Data Breach Today

MARCH 1, 2023

2019 Ransomware Breach Affected 70,000 Patients, Destroyed Records of 2,500 of Them Irish authorities have fined a healthcare organization 460,000 euros - about $490,000 - for a 2019 Calum ransomware breach that compromised sensitive information of 70,000 patients, including the permanent deletion of data for about 2,500 of them.

GDPR 296

GDPR Ransomware 296

Data Breach Today

AUGUST 7, 2023

New Ransomware Group Branches Out, Hits Multiple Hospitals, Provider Networks Authorities are sounding the alarm about double-extortion attacks against healthcare and public health sector organizations by a relatively new ransomware-as-a-service group, Rhysida, which until recently had mainly focused on entities in other industries.

Ransomware 236

Ransomware 236

Data Breach Today

MARCH 14, 2024

Also: Catching Up With Spain's Most Dangerous Hacker This week, the FCC OK'd cybersecurity labeling, DarkGate exploited Google, Fortinet patched a bug, cyberattacks hit the French government and employment agencies, Google restricted Gemini AI chatbot and paid bug bounties, Microsoft had Patch Tuesday, Marine Max was attacked, and Alcasec moved on. (..)

Cybersecurity 292

Cybersecurity IoT Government 292

Data Breach Today

MARCH 9, 2021

Agency Is the Latest Victim of Attacks Exploiting Newly Exposed Flaws A Microsoft Exchange Server at the European Banking Authority, a regulatory agency of the European Union, was hacked. But the agency says there are no indications of data exfiltration.

350

350

Data Breach Today

JULY 6, 2021

Avast: This Supply Chain Attack Used Cobalt Strike Researchers at Avast discovered a compromised server belonging to MonPass, a certification authority in Mongolia, that may have been breached eight times.

261

261

Data Breach Today

JUNE 23, 2022

Vulnerabilities Contained in Certain Hillrom Medical Electrocardiographs A popular line of portable electrocardiographs contains vulnerabilities that allow hackers to execute commands and access sensitive information, federal authorities warn. Device manufacturer Hillrom Medical has released a patch and coordinated disclosure with CISA.

Manufacturing 246

Manufacturing Security Access 246

Security Affairs

JANUARY 28, 2024

Medusa ransomware gang claimed responsibility for the attack against the Kansas City Area Transportation Authority (KCATA). On January 23, 2023, the Kansas City Area Transportation Authority (KCATA) suffered a ransomware attack. We have contacted all appropriate authorities including the FBI.” ” continues the notice.

Ransomware 111

Ransomware Data breaches IT Information Security 111

Security Affairs

APRIL 14, 2024

and Australian authorities led to the arrest of two key figures behind the Firebird RAT operation. The RAT allowed customers to access and control their victims’ computers remotely, its author advertised its stealing capabilities. A joint investigation conducted by U.S.

Computer and Electronics 120

Computer and Electronics Blockchain Communications Access 120

Data Breach Today

JUNE 12, 2023

banks will soon have to reimburse customers who fall prey to authorized push payment scams. The Cost of Reimbursing Scam Victims Will Be Split Between Sending, Receiving Banks U.K.

184

184

Data Breach Today

FEBRUARY 24, 2023

Group Has Exploited GoAnyWhere MFT Flaw for Ransomware Attacks Federal authorities are urging the healthcare sector to ratchet up defenses against potential assaults by Russian-linked Clop on the heels of the ransomware-as-a-service group's recent alleged mass attacks exploiting a vulnerability in vendor Fortra's secure file transfer software GoAnyWhere (..)

Ransomware 167

Ransomware Security 167

Data Breach Today

FEBRUARY 20, 2023

Confiscated Cryptocurrency Tied to $620 Ronin Bridge Hack Norwegian authorities confiscated crypto assets worth nearly $5.68 The authority describes the seizure as Norway's largest-ever crypto seizure. million tied to the 2022 Ronin cryptocurrency bridge hack by North Korean state threat actor Lazarus Group.

