#data-breach
#data-breach
[ follow ]
#cybersecurity #cyberattack #ransomware #european-commission #personal-information #shinyhunters #litellm
#ai-security
Privacy professionals
fromWIRED
2 weeks agoSears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
Sears Home Services exposed 3.7 million chat logs and 1.4 million audio files containing customer personal information through unsecured databases housing conversations with AI chatbot Samantha.
fromSecuritymagazine
2 days agoAI Startup Mercor, Which Works With Open AI and Anthropic, Confirms Data Breach
Four terabytes of data have reportedly been stolen, including database records and source code. Allegedly stolen data has been published on a leak site, containing Slack information, internal ticketing data, and videos of conversations between Mercor's AI systems and contractors.
Information security
Privacy professionals
fromSilicon Canals
2 days agoA fintech app asked users for their passports - then left 360,000 files unprotected for five years - Silicon Canals
A money transfer app exposed over 360,000 sensitive files on a public server for nearly five years, including unencrypted personal documents.
#fintech
Privacy professionals
fromSilicon Canals
2 days agoA money-transfer app stored customer passports on an unencrypted, publicly accessible server for nearly five years - Silicon Canals
Fintech companies face regulatory pressure to collect identity documents but lack enforceable obligations to protect them, leading to data breaches.
Privacy technologies
fromTechCrunch
2 days agoExclusive: Money transfer app Duc exposed thousands of driver's licenses and passports to the open web
A publicly accessible Amazon storage server exposed personal data of hundreds of thousands, including driver's licenses and passports, without encryption.
fromTNW | Data-Security
3 days agoHasbro hacked: Peppa Pig & Transformers owner warns of weeks of disruption
Hasbro disclosed unauthorized access to its systems, an intrusion first detected on 28 March that has since forced the company to take parts of its infrastructure offline and warn that product deliveries could be delayed for weeks.
London startup
fromTechzine Global
1 week agoDutch football club Ajax hid data breach after report from ethical hacker
In 2017, Rasnab gained access to the Amsterdam club's ticketing system, which was then operated in collaboration with Eventim. Through that system, he was able to view personal data of fans and employees, including data on club icon Sjaak Swart.
Privacy professionals
Privacy professionals
fromSecurityWeek
2 weeks agoMarquis Data Breach Affects 672,000 Individuals
Marquis, a marketing and compliance provider for financial institutions, disclosed a data breach affecting approximately 672,000 individuals, with stolen personal and financial information including SSNs, addresses, and payment card numbers.
#phishing-attack
Privacy professionals
fromSecurityWeek
2 weeks agoSecurity Firm Aura Discloses Data Breach Impacting 900,000 Records
Aura suffered a data breach affecting 900,000 records after a phishing attack compromised an employee account for approximately one hour, exposing names, email addresses, and contact information of roughly 35,000 customers.
Information security
fromSecuritymagazine
2 weeks agoTargeted Phishing Attack Breaches Biotech Company Data
Intuitive Surgical suffered a phishing attack compromising employee credentials, exposing customer and corporate data, though operational systems and customer networks remained unaffected due to network segmentation.
Privacy professionals
fromSecurityWeek
3 weeks agoStarbucks Data Breach Impacts Employees
Starbucks experienced a data breach affecting approximately 900 employees through phishing attacks that compromised Partner Central accounts, exposing names, social security numbers, dates of birth, and financial information.
#ransomware-attack
Privacy professionals
fromTechCrunch
2 weeks agoMarquis says over 672,000 people had personal and financial data stolen in ransomware attack | TechCrunch
Marquis, a fintech company serving hundreds of banks, suffered a ransomware attack in August 2025 that compromised personal and financial data of over 672,000 people, with more than half residing in Texas.
Information security
fromTheregister
3 weeks agoCrims hit EV charger firm ELECQ, steal customer contact data
ELECQ, a smart EV charger maker, suffered a ransomware attack on March 7 that encrypted and copied customer personal data including names, email addresses, phone numbers, and home addresses from its AWS cloud systems.
Cryptocurrency
fromBitcoin Magazine
2 weeks agoBitrefill Discloses Cyberattack, Points To North Korea's Lazarus Group
Bitrefill suffered a cyberattack on March 1 originating from a compromised employee laptop, with the Lazarus Group suspected as the perpetrator, resulting in stolen cryptocurrency and exposure of approximately 18,500 customer records.
fromTheregister
2 weeks agoEU sanctions Iranian cyber crew behind US election tampering
Based in Tehran, Emennet Pasargad is responsible for a variety of high-profile cyberattacks on Western organizations. Among these are attempted interference with US elections and attacks on the subscribers of French satirical magazine Charlie Hebdo, the Council stated.
