Data Breach Today

JUNE 6, 2020

Attacks Targeting Education and Software Companies Started in December 2019 A sophisticated strain of ransomware called Tycoon has been selectively targeting education and software companies since December 2019, according to a joint report released by BlackBerry and KPMG.

Ransomware 321

Ransomware Education IT 321

Data Breach Today

MARCH 10, 2020

Ransomware Debuted in Late 2019; Gang's Ransom Demands Have Hit $660,000 in Bitcoins Security firm Emsisoft is offering free, customized decryptors to victims of PwndLocker ransomware, which first surfaced in late 2019 and has been tied to attacks against Lasalle County in Illinois and the Serbian city of Novi Sad, with the gang demanding up to $660,000 (..)

Ransomware 321

Ransomware Security IT 321

Data Breach Today

APRIL 4, 2021

Facebook Says Data Comes from Previously Reported 2019 Incident A security researcher found more than 500 million Facebook records made available for free on the darknet, exposing basic user information including any phone numbers associated with accounts. Facebook says this is “old data” previously reported.

Security 362

Security 362

Data Breach Today

MARCH 1, 2023

2019 Ransomware Breach Affected 70,000 Patients, Destroyed Records of 2,500 of Them Irish authorities have fined a healthcare organization 460,000 euros - about $490,000 - for a 2019 Calum ransomware breach that compromised sensitive information of 70,000 patients, including the permanent deletion of data for about 2,500 of them.

GDPR 301

GDPR Ransomware 301

Data Breach Today

MARCH 29, 2024

Probe Finds 'Largest and Most Hazardous Nuclear Site' Violated Security Laws Britain's nuclear power watchdog said it plans to prosecute the country's "largest and most hazardous nuclear site," Sellafield, for violating nuclear industry cybersecurity regulations from 2019 to 2023.

Cleanup 320

Cleanup Cybersecurity Security IT 320

Data Breach Today

JUNE 26, 2020

LifeLabs' 2019 Breach Exposed Data on 15 Million Canadians Canadian information privacy regulators have ordered medical testing laboratory LifeLabs to improve its data security practices following their investigation of a 2019 breach that exposed the health data of 15 million individuals.

Security 274

Security Privacy IT 274

Data Breach Today

JUNE 3, 2021

Security experts say the operation, which dates from 2019, appears to be run from Russia, and has been hitting increasingly large targets.

Ransomware 331

Ransomware Security 331

Krebs on Security

JANUARY 13, 2021

Allan Liska , senior security architect at Recorded Future , said while it is concerning that so many vulnerabilities around the same component were released simultaneously, two previous vulnerabilities in RPC — CVE-2019-1409 and CVE-2018-8514 — were not widely exploited.

Marketing 289

Marketing Security IT Access 289

Data Breach Today

JUNE 30, 2021

Paige Thompson Now Faces Up to 20 Years in Federal Prison, Documents Show The Justice Department has filed seven new criminal charges against Paige Thompson, who is suspected of hacking Capital One in 2019, which compromised the personal data of 100 million Americans, including exposing hundreds of thousands of Social Security numbers.

Personal data 331

Personal data Security 331

Krebs on Security

NOVEMBER 26, 2019

The other three restaurants are all part of the same parent company and disclosed breaches in August 2019. Focus Brands (which owns Moe’s, McAlister’s, and Schlotzsky’s) was breached between April and July 2019, and publicly disclosed this on August 23. Krystal announced a card breach last month. percent worldwide.

Sales 346

Sales Marketing Retail Security 346

Data Breach Today

JANUARY 27, 2021

million in 2019, according to NetScout's Atlas Security Engineering and Response Team. Researchers Say Pandemic Triggered Surge in Activity The number of distributed denial-of-service attacks launched in 2020 surpassed 10 million, up from 8.5

Security 306

Security 306

Data Breach Today

JANUARY 12, 2024

Beijing cyberespionage hackers dubbed "Volt Typhoon" are using vulnerabilities that were first disclosed in early 2019. Volt Typhoon' Could Be Preparing for Renewed Burst of Activity A Chinese state hacking group is attacking superseded Cisco routers to target government entities in the United States, the United Kingdom and Australia.