130

130

Data Breach Today

JANUARY 16, 2023

Experts Discuss Challenges, New Solutions for Detecting Authorized Payment Scams Authorized payment scams are growing, and regulators, lawmakers and banks are taking note.

130

130

Data Breach Today

JANUARY 23, 2023

Nearly Half of Assets Exchanged Through Defunct Crypto Platform Linked to Crimes Spanish authorities arrested three senior executives of now-defunct cryptocurrency exchange platform Bitzlato, Europol announced.

130

130

Data Breach Today

JUNE 23, 2021

3 Experts Describe Lessons Learned How can financial institutions deal with the problem of authorized push payment fraud? Three experts - Karen Boyer of People’s United Bank, Alasdair MacFarlane of NatWest Bank and Dave Excell of Featurespace - offer their insights on best practices.

208

208

Security Affairs

JANUARY 30, 2024

Italian data protection authority regulator authority Garante said that ChatGPT violated European Union data privacy regulations. In early April 2023, the Italian Data Protection Authority temporarily banned ChatGPT due to the illegal collection of personal data and the absence of systems for verifying the age of minors.

Privacy 99

Privacy GDPR Personal data Data Privacy 99

Krebs on Security

MAY 18, 2020

More importantly, talking publicly about these flaws tends to be the fastest way to get malware authors to fix any vulnerabilities in their code. After serving almost a year on the forum while authoring hundreds of posts and threads (including many articles first published on Krober), Lebron abruptly disappeared from Exploit.

Ransomware 306

Ransomware Marketing Security IT 306

Data Breach Today

JUNE 19, 2020

Indictment Describes Hacking of HR Database at Medical Center in Pittsburgh Authorities have arrested a suspect accused of hacking the University of Pittsburgh Medical Center's human resources database in 2014 and stealing personally identifiable information from 65,000 employees, which was then used for tax fraud.

Data breaches 232

Data breaches 232

Data Breach Today

NOVEMBER 11, 2022

Aite-Novarica Group's Trace Fooshee on Policy, Strategy and Fraud-Fighting Tools The United Kingdom and many other countries are considering ways to make banks liable for authorized payment fraud and lift the burden from millions of victims of online scams.

130

130

Data Breach Today

OCTOBER 27, 2022

Banking Researcher Ken Palla Shares New Report on Controlling Zelle Scams Since Zelle fraud has increased 109% in the United States, the banking industry is struggling to reduce authorized push payment scams.

Analytics 130

Analytics Education 130

Data Breach Today

JANUARY 5, 2023

Authorized payment scams are on the rise, and banking regulators are putting pressure on financial institutions to do more to protect customers. The biggest challenge is that the customers are driving the process, says Bradley Haacke, vice president and financial crimes director at Fifth Third Bank.

IT 130

IT 130

The Last Watchdog

FEBRUARY 15, 2024

15, 2024 – Harter Secrest & Emery LLP , a full-service business law firm with offices throughout New York, is pleased to announce that it has been selected as a NetDiligence-authorized Breach Coach ® , a designation only extended to law firms that demonstrate competency and sophistication in data breach response. Greene Led by partner F.

Data breaches 100

Data breaches Financial Services Big data Retail 100

Security Affairs

SEPTEMBER 15, 2023

The Russian national Dariy Pankov (28), aka dpxaker, is the author of the NLBrute malware. ” Pankov resides in Russia, he was taken into custody by Georgian authorities in the Republic of Georgia on October 4, 2022, and extradited to the United States. The man has been extradited to the United States from Georgia.

Sales 107

Sales Marketing Passwords Access 107

Data Breach Today

OCTOBER 27, 2020

a protocol designed to be an additional security layer for online credit and debit card transactions, by banks and merchants alike can play a critical role in reducing "authorized payment fraud," two security experts say. Two Card Security Experts Describe Effective Strategies Implementation of 3D Secure 2.0,

Security 162

Security 162

Security Affairs

DECEMBER 14, 2023

The French authorities arrested in Paris a Russian national who is suspected of laundering criminal proceeds for the Hive ransomware gang. cybersecurity and intelligence authorities. French police arrested a Russian national who is suspected of laundering money resulting from the criminal activity of the Hive ransomware gang.