France politics
UK news
fromwww.independent.co.uk
2 weeks agoLloyds faces questions over troubling' banking app glitch
Lloyds Banking Group faces parliamentary scrutiny after a data breach exposed customers' financial transactions through its banking app, prompting the Treasury Committee to demand immediate answers and compensation details.
Privacy professionals
fromComputerWeekly.com
2 weeks agoCompanies House restarts online services following cyber breach | Computer Weekly
Companies House restored its WebFiling service after discovering a security flaw that exposed personal data and allowed unauthorized actions to logged-in users with authorization codes.
#cybersecurity-vulnerability
Privacy professionals
fromBusiness Matters
2 weeks agoCompanies House suspends online filing service after cyber vulnerability exposes director data
Companies House suspended its WebFiling service after a security vulnerability allowed users to access and edit other companies' sensitive personal data through a browser back button exploit.
Information security
fromLawSites
1 month agoLexisNexis Says Data Breach Has Been Cointained; Hackers Claim Access to Government and Law Firm User Data
Hackers exploited an unpatched React vulnerability to breach LexisNexis servers, accessing millions of records including sensitive government employee data and plaintext credentials.
Privacy professionals
fromWIRED
3 weeks agoDo You Need an Identity Protection Service for Safe Browsing?
Identity theft protection services function as insurance products offering reactive compensation for damages rather than active prevention, with coverage details and sub-benefit caps critically affecting actual protection value.
#salesforce-security
Information security
fromSecuritymagazine
3 weeks agoWhy Are Platform Ecosystems - Like Salesforce - Often Targeted?
Salesforce warned users of increased threat actor activity exploiting misconfigured publicly accessible sites and permissive guest user settings to gain unauthorized data access for social engineering and vishing campaigns.
Information security
fromTheregister
3 weeks agoShinyHunters claims yet another Salesforce customers breach
ShinyHunters claims to have stolen data from approximately 100 high-profile companies including Salesforce, Snowflake, Okta, LastPass, Sony, and AMD through exploiting overly broad guest user permissions on Salesforce Experience Cloud sites.
Information security
fromSecuritymagazine
3 weeks agoWhy Are Platform Ecosystems - Like Salesforce - Often Targeted?
Salesforce warned users of increased threat actor activity exploiting misconfigured publicly accessible sites and permissive guest user settings to gain unauthorized data access for social engineering and vishing campaigns.
Information security
fromSecurityWeek
3 weeks agoHundreds of Salesforce Customers Allegedly Targeted in New Data Theft Campaign
ShinyHunters targets Salesforce instances through social engineering and misconfiguration exploitation, not platform vulnerabilities, prompting Salesforce warnings about overly permissive guest user settings.
Information security
fromTheregister
3 weeks agoShinyHunters claims yet another Salesforce customers breach
ShinyHunters claims to have stolen data from approximately 100 high-profile companies including Salesforce, Snowflake, Okta, LastPass, Sony, and AMD through exploiting overly broad guest user permissions on Salesforce Experience Cloud sites.
Information security
fromTechRepublic
3 weeks agoSecurity Flaw in WordPress Plugin Puts 400,000 Websites at Risk
A critical vulnerability in the Ally WordPress plugin allows unauthenticated attackers to extract sensitive database data including password hashes from hundreds of thousands of affected websites.
Privacy professionals
fromEngadget
3 weeks agoSocial Security watchdog investigating claims that DOGE engineer copied its databases
A former software engineer associated with Elon Musk's Department of Government Efficiency is under investigation for allegedly possessing and attempting to transfer sensitive Social Security Administration databases containing personal information on over 500 million Americans.
fromTechCrunch
3 weeks agoDOGE employee stole Social Security data and put it on a thumb drive, report says | TechCrunch
A former DOGE software engineer told co-workers at their new job that he "possessed two tightly restricted databases of U.S. citizens' information" and was planning to use the information at his new company, according to the report, which added that the Social Security Administration's inspector general is investigating the whistleblower complaint.
Privacy professionals
Information security
fromTechzine Global
3 weeks agoEricsson breach: voice phishing call exposed over 15,000 records
A vishing attack on an Ericsson vendor exposed personal data including Social Security numbers and medical information for 15,661 people after an employee was tricked into revealing account access.
fromTechRepublic
4 weeks agoLexisNexis Hack Exposes 3.9M Records Through Unpatched React Vulnerability
According to BleepingComputer, a recent breach on LexisNexis gave hackers access to nearly 4 million database records, thousands of accounts, password hashes, and cloud records. The company admitted the hackers gained access by exploiting an unpatched React vulnerability in its systems.
Information security
Privacy technologies
fromTheregister
4 weeks agoTransport for London says 2024 breach affected 7M customers
Transport for London's 2024 data breach exposed over 7 million people's information, vastly exceeding the initial 5,000 customer estimate, with potential access to names, contact details, email addresses, home addresses, and bank account data.
[ Load more ]