JAKKS Pacific, Inc. describes itself as leading designer, manufacturer and marketer of toys and consumer products sold throughout the world. The firm is headquartered in Santa Monica, California. Its proprietary brands include Fly Wheels®, Perfectly Cute®, ReDo Skateboard Co.®, X Power Dozer®, Disguise®, Weee-Do™ and a wide range of entertainment-inspired products. On December 8, JAKKS…
Category: Business Sector
NZ: Compliance investigation into Mercury IT breach commenced
Here’s yet another data breach case in which a court has issued a protective order. The New Zealand Privacy Commissioner writes about a court order issued after the LockBit attack on Mercury IT that might contribute to a supply chain attack; Justice Grice has released the reasons for making the interim orders this week. The High Court…
Developing: Moroccan court orders extradition of alleged member of ShinyHunters to U.S.
Since July of 2022, DataBreaches has been reporting on the case of Sébastien Raoult, a young French national detained in Morocco on an Interpol Red Notice requested by the U.S. for alleged involvement in ShinyHunters. Yesterday, Morocco’s Court of Cassation notified Raoult that they signed the order for his extradition to the U.S. According to…
Hackers stole data from multiple electric utilities in recent ransomware attack
Sean Lyngaas reports: Hackers stole data belonging to multiple electric utilities in an October ransomware attack on a US government contractor that handles critical infrastructure projects across the country, according to a memo describing the hack obtained by CNN. […] The ransomware attack hit Chicago-based