Ransomware 123

Ransomware Blockchain Manufacturing Analytics 123

Krebs on Security

APRIL 2, 2019

Its author maintains Orcus is a legitimate R emote A dministration T ool that is merely being abused, but security experts say it includes multiple features more typically seen in malware known as a R emote A ccess T rojan. Rezvesz appears to have a flair for the dramatic , and has periodically emailed this author over the years.

Marketing 211

Marketing Passwords Systems administration Access 211

Security Affairs

MAY 3, 2023

Authorities dismantled the Try2Check platform, a Card-Checking platform that generated tens of millions of dollars in revenue. The authorities dismantled the defendant’s criminal network and the State Department also announced a $10 million reward for information leading to the capture of Kulkov, who is currently residing in Russia.

Education 97

Education Cybersecurity Government Security 97

The Last Watchdog

OCTOBER 30, 2023

A new tier of overlapping, interoperable, highly automated security platforms must, over the next decade, replace the legacy, on-premise systems that enterprises spent multiple kings’ fortunes building up over the past 25 years.

Cloud 276

Cloud Security Phishing Ransomware 276

Krebs on Security

NOVEMBER 13, 2019

In July 2016, KrebsOnSecurity published a story identifying a Toronto man as the author of the Orcus RAT , a software product that’s been marketed on underground forums and used in countless malware attacks since its creation in 2015. This week, Canadian authorities criminally charged him with orchestrating an international malware scheme.

Marketing 194

Marketing Systems administration Sales Passwords 194

Data Breach Today

OCTOBER 29, 2018

Paras Jha Launched DDoS Attacks Against Rutgers, Ran Click-Fraud Botnets One of the co-authors of the devastating Mirai botnet malware has been sentenced to home incarceration and community service, and ordered to pay $8.6

232

232

Security Affairs

DECEMBER 19, 2023

Smishing Triad: Researchers warn crooks impersonating UAE Federal Authority for Identity and citizenship ahead of the Holiday Season Resecurity, Inc. USA) has identified a new fraudulent campaign by the Smishing Triad gang in which they are impersonating the United Arab Emirates Federal Authority for Identity and Citizenship.

Data breaches 108

Data breaches Cybersecurity Access Information Security 108

Adapture

JANUARY 25, 2024

25, 2023 – Adapture, a leader in networking, security and infrastructure consulting, has been appointed as a Cloudflare Authorized Service Delivery Partner (ASDP) for Application Services, Zero Trust Services and Migration Services. The post Adapture Appointed Cloudflare Authorized Service Delivery Partner appeared first on Adapture.

Cloud 52

Cloud Marketing Access Security 52

Security Affairs

JULY 5, 2023

The Swedish Authority for Privacy Protection (IMY) conducted audits against CDON, Coop, Dagens Industri, and Tele2 and determined how they use Google Analytics for web statistics. The authority determined that Google’s statistics tool was transferring personal data to the US.

Analytics 93

Analytics Personal data GDPR Privacy 93

Security Affairs

APRIL 1, 2023

The Italian Data Protection Authority, Garante Privacy, has temporarily banned ChatGPT due to the illegal collection of personal data and the absence of systems for verifying the age of minors. The Authority pointed out that OpenAI does not alert users that it is collecting their data. ” continues the press release. .

Privacy 98

Privacy Personal data GDPR Compliance 98

Thales Cloud Protection & Licensing

JUNE 8, 2023

Fine-grained Authorization: Protecting and controlling user access in a digital-first world madhav Fri, 06/09/2023 - 05:22 Strong and flexible customer authentication is a key driver for adopting a customer identity & access management (CIAM) solution, with customer experience and security being the apparent benefits.

Access 87

Access Customer Experience Authentication Security 87

Security Affairs

NOVEMBER 15, 2022

A suspected China-linked APT group breached a digital certificate authority in Asia as part of a campaign aimed at government agencies since March 2022. “The victims in this campaign included a certificate authority, as well as government and defense agencies.” SecurityAffairs – hacking, certificate authority).

Archiving 105

Archiving Government IT Security 105