Debt Relief Firm Forth Discloses Data Breach Impacting 1.5 Million People

November 11, 2024 at 07:54AM Forth revealed that a data breach in May 2024 compromised the personal information of 1.5 million individuals. The disclosure emphasizes the severity of the security incident impacting the firm’s clients. **Meeting Notes Takeaways:** 1. **Data Breach Announcement**: Forth has reported a data breach that compromised the personal information of 1.5 … Read more

210,000 Impacted by Saint Xavier University Data Breach

November 4, 2024 at 09:10AM Saint Xavier University is informing over 210,000 individuals about a compromise of their personal information due to a data breach that occurred in July 2023. **Meeting Takeaways:** 1. **Subject of Notification:** Saint Xavier University has informed stakeholders about a data breach. 2. **Scope of Impact:** Over 210,000 individuals are affected … Read more

Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens

October 29, 2024 at 09:34PM Prosecutors report that a private investigative agency compromised data for at least 800,000 Italians in breaches dating back to 2022. Italian politicians have expressed alarm over this significant security incident. **Meeting Takeaways:** 1. **Data Breach Incident**: At least 800,000 Italians’ data has been compromised. 2. **Timeline**: The breaches occurred in … Read more

Dangerous XSS Bugs in RedCAP Threaten Academic & Scientific Research

July 31, 2024 at 10:23AM Three cross-site scripting (XSS) vulnerabilities (CVE-2024-37394, CVE-2024-37395, and CVE-2024-37396) were found in REDCap, a web app used by researchers. These vulnerabilities could allow attackers to execute malicious JavaScript code, potentially compromising sensitive data. Updating to REDCap version 14.2.1 or later is recommended to mitigate these flaws. Based on the meeting … Read more

Santander Employee Data Breach Linked to Snowflake Attack

June 21, 2024 at 09:21AM Santander US has reported a data breach impacting 12,000 employees’ personal information. The breach is linked to a Snowflake attack. Source: SecurityWeek. Based on the meeting notes, it appears that Santander US is notifying over 12,000 employees that their personal information was compromised in a data breach. The breach has … Read more

Blackbaud has to cough up a few million dollars more over 2020 ransomware attack

June 17, 2024 at 01:50PM Cloud software company Blackbaud has agreed to settle with California’s attorney general, paying a $6.75 million fine for its cybersecurity failings after a 2020 ransomware attack. The settlement aims to improve data protection and security measures. This follows a previous settlement with 49 other state AGs and the District of … Read more

MediSecure Data Breach Impacts Patient and Healthcare Provider Information 

May 20, 2024 at 07:15AM MediSecure, an Australian digital prescription services provider, revealed that data stored on its systems until November 2023 was compromised in a recent ransomware attack. The incident, originating from a third-party provider, impacted personal and health information, related to prescriptions delivered through its system. The company assured that the cyber incident … Read more

Change Healthcare hacked using stolen Citrix account with no MFA

April 30, 2024 at 10:19AM UnitedHealth confirmed that Change Healthcare’s network was breached by the BlackCat ransomware gang, causing severe operational disruptions and $872 million in financial damages. The company admitted to paying a ransom to protect people’s data post-compromise. CEO Andrew Witty’s testimony revealed the attack’s details and the remediation efforts taken after the … Read more

Iran Dupes US Military Contractors, Gov’t Agencies in Years-Long Cyber Campaign

April 24, 2024 at 10:48AM An elite team of Iranian hackers infiltrated US companies and government agencies’ employee accounts in a multiyear cyber espionage campaign, aiming to steal military secrets. Entities including the US Departments of Treasury and State, defense contractors, and a hospitality company were compromised. Four Iranian nationals have been indicted, but their … Read more

UK council won’t say whether two-week ‘cyber incident’ impacted resident data

March 21, 2024 at 07:46AM Leicester City Council is dealing with a suspected ransomware attack, referred to as a “cyber incident.” Key details have not been confirmed, causing frustration among experts and residents. Recovery efforts are ongoing, with some services restored but extended delays. The council urges residents to use its website and contact only … Read more