← Feed

Posts

• View post

  RE: https://cyberplace.social/@GossiTheDog/117313751385768529 I emailed Elsevier to ask whether there was any risk to any patient/healthcare data at all. They sent me a statement: "On September 21, Elsevier identified that visitors to select platforms were being redirected to a third-party page. Our cybersecurity team responded immediately, resolving the issue and restoring normal service. Our investigation indicates that this was a narrowly scoped, limited-duration event involving the t...

• View post

  NEW by me: ShinyHunters escalates dispute with FBI; claims to have seized job applicants' site and acquired data First, they threatened Clop this week, and now the FBI. Some will disagree with me strongly, but I actually agree with ShinyHunters on some of their objections to a May 2026 FBI bulletin about them. That still doesn't excuse them hacking and extorting them, of course. https://databreaches.net/2026/09/22/shinyhunters-escalates-dispute-with-fbi-claims-to-have-seized-job-a...

• View post

  RE: https://infosec.exchange/@josephcox/117241483560892456 This may be the most horrifying and infuriating piece I've ever read about the dangers of ChatGPT. Great reporting, as always, by @josephcox and @404mediaco

• View post

  South Korea is cracking down on companies with major data breaches to push them to be more proactive. As seen in Korea JoongAng Daily: "Starting Friday, companies found to have leaked the personal data of 10 million or more people through intent or gross negligence can be fined up to 10 percent of their total revenue as part of a broader overhaul under the revised Personal Information Protection Act that is set to take effect the same day. Even if a leak hasn’t been confirmed, companies m...

• View post

  NEW, by me: Silent Ransom Group Hacked Greenberg Traurig; Who notifies the 126k Affected? GT says they notified a small number of affected clients. But more than 126,000 clients were affected. We dug into the data tranche, obtained exclusive details from the threat actors, and asked Yelisey Bohuslavskiy for his thoughts on the group and attempts to prevent their attacks. https://databreaches.net/2026/09/14/silent-ransom-group-hacked-greenberg-traurig-who-notifies-the-126k-affected/ #databr...

• View post

  #DogsofMastodon Seen on FB:

• View post

  NEW by me: Navigate360 may soon release a public notice about its horrific breach, but will any individuals be notified? https://databreaches.net/2026/09/17/navigate360-may-soon-release-a-public-notice-about-its-horrific-breach-but-will-any-individuals-be-notified/ @douglevin #databreach #infosec #cybersecurity #incidentresponse #notification #Navigate360 #P3GlobalIntel

• View post

  NEW by me: The U.S. military leaked more than 93,000 tips via insecure P3 Global Intel. Has anyone been notified? I had reported on the school-related tips in the Navigate360 breach, and then the Crime Stoppers tips. In this post, I looked at the tips to the U.S. military. https://databreaches.net/2026/09/18/the-u-s-military-leaked-more-than-93000-tips-via-insecure-p3-global-intel-has-anyone-been-notified/ #Navigate360 #P3GlobalIntel #databreach #cybersecurity #incidentresponse @douglevin

• View post

  What's going on with ShinyHunters? First they accuse Clop of stealing their zero-day for Oracle, then they start hitting medical sector, then they deface and threaten Clop, and now we learn they ratted out TeamPCP? Something's very different.

• View post

  RE: https://mastodon.social/@brianhonan/117275280843738578 Ooh. Interesting thought, thanks. Have you come across situations in which insurers denied coverage for regulator fines but paid other incident response costs from data breaches?

• View post

  I'm always curious to see what cyber insurers are doing on coverage for different scenarios. The Revolut incident reportedly has some insurers re-thinking. Matthew Sellers reports: "Most social engineering endorsements are triggered by a transfer of funds, not a transfer of data. A scam where nothing is paid out but a large volume of identity and biometric data leaves the building can fall between a crime policy, built for financial loss, and a data breach policy, often built around u...

• View post

  One of the dozens of new #ransomware groups this year is a group calling itself #Orova. Since early May, they appear to have dozens of victims in about half a dozen countries. Three of the listings are U.S. medical entities, so, of course, I reached out to them to find out more. My new report: Cardiology Associates of Port Huron remains silent although they were allegedly hacked and had patient data stolen in June. https://databreaches.net/2026/08/06/cardiology-associates-of-port-huron-re...

• View post

  New York State Department of Financial Services announced on August 5 that Order Express, Inc., a licensed money transmitter, will pay a $250,000 penalty for violations of DFS’s cybersecurity regulation (23 NYCRR Part 500). Order Express suffered a ransomware attack in 2022, which they reported appropriately. But then the DFS's investigation revealed that the entity did not have adequate cybersecurity risk assessment or plan. Read more at: https://www.dfs.ny.gov/reports_and_publications/...

• View post

  The city manager of the City of Coweta is refusing to even contact unnamed threat actors and says the city will not pay any ransom in response to a recent ransomware attack. Why? Because the city manager was with another city that was attacked; even though that city paid the ransom, it was reinfected two weeks later. So now she is very anti-paying. Read more at KTUL: https://ktul.com/news/local/city-of-coweta-refuses-to-pay-ransom-after-system-wide-cyberattack-08-08-2026 And as I previousl...

