Zack Whittaker reports: Cybercriminals are already capitalizing on Twitter’s ongoing verification chaos by sending phishing emails designed to steal the passwords of unwitting users. The phishing email campaign, seen by TechCrunch, attempts to lure Twitter users into posting their username and password on an attacker’s website disguised as a Twitter help form. Read more at TechCrunch.
Author: Dissent
FTC Brings Action Against Ed Tech Provider Chegg for Careless Security that Exposed Personal Data of Millions of Customers
The Federal Trade Commission is taking action against education technology provider Chegg Inc. for its lax data security practices that exposed sensitive information about millions of its customers and employees, including Social Security numbers, email addresses and passwords. Chegg allegedly failed to fix problems with its data security despite experiencing four security breaches since 2017….
Employees Report Boss’ Email as Scam After Being Forced to Watch 2-Hour Seminar on Phishing Scams
From Cheezburger: The only thing worse than getting your massive pile of work interrupted by one of those company-wide hours-long mandatory seminars is having to do the seminar twice. After completing one such seminar about how to spot an email phishing scam, one employee received an email from their “IT director” that included a link, which…
Serious breach of cellphone users’ data
The News (Pakistan) reports: The personal data of the subscribers of the telecom companies operating in Pakistan has once again been seriously compromised as various mobile applications and web portals are providing access to individual subscribers’ data on the internet. Recently, a video of a mobile application named ‘Asan Bash’ went viral on social media claiming…
Young Finnish man detained in absentia over data breach at Vastaamo
The Vastaamo psychotherapy clinic hack and extortion attempt in Finland, first disclosed in 2020, remains one of the most sensitive and disturbing breaches DataBreaches has ever covered. Past news items about it can be found here. Now there is an update. Aleksi Teivainen of Helsinki Times reports: The District Court of Helsinki on Friday detained…
NL: Patient files of Rainier van Arkel also captured in a hack
Jeffrey Clark reports: Data from the files of 184 clients of mental health organizations Reinier van Arkel and Ypse in Den Bosch was captured in the major health care filings hack earlier this week. The health care institution confirms this on its website. All concerned clients have been informed by the institution. It is not…