Cryptocurrency
fromSecurityWeek
1 hour ago$3.6 Million Stolen in Bitcoin Depot Hack
Bitcoin Depot reported a theft of approximately $3.6 million in bitcoin due to a cyber intrusion into its IT systems.
#data-breach
#data-breach
[ follow ]
#cybersecurity #cyberattack #ransomware #fbi #european-commission #personal-information #litellm #identity-theft
#ai-security
Privacy professionals
fromWIRED
3 weeks agoSears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
Sears Home Services exposed 3.7 million chat logs and 1.4 million audio files containing customer personal information through unsecured databases housing conversations with AI chatbot Samantha.
fromSecuritymagazine
6 days agoAI Startup Mercor, Which Works With Open AI and Anthropic, Confirms Data Breach
Four terabytes of data have reportedly been stolen, including database records and source code. Allegedly stolen data has been published on a leak site, containing Slack information, internal ticketing data, and videos of conversations between Mercor's AI systems and contractors.
Information security
Privacy professionals
fromSilicon Canals
5 days agoA fintech app asked users for their passports - then left 360,000 files unprotected for five years - Silicon Canals
A money transfer app exposed over 360,000 sensitive files on a public server for nearly five years, including unencrypted personal documents.
#fintech
Privacy professionals
fromSilicon Canals
5 days agoA money-transfer app stored customer passports on an unencrypted, publicly accessible server for nearly five years - Silicon Canals
Fintech companies face regulatory pressure to collect identity documents but lack enforceable obligations to protect them, leading to data breaches.
Privacy technologies
fromTechCrunch
6 days agoExclusive: Money transfer app Duc exposed thousands of driver's licenses and passports to the open web
A publicly accessible Amazon storage server exposed personal data of hundreds of thousands, including driver's licenses and passports, without encryption.
fromTNW | Data-Security
1 week agoHasbro hacked: Peppa Pig & Transformers owner warns of weeks of disruption
Hasbro disclosed unauthorized access to its systems, an intrusion first detected on 28 March that has since forced the company to take parts of its infrastructure offline and warn that product deliveries could be delayed for weeks.
London startup
fromTechzine Global
1 week agoDutch football club Ajax hid data breach after report from ethical hacker
In 2017, Rasnab gained access to the Amsterdam club's ticketing system, which was then operated in collaboration with Eventim. Through that system, he was able to view personal data of fans and employees, including data on club icon Sjaak Swart.
Privacy professionals
Privacy professionals
fromSecurityWeek
2 weeks agoMarquis Data Breach Affects 672,000 Individuals
Marquis, a marketing and compliance provider for financial institutions, disclosed a data breach affecting approximately 672,000 individuals, with stolen personal and financial information including SSNs, addresses, and payment card numbers.
#phishing-attack
Privacy professionals
fromSecurityWeek
2 weeks agoSecurity Firm Aura Discloses Data Breach Impacting 900,000 Records
Aura suffered a data breach affecting 900,000 records after a phishing attack compromised an employee account for approximately one hour, exposing names, email addresses, and contact information of roughly 35,000 customers.
Information security
fromSecuritymagazine
3 weeks agoTargeted Phishing Attack Breaches Biotech Company Data
Intuitive Surgical suffered a phishing attack compromising employee credentials, exposing customer and corporate data, though operational systems and customer networks remained unaffected due to network segmentation.
Privacy professionals
fromSecurityWeek
3 weeks agoStarbucks Data Breach Impacts Employees
Starbucks experienced a data breach affecting approximately 900 employees through phishing attacks that compromised Partner Central accounts, exposing names, social security numbers, dates of birth, and financial information.
Privacy professionals
fromTechCrunch
3 weeks agoMarquis says over 672,000 people had personal and financial data stolen in ransomware attack | TechCrunch
Marquis, a fintech company serving hundreds of banks, suffered a ransomware attack in August 2025 that compromised personal and financial data of over 672,000 people, with more than half residing in Texas.
Cryptocurrency
fromBitcoin Magazine
3 weeks agoBitrefill Discloses Cyberattack, Points To North Korea's Lazarus Group
Bitrefill suffered a cyberattack on March 1 originating from a compromised employee laptop, with the Lazarus Group suspected as the perpetrator, resulting in stolen cryptocurrency and exposure of approximately 18,500 customer records.
fromTheregister
3 weeks agoEU sanctions Iranian cyber crew behind US election tampering
Based in Tehran, Emennet Pasargad is responsible for a variety of high-profile cyberattacks on Western organizations. Among these are attempted interference with US elections and attacks on the subscribers of French satirical magazine Charlie Hebdo, the Council stated.
France politics
UK news
fromwww.independent.co.uk
3 weeks agoLloyds faces questions over troubling' banking app glitch
Lloyds Banking Group faces parliamentary scrutiny after a data breach exposed customers' financial transactions through its banking app, prompting the Treasury Committee to demand immediate answers and compensation details.
Privacy professionals
fromComputerWeekly.com
3 weeks agoCompanies House restarts online services following cyber breach | Computer Weekly
Companies House restored its WebFiling service after discovering a security flaw that exposed personal data and allowed unauthorized actions to logged-in users with authorization codes.
Privacy professionals
fromBusiness Matters
3 weeks agoCompanies House suspends online filing service after cyber vulnerability exposes director data
Companies House suspended its WebFiling service after a security vulnerability allowed users to access and edit other companies' sensitive personal data through a browser back button exploit.
Privacy professionals
fromWIRED
3 weeks agoDo You Need an Identity Protection Service for Safe Browsing?
Identity theft protection services function as insurance products offering reactive compensation for damages rather than active prevention, with coverage details and sub-benefit caps critically affecting actual protection value.
Information security
fromSecuritymagazine
3 weeks agoWhy Are Platform Ecosystems - Like Salesforce - Often Targeted?
Salesforce warned users of increased threat actor activity exploiting misconfigured publicly accessible sites and permissive guest user settings to gain unauthorized data access for social engineering and vishing campaigns.
Information security
fromTechRepublic
3 weeks agoSecurity Flaw in WordPress Plugin Puts 400,000 Websites at Risk
A critical vulnerability in the Ally WordPress plugin allows unauthenticated attackers to extract sensitive database data including password hashes from hundreds of thousands of affected websites.
[ Load more ]