• View post

  RE: https://infosec.exchange/@chum1ng0/117044228483502361 You weren't alone, @chum1ng0@infosec.exchange . Their misclassification reportedly affected thousands of blogs: https://cybersecuritynews.com/google-blogger-locked-legitimate-websites/ But this is a good time for you to think about backups and alternatives. :)

• View post

  More than a dozen Republican attorneys general are calling on #OpenAI to preserve records on its models’ recent breach of #HuggingFace, suggesting the #AI firm may have violated state or federal laws in the incident. Press release: https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-leads-coalition-demanding-transparency-from-openai-after-ai-breach-and Direct link to full letter: https://www.iowaattorneygeneral.gov/media/cms/08_5392C9E17791C.pdf

• View post

  More than 30 Minnesota water systems targeted in cyberattack: https://www.fox9.com/news/30-minnesota-water-systems-targeted-cyber-attack I haven't seen Handala or any group claim responsibility yet, but it's noteworthy that the quality of drinking water does not appear to have been tampered with. #cyberwar #Handala #criticalinfrastructure #water

• View post

  "Marco Rubio says the US will deny visas to foreign nationals involved in cybercrime and may extend the restrictions to their immediate families.......... Marco Rubio says the US will deny visas to foreign nationals involved in cybercrime and may extend the restrictions to their immediate families." (see on The Register) Why not allow the suspected criminals to get visas, allow them to fly over here, and then arrest them and prosecute them?

• View post

  NEW by me: It appears that Frontier Airlines may have had a third security incident this year. A new group called ExfilSquad claims to have hacked them -- and no, they say they are not connected to ShinyHunters or ScatteredLapsus$Hunters. NOTE: Frontier Airlines hasn't confirmed this claimed breach. Then again, they haven't denied it, either. They haven't responded to email inquiries. Hackers Breached an Airline as Known Vulnerabilities Went Unpatched. Now Another Gang Claims It...

• View post

  TFW you finish entering all your new appointments for this week, only to realize you entered them in last week's calendar and now mucked everything up. 😭 🤦‍♀️

• View post

  Developing: AnMed reports phone and internet outage impacting all 4 hospital locations in South Carolina and Georgia. Emergency rooms remain open. No group has claimed responsibility as yet. #cyberattack #healthsec

• View post

  In January 2025, the WA attorney general sued T-Mobile over a data breach that affected 2M residents (this was the 79M T-Mobile breach). One of the issues in the litigation was that T-Mobile didn't properly notify those affected of the breach -- it omitted telling them in SMS notifications that their SSN had been acquired. For background, see https://www.atg.wa.gov/news/news-releases/ag-ferguson-files-lawsuit-against-t-mobile-massive-data-breach Now a court has agreed with the state that...

• View post

  NEW by me: more analysis of the Navigate360 data breach, this one focusing on Crime Stoppers and crime-oriented tip lines using P3 Global Intel: Crime Stoppers assured people their tips would be anonymous. Then more than 1 million tips leaked: https://databreaches.net/2026/07/24/crime-stoppers-assured-people-their-tips-would-be-anonymous-then-more-than-1-million-tips-leaked/ If anyone has a connection in their state attorney general's office, encourage them to read this and open an invest...

• View post

  GovTech reoorts on the ITRC's H1 report: "[ITRC]found that 1,029 data compromises generated 471 million breach notices in the first half of the year, with one incident — the breach involving Instructure’s Canvas platform — accounting for 275 million of those notices, or about 58 percent of the total."

• View post

  It has been four months since a hacktivist obtained 8.3 million tips submitted to organizations such as Crime Stoppers and Sandy Hook Promise. What the hacktivist found in terms of lack of security was appalling. In the four months since Navigate360 (the parent company for P3 Global Intel and P3 Campus) learned of the breach, they have made zero public statements after the first day when they said they were investigating. Their wall of silence, and the conspiracy of silence involving programs...

• View post

  Milford, New Hampshire seems to be dealing with a cyberattack since July 15, but they don’t call it that and haven’t revealed many detail details. A resident wonders whether the breach was caused by a vulnerability he reported to them in May that they did not address. My post about it all: https://databreaches.net/2026/07/21/milford-new-hampshire-confirms-unauthorized-activity-withholds-details-of-suspected-cyberattack/ #govsec #cybersecurity

• View post

  Another entity files for insolvency after a data breach. Sounds like the data breach was responsible in this case. From ZEGO's notice: "The cyberattack of March 29, 2026, however, impacted our company to an extent that we could not fully compensate for despite our best efforts. The consequences resulted in a production outage of nearly six weeks and significant financial strain. These effects ultimately impacted our financial situation so severely that filing for insolvency became ne...

• View post

  NEW by me: Fintech firm Nayax investigating breach; The Syndicate claims it acquired 1 billion card records and other important data (It appears there's another TA that I had never heard of before. And note that the TA has offered no POC at this point). https://databreaches.net/2026/07/08/nayax-investigating-breach-the-syndicate-claims-it-acquired-1-billion-card-records-and-other-important-data/ #databreach #fintech #Nayax

• View post

  OT: My health system asked for my feedback about a recent hospital experience. I gave everything a good rating until we got to the survey questions on anesthesia, and I wrote, "The anesthesiologist should be shot and killed....." Well, they asked for feedback. 😡

• View post

  NEW by me: The “Anonymous” Tip System That Wasn’t: Three Months Later, Why Hasn’t Navigate360 Notified Anyone? Note: there is a trigger warning at the top of this article as it contains sensitive material from tips submitted to and about students on what were supposed to be "anonymous" tiplines. https://databreaches.net/2026/07/06/the-anonymous-tip-system-that-wasnt-three-months-later-why-hasnt-navigate360-notified-anyone/ This is the longest post I have ever done because people n...