Connor Jones reports: Security experts have uncovered a hole in Cl0p’s data exfiltration tool that could potentially leave the cybercrime group vulnerable to attack. The vulnerability in the Python-based software, which was used in the 2023-2024 MOVEit mass data raids, was discovered by Italian researcher Lorenzo N and published by the Computer Incident Response Center Luxembourg (CIRCL)….
Author: Dissent
Kelly Benefits updates its 2024 data breach report: impacts 550,000 customers
Bill Toulas reports: Kelly & Associates Insurance Group (dba Kelly Benefits) is informing more than half a million people of a data breach that compromised their personal information. The Maryland-based health and life insurance agency has issued an update on a security incident it suffered last year between December 12-17, when unauthorized actors breached its IT…
Qantas customers involved in mammoth data breach
Vanessa Brown reports: Qantas has confirmed that six million customers could be impacted by a mammoth cyber incident at one of the airline’s contact centres, impacting personal data. The concerning incident was detected by the national carrier on Monday, after “unusual activity” on a third party platform used by Qantas was detected. While the airline…
CMS Sending Letters to 103,000 Medicare beneficiaries whose info was involved in a Medicare.gov breach.
The Centers for Medicare & Medicaid Services (CMS) has been busy issuing notices about breaches this week. First, it warned providers about a fraud scheme involving medical records requests. Now it is notifying Medicare beneficiaries whose information was involved in a data breach where threat actors were able to create online accounts using beneficiaries’ information…
Esse Health provides update about April cyberattack and notifies 263,601 people (1)
Update: Esse Health notified Maine that a total of 263,601 people were affected, but they notified HHS that 23,671 patients were affected. Esse Health has notified the Maine Attorney General’s Office that 263,601 people were affected by an incident they first disclosed in early May. Esse has 45 locations in and around the St. Louis…
Terrible tales of opsec oversights: How cybercrooks get themselves caught
Connor Jones reports: They say that success breeds complacency, and complacency leads to failure. For cybercriminals, taking too many shortcuts when it comes to opsec delivers a little more than that. In these cases, failure might mean the criminal doesn’t get access to the server with the most valuable data to copy, or fails to…