Evolve Bank Shares Data Breach Details as Fintech Firms Report Being Hit

July 2, 2024 at 09:22AM Wise and Affirm acknowledge the impact of the recent Evolve Bank data breach on their customers. The cybercriminals gained access to customer and financial technology partner information, affecting customers who used both companies’ services. Evolve clarified that the ransomware group LockBit was behind the attack, compromising various personal and banking … Read more

HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

July 1, 2024 at 12:24PM HubSpot is actively investigating and blocking attempts to hack into customer accounts. They have reported at least 50 targets have been breached, with unauthorized access to less than 50 accounts. The company has taken necessary steps to revoke the attacker’s access and believes the impact will be isolated to a … Read more

Crooks crack customer info at tracking device vendor Tile, issue ‘extortion’ demands

June 12, 2024 at 09:19PM Life360, the company behind Tile Bluetooth tracking devices and apps, reported a “criminal extortion attempt” after unauthorized access to customer data. The breach accessed names, addresses, emails, and phone numbers, but not more sensitive info. The CEO’s statement did not reveal ransom amount or whether paid. Law enforcement has been … Read more

Life360 says hacker tried to extort them after Tile data breach

June 12, 2024 at 12:50PM Life360, a safety and location services company, was targeted in an extortion attempt after a threat actor breached a Tile customer support platform. Sensitive information, excluding financial and location data, was accessed. Life360 is cooperating with law enforcement and reported the incident. The extent of customer impact is undisclosed, but … Read more

Pure Storage confirms data breach after Snowflake account hack

June 11, 2024 at 08:48AM Pure Storage confirmed a security breach in its Snowflake workspace, exposing telemetry data and customer names, usernames, and email addresses. The company took steps to secure its systems and has not found malicious activity on customer infrastructure. The attack was linked to a financially motivated threat actor, targeting organizations without … Read more

Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

June 3, 2024 at 10:35PM Hudson Rock has removed its report about cybercriminals breaching Snowflake’s systems and stealing data from customers like Ticketmaster and Santander Bank, following legal pressure from Snowflake. Snowflake denies any breach, stating that stolen individual customer account credentials may have been used. The breach’s extent and impact are subject to ongoing … Read more

Ticketmaster confirms massive breach after stolen data for sale online

May 31, 2024 at 09:25PM Live Nation confirms Ticketmaster data breach after it was stolen from a third-party cloud database provider, Snowflake. Criminal threat actor offers user data for sale on the dark web. 560 million users’ data exposed, including personal information and event details. Threat actor claims to have stolen data from several other … Read more

Cooler Master confirms customer info stolen in data breach

May 30, 2024 at 11:06AM Cooler Master, a well-known computer hardware manufacturer, experienced a data breach on May 19, allowing a threat actor to access and steal customer data, including personal information of over 500,000 customers. The breach involved the company’s Fanzone website, prompting the company to engage security experts and notify affected customers while … Read more

Miscreants claim they’ve snatched 560M people’s info from Ticketmaster

May 29, 2024 at 07:05PM Ticketmaster was reportedly breached by cybercriminals who claim to have stolen 1.3TB of data on 560 million customers. The stolen data includes personal information and credit card details. The miscreants are offering the data for sale. The breach comes amidst legal challenges and customer dissatisfaction, which could greatly impact Ticketmaster’s … Read more

SEC: Financial orgs have 30 days to send data breach notifications

May 17, 2024 at 01:29PM The SEC has adopted amendments to Regulation S-P requiring certain financial institutions to notify individuals of data breaches within 30 days. The changes encompass breach notification, security policies, safeguard expansion, and compliance documentation. The modifications aim to update the rule, originally established in 2000, to better protect customer financial data. … Read more