Brandon Harder reports: The private records of patients at the Elphinstone Medical Clinic were just laying loose on the ground in a nearby alley and an empty lot. According to a report from Saskatchewan’s Information and Privacy Commissioner (SIPC), a person referred to as “Individual A” saw a Facebook post on Oct. 27, 2024 that referenced patient…
Diego Pérez Morales reports: The 2021 cyberattack on T-Mobile exposed sensitive information of 76 million customers, including names, addresses, and Social Security numbers. This breach led to a class-action lawsuit, culminating in a $350 million settlement in 2022. This agreement is notable as the second-largest data breach settlement in U.S. history, only surpassed by Equifax’s $700…
On November 11, 2024, Humboldt Independent Practice Association (Humboldt IPA) submitted a breach report to HHS that used a placeholder of 500 for the number of patients affected. All we knew from HHS’s entry was that it was some kind of hacking or IT incident involving protected health information located in email. The California entity’s…
Korea JoongAng Daily reports: As customer complaints mount following a major hacking incident at SK Telecom, the government on Friday ordered the telecom giant to notify all users whose personal data may have been exposed and to provide immediate protection for vulnerable groups. The Personal Information Protection Commission (PIPC) convened an emergency meeting at 8…
Zack Whittaker reports: A consumer-grade spyware operation called SpyX was hit by a data breach last year, TechCrunch has learned. The breach reveals that SpyX and two other related mobile apps had records on almost two million people at the time of the breach, including thousands of Apple users. The data breach dates back to…
NEW YORK – New York Attorney General Letitia James today filed a lawsuit against several insurance companies doing business as National General and Allstate Insurance Company (Allstate) for failing to protect New Yorkers’ personal information from cyberattacks. In 2020 and 2021, National General suffered a pair of back-to-back data breaches that exposed the driver’s license numbers of…
Cybersecurity researchers have detailed an attack that involved a threat actor utilizing a Python-based backdoor to maintain persistent access to compromised endpoints and then leveraged this access to deploy the RansomHub ransomware throughout the target network. According to GuidePoint Security, initial access is said to have been facilitated by means of a JavaScript malware downloaded…
