November 20, 2023 at 09:33AM Morgan Stanley has reached a $6.5 million settlement for mishandling and disposing of hardware containing unencrypted personal information. The investigation revealed that the company did not properly erase the data when decommissioning old devices and failed to monitor the actions of a moving company it hired. The company was also … Read more
October 24, 2023 at 06:10AM A third-party contractor running a database without password protection exposed over 500,000 records related to vehicle seizures by the Irish National Police. The exposed data includes scanned identity documents and incident summary reports containing names and details of drivers and officers. The database is owned and operated by an unnamed … Read more
October 20, 2023 at 02:48PM Attackers breached Okta’s support management system using stolen credentials, gaining access to files containing cookies and session tokens uploaded by customers. The incident did not impact the production Okta service or the Auth0/CIC case management system. Okta notified affected customers and advised all customers to sanitize their HAR files to … Read more