUNE 16, 2020

Senator Wyden Releases 2017 Report That Blames Lack of Security for Leaks An internal CIA report released Tuesday found that the agency's failure to secure its own systems led to the massive 2017 data breach that enabled classified information, including details on 35 CIA hacking tools, to be leaked to WikiLeaks.

IT 213

IT Security Data breaches 213

Data Breach Today

JUNE 28, 2019

Prosecutors Say Jun Ying Sold Stock Before Data Breach Was Made Public A former Equifax CIO who sold his stock in the company after learning about its 2017 data breach several months before the public and government agencies were informed has been sentenced to four months in prison for insider trading.

Data breaches 249

Data breaches Government IT 249

Schneier on Security

JULY 23, 2024

It’s heavily redacted , but still interesting. Many more ODNI documents here.

IT 100

IT FOIA 100

Data Breach Today

FEBRUARY 14, 2020

The latest edition of the ISMG Security Report analyzes the indictments of four Chinese military officers in connection with the 2017 Equifax data breach. Also featured: Advice on implementing NIST's new privacy framework; lessons learned in a breach disclosure.

Military 226

Military Data breaches Privacy Security 226

Data Breach Today

JULY 22, 2019

Deal Prepped With Feds and State Attorneys General Includes Victim Compensation Credit reporting giant Equifax has negotiated a proposed settlement that could reach $700 million to resolve federal and state probes into its massive 2017 data breach, as well as a nationwide class action lawsuit.

Data breaches 234

Data breaches IT 234

Data Breach Today

JULY 21, 2020

Parliament Panel's Report Slams Government for Not Investigating Russian Activities The British government was underprepared for Russia's alleged attempts to influence the outcomes of the Brexit referendum in 2016 and the 2017 general election and failed to conduct adequate investigations, according to a report by the U.K.

Government 222

Government Security 222

Krebs on Security

SEPTEMBER 16, 2020

authorities today announced criminal charges and financial sanctions against two Russian men accused of stealing nearly $17 million worth of virtual currencies in a series of phishing attacks throughout 2017 and 2018 that spoofed websites for some of the most popular cryptocurrency exchanges.

Phishing 355

Phishing Blockchain Marketing Government 355

Krebs on Security

DECEMBER 20, 2022

Millions of people likely just received an email or snail mail notice saying they’re eligible to claim a class action payment in connection with the 2017 megabreach at consumer credit bureau Equifax. Justice Department indicted four Chinese officers of the People’s Liberation Army (PLA) for perpetrating the 2017 Equifax hack.

Data breaches 274

Data breaches Data collection Paper Personal data 274

Collaboration 2.0

JANUARY 9, 2025

If you have an older MacOS device lying around, why not install Linux to give it a new life?

IT 116

IT 116

Krebs on Security

MAY 7, 2021

The company’s website says Hempton has been around since 2017, but the domain name was only registered in late November 2020. This 2017 story from New Zealand financial news site interest.co.nz Kulikova deleted Bernard’s former companies from her LinkedIn profile shortly after last year’s series). Hemptonllp[.]com

Sales 304

Sales Paper Marketing IT 304

Data Breach Today

JULY 27, 2020

Hefty Penalty After Theft of Unencrypted Laptop Federal regulators have slapped the Rhode Island-based health system LifeSpan with a $1 million HIPAA settlement tied to a 2017 data breach involving the theft of an unencrypted laptop that potentially exposed the data of 20,000 individuals.

Data breaches 207

Data breaches IT 207

Krebs on Security

AUGUST 27, 2019

“On August 20, 2019, we learned from a third party of a data exposure that impacts a subset of customers of our Cloud WAF product who had accounts through September 15, 2017,” wrote Heli Erickson , director of analyst relations at Imperva.

Cybersecurity 253

Cybersecurity Passwords Cloud Data breaches 253

Adam Shostack

JANUARY 2, 2025

It's a change for how organizations plan for training, and it's a change for how we should design training, as people will need lots more "what's new in AWS in Q1 2017" training to augment "intro to AWS." That's not just a change for individuals. Tidal forces, indeed.

Cloud 52

Cloud Security IT 52

Krebs on Security

AUGUST 14, 2020

Defray was first spotted in 2017, and its purveyors have a history of specifically targeting companies in the healthcare space. R1 RCM declined to discuss the strain of ransomware it is battling or how it was compromised. Sources close to the investigation tell KrebsOnSecurity the malware is known as Defray.

Ransomware 363

Ransomware Insurance Phishing IT 363

Krebs on Security

FEBRUARY 4, 2020

That’s interesting because the article in question was actually a 2017 KrebsOnSecurity story about a mobile app tied to a competing booter service that happened to share some of the same content as Quantum Stresser. Attorney Adam Alexander.

Government 294

Government IT Security 294

Adam Shostack

JANUARY 2, 2025

[no description provided] As I reflect back on 2017, I think it was a tremendously exciting year for threat modeling tooling. Some of the highlights for me include: OWASP Threat Dragon is a web-based tool, much like the MS threat modeling tool, and explained in Open Source Threat Modeling , and the code is at [link].

Communications 52

Communications Cloud Risk Security 52

Data Breach Today

SEPTEMBER 16, 2024

Prosecutors said Song began sending out targeted emails in 2017. At-Large Wu Song, 39, Faces 28-Count Criminal Indictment U.S. federal prosecutors indicted a Chinese national employed by a state-owned aerospace and defense conglomerate with a yearslong phishing campaign aimed at extracting software developed for NASA.

Phishing 173

Phishing 173

Krebs on Security

JUNE 7, 2022

But these dangerous hoaxes can quickly turn deadly: In March 2019, 26-year-old serial swatter Tyler Barriss was sentenced to 20 years in prison for making a phony emergency call to police in late 2017 that resulted in the shooting death of an innocent Kansas resident.

IT 321

IT 321

Krebs on Security

MARCH 8, 2019

In the wake of Equifax’s epic 2017 data breach impacting some 148 million Americans, many people did freeze their credit files at the big three in response. This has been the reality for years, and was so well before Equifax announced its big 2017 breach. Consumers in every U.S. But Equifax has changed a few things since then.

Passwords 276

Passwords Authentication Security Access 276

Krebs on Security

NOVEMBER 8, 2020

Homicide detectives said they originally thought the man found June 14, 2017 in a torched SUV on a logging road in Squamish, British Columbia was a local rock climber known to others in the area as a politically progressive vegan named Jesse James. in 1999, according to news reports. Davis Wolfgang Hawke.

Government 358

Government IT 358

Krebs on Security

MAY 28, 2020

The ad campaign follows a similar initiative launched in late 2017 that academics say measurably dampened demand for such services by explaining that their use to harm others is illegal and can land potential customers in jail. For example, search in Google for the terms “booter” or “stresser” from a U.K.

Cybersecurity 263

Cybersecurity Risk Paper IT 263