Oracle coughs up $115M to make privacy case go away

July 22, 2024 at 09:52AM Oracle has agreed to pay $115 million to settle a class action lawsuit alleging misuse of user data. The settlement benefits 220 million people and commits Oracle to address privacy violations. This move follows Oracle’s decision to exit the advertising business, which declined to $300 million in revenue in fiscal … Read more

Over 400,000 Life360 user phone numbers leaked via unsecured API

July 17, 2024 at 12:34PM A threat actor leaked personal data of over 440,000 Life360 customers by exploiting a flaw in the login API. The breach also impacted Trello accounts, and Life360 disclosed an extortion attempt linked to a separate Tile customer support platform breach. The exposed information includes names, addresses, email addresses, and phone … Read more

Data of Millions of mSpy Customers Leaked Online

July 15, 2024 at 10:06AM Over 310GB of data from spyware maker mSpy, including 2.4 million unique emails, was leaked online and obtained by data breach notification site Have I Been Pwned. The leaked data includes user information, attachments, and support tickets from high-profile individuals. mSpy, advertised as a parental control application, has been misused … Read more

AT&T Breach May Also Impact Millions of Boost, Cricket, H2O Customers

July 12, 2024 at 04:02PM AT&T’s breach of a third-party cloud platform, Snowflake, exposed phone numbers and metadata of calls and texts for nearly all AT&T wireless customers and others. The data was accessed between April 14 and 25, 2023. The stolen information, including cell site identification numbers, poses risks to privacy and security, potentially … Read more

City of Philadelphia says over 35,000 hit in May 2023 breach

July 9, 2024 at 12:59PM In May 2024, the City of Philadelphia disclosed a data breach affecting over 35,000 individuals’ personal and protected health information. The breach, which occurred between May and July 2023, exposed demographic, medical, and limited financial data. The City has notified affected individuals and is taking steps to improve security and … Read more

Crooks crack customer info at tracking device vendor Tile, issue ‘extortion’ demands

June 12, 2024 at 09:19PM Life360, the company behind Tile Bluetooth tracking devices and apps, reported a “criminal extortion attempt” after unauthorized access to customer data. The breach accessed names, addresses, emails, and phone numbers, but not more sensitive info. The CEO’s statement did not reveal ransom amount or whether paid. Law enforcement has been … Read more

BetterHelp Customers Begin Receiving Refund Notices From $7.8M Data Privacy Settlement, FTC Says

May 9, 2024 at 08:57AM BetterHelp customers are now able to claim refunds from a $7.8 million settlement after the U.S. Federal Trade Commission accused the company of sharing sensitive health data with advertisers. Around 800,000 individuals are eligible for refunds of approximately $10 each, covering services used between August 2017 and December 2020. Notifications … Read more

Hacker Sentenced After Years of Extorting Psychotherapy Patients

May 2, 2024 at 04:05PM Finnish national Aleksanteri Kivimäki was sentenced to six years and three months in prison for stealing thousands of patient records from a psychotherapy clinic. Kivimäki, known online as “Zeekill,” demanded ransom from the clinic’s patients and caused a significant rise in Finland’s crime figures. He was arrested in France and … Read more

13.4M Kaiser Insurance Members Affected by Data Leak to Online Advertisers

April 29, 2024 at 04:09PM Kaiser Permanente reported a data breach affecting 13.4 million insurance members. Improperly implemented tracking code on their websites and mobile apps shared personal data with third-party advertisers such as Google and Microsoft. While not a hacking event, this breach raises security concerns, according to Narayana Pappu, CEO at Zendata, due … Read more

Google location tracking deal could be derailed by politics

April 16, 2024 at 06:51AM The proposed $62 million settlement between Google and users object as insufficient and raise concerns of ties between Google and beneficiaries, the politics of organizations, and a lack of consent for fund allocation. Attorney Theodore Frank argues for individual payments and questions the proposed recipients. A hearing is scheduled for … Read more