FBI: Royal ransomware asked 350 victims to pay $275 million

November 13, 2023 at 03:43PM The Royal ransomware gang has breached over 350 organizations worldwide since September 2022, demanding over $275 million in ransom. They conduct data exfiltration and extortion before encryption and will leak victim data if the ransom is not paid. The gang may be planning a rebranding initiative and a spinoff variant … Read more

Dragos Says No Evidence of Breach After Ransomware Gang Claims Hack via Third Party

November 13, 2023 at 11:09AM Industrial cybersecurity company Dragos has found no evidence of a data breach after ransomware group BlackCat and Alphv claimed to have hacked their systems through a third party. Dragos stated that while they take such claims seriously, their investigation has not produced any evidence of a compromise. This is not … Read more

2.2 Million Impacted by Data Breach at McLaren Health Care

November 13, 2023 at 08:21AM Michigan healthcare system McLaren Health Care is alerting approximately 2.2 million people about a data breach that occurred earlier this year. The breach, which was identified on August 22 and resolved the following day, resulted in unauthorized access to McLaren’s network from July 28 to August 23. The attackers gained … Read more

Mr. Cooper Says Customer Data Compromised in Cyberattack

November 13, 2023 at 06:03AM US mortgage giant Mr. Cooper experienced a cyberattack on October 31 that led to service disruptions. Hackers gained access to certain systems, preventing the company from processing customer payments. Customer data was compromised, prompting Mr. Cooper to notify affected individuals and offer complimentary credit monitoring services. Users are advised to … Read more

Royal Mail cyber security still a mess, say infosec researchers

November 13, 2023 at 01:32AM The UK’s Royal Mail has been found to have an open redirect flaw on one of its websites, which potentially exposes customers to malware infections and phishing attacks. The vulnerability allows attackers to use the legitimate website to redirect users to malicious sites. The Royal Mail has been notified of … Read more

Mortgage giant Mr. Cooper says customer data exposed in breach

November 10, 2023 at 05:00PM Mr. Cooper, the largest home loan servicer in the US, has discovered evidence of customer data being exposed during a recent cyberattack. The company is still investigating the extent of the compromised data and will provide affected customers with more information in the coming weeks. Mr. Cooper assures customers that … Read more

Impatient LockBit says it’s leaked 50GB of stolen Boeing files after ransom fails to land

November 10, 2023 at 03:28PM LockBit, a ransomware gang, claims to have leaked all the data stolen from Boeing after the company refused to pay the ransom demand. The leaked data includes 50GB of compressed archives and backup files, as well as company finances, marketing activities, and supplier details. Boeing has not confirmed the entry … Read more

State of Maine Becomes Latest MOVEit Victim to Surface

November 10, 2023 at 02:16PM A group of cybercriminals exploited a vulnerability in the MOVEit file-transfer tool, gaining access to files belonging to the State of Maine. The breach exposed information on 1.3 million individuals, including names, Social Security numbers, dates of birth, and more. The state has implemented security measures and is offering credit … Read more

McLaren Health Care says data breach impacted 2.2 million people

November 10, 2023 at 10:32AM McLaren Health Care has experienced a data breach, impacting nearly 2.2 million individuals. The breach occurred between late July and August and exposed sensitive personal information, including names, Social Security numbers, and medical data. McLaren has notified affected individuals and authorities, and is providing identity protection services. While there is … Read more

1.3 Million Maine Residents Impacted by MOVEit Hack

November 10, 2023 at 07:00AM The State of Maine has reported significant impact from a cyberattack on Progress Software’s MOVEit file transfer tool earlier this year. Over 2,500 organizations and 69 million individuals have been affected. The attackers accessed personal information, including names, Social Security numbers, and medical information. The Maine Department of Health and … Read more