Government 306

Government 306

Data Breach Today

JANUARY 5, 2024

Authorities in 15 Countries Helped Dismantle Operations Following 2019 Takedown The U.S.

Marketing 303

Marketing IT 303

Data Breach Today

JULY 7, 2020

Researchers: Cosmic Lynx Group Has Hit Businesses in Over 40 Countries A newly uncovered Russia-based business email compromise gang has been targeting hundreds of large, multinational corporations in over 40 countries since 2019, according to the security firm Agari.

Security 295

Security 295

Data Breach Today

MAY 13, 2022

3 Bugs Found in 2019 Cannot Be Patched Without Physical Access to the Printers Hundreds of thousands of Konica Minolta printers used in businesses have reportedly been vulnerable to three critical flaws since 2019.

Access 256

Access 256

Data Breach Today

APRIL 25, 2020

UN Agency Reports Five Times As Many Incidents Compared to 2019 The WHO, which has been at the forefront of the global COVID-19 pandemic since the start of the year, has witnessed a "dramatic" increase in the number of attacks since the current healthcare crisis began, according to the organization's CIO.

291

291

Data Breach Today

MAY 13, 2020

Top 10 Vulnerabilities Exploited by Sophisticated Foreign Hackers Detailed by CISA From 2016 to 2019, sophisticated nation-state attackers preferred to target 10 vulnerabilities more than all others, the U.S. Cybersecurity and Infrastructure Security Agency and FBI warn in a new alert.

Cybersecurity 290

Cybersecurity Security 290

Data Breach Today

APRIL 8, 2021

Kaspersky: Cring Group Targeting European Organizations The gang behind ransomware dubbed "Cring," which has waged a series of attacks this year, is exploiting a Fortinet VPN server vulnerability that the company patched in 2019, according to a report from the security firm Kaspersky that analyzes one attack in Europe.

Ransomware 282

Ransomware Security 282

Data Breach Today

JANUARY 12, 2021

Software Vendor's Infrastructure Penetrated by September 2019 Investigators probing the supply-chain attack that hit SolarWinds say attackers successfully hacked the company's Microsoft Visual Studio development tools to add a backdoor into Orion network-monitoring security software builds.

Security 282

Security 282

Krebs on Security

DECEMBER 8, 2020

Additionally, Microsoft released an advisory on how to minimize the risk from a DNS spoofing weakness in Windows Server 2008 through 2019. These vulnerabilities affect Microsoft Excel 2013 through 2019, Microsoft 365 32 and 64 bit versions, Microsoft Office 2019 32 and 64 bit versions, and Microsoft Excel for Mac 2019.”

Security 311

Security Risk IT 311

Data Breach Today

JUNE 30, 2021

The security firm says the number of attacks using the tool rose by 161% from 2019 to 2020.

Security 286

Security 286

Data Breach Today

FEBRUARY 20, 2024

LockBit emerged in 2019 and was one of the largest ransomware operations.

Ransomware 259

Ransomware Encryption 259

Data Breach Today

FEBRUARY 10, 2020

Class Action Suits Would Focus on PIH Health Breach That Affected 200,000 Several law firms are racing to be among the first to file class action lawsuits against PIH Health in the wake of the California-based regional healthcare network reporting last month that a 2019 phishing breach affected nearly 200,000 individuals. Why the rush?

Phishing 283

Phishing 283

Krebs on Security

JANUARY 28, 2020

In late December 2019, fuel and convenience store chain Wawa Inc. The fraud bazaar Joker’s Stash on Monday began selling some 30 million stolen payment card accounts that experts say have been tied back to a breach at Wawa in 2019. Representatives from MasterCard did not respond to requests for comment.

Sales 341

Sales Retail Security Encryption 341

Krebs on Security

JULY 23, 2020

In May 2019, KrebsOnSecurity broke the news that the website of mortgage title insurance giant First American Financial Corp. billion in 2019. In August 2019, the company said a third-party investigation into the exposure identified just 32 consumers whose non-public personal information likely was accessed without authorization.

Insurance 326

Insurance Financial Services Mining Access 326

Data Breach Today

AUGUST 3, 2021

Judge Says Users Agreed With Arbitration When Accepting Terms and Conditions A consolidated class action lawsuit filed against mobile game developer Zynga after it suffered a 2019 data breach looks set to be handled instead via arbitration.

Data breaches 279

Data breaches IT 279

Data Breach Today

APRIL 22, 2022

Proposed Agreement to Settle Class Action Lawsuit in Solara Medical Supplies Breach Solara Medical Supplies has agreed to pay $5 million and implement a host of security improvements under a proposed settlement of a consolidated class action lawsuit involving a 2019 phishing incident that affected sensitive information of more than 114,000 individuals. (..)

Security 263

Security Phishing 263

Krebs on Security

SEPTEMBER 8, 2020

Among the chief concerns for enterprises this month is CVE-2020-16875 , which involves a critical flaw in the email software Microsoft Exchange Server 2016 and 2019. Security firm Tenable notes that this bug is reminiscent of CVE-2019-0604 , another Sharepoint problem that’s been exploited for cybercriminal gains since April 2019.

Authentication 285

Authentication Security Ransomware IT 285

Data Breach Today

JUNE 28, 2021

Manufacturer Stopped Supporting Targeted Network-Attached Storage Devices in 2015 Owners of Western Digital My Book Live devices have seen their data remotely wiped by attackers targeting a flaw first detailed in 2019.

Manufacturing 264

Manufacturing Security 264

Data Breach Today

JUNE 20, 2022

The breach, which the credit union group first disclosed in 2019, traced to a "malicious" insider who for 26 months had been selling personal details for 4.2 million active customers.

Data breaches 264

Data breaches 264

Data Breach Today

MARCH 17, 2022

22 Million Accounts Breached Owing to Multiple Security Failures, Regulator Says The current and former owners of CafePress, a site for selling customizable merchandise, have agreed to a draft Federal Trade Commission settlement tied to multiple security shortcomings that failed to prevent or detect a 2019 data breach that exposed 22 million users' (..)

Data breaches 260

Data breaches Security 260

Krebs on Security

OCTOBER 15, 2020

Q6Cyber CEO Eli Dominitz said the breach appears to extend from May 2019 through September 2020. Gemini puts the exposure window between July 2019 and August 2020. The NYU researchers found BriansClub earned close to $104 million in gross revenue from 2015 to early 2019, and listed over 19 million unique card numbers for sale.

Sales 362

Sales Data breaches Retail Ransomware 362

Data Breach Today

OCTOBER 1, 2021

Suit Alleges Inability to Access Critical Fetal Monitoring Data Was Malpractice The death of a baby born with complications during a 2019 ransomware attack on an Alabama hospital – one that left clinicians unable to access electronic health records and patient monitoring systems - is intensifying the spotlight on the potentially fatal consequences (..)

Ransomware 255

Ransomware Access 255

Data Breach Today

JUNE 30, 2022

It also discusses cybercriminals' evolving ransomware tactics and the devastating price of responding to a ransomware attack, as experienced by Travelex in 2019. The latest edition of the ISMG Security Report describes why firewalls and VPNs don't belong in Zero Trust design.

Ransomware 246

Ransomware Security IT 246

Data Breach Today

JUNE 20, 2022

Ransomware struck global currency exchange and remittance company Travelex on New Year's Eve 2019. Don Gibson was a security architect at Travelex. His name became publicly linked with the Travelex incident, and the attention was completely undesired. It contributed to a health situation that nearly led to a tragic outcome.

Ransomware 243

Ransomware Security IT 243

Krebs on Security

AUGUST 10, 2021

The software giant warned that attackers already are pouncing on one of the flaws, which ironically enough involves an easy-to-exploit bug in the software component responsible for patching Windows 10 PCs and Windows Server 2019 machines. “In the case of ransomware attacks, they have also been used to ensure maximum damage.”

Risk 335

Risk Ransomware Security IT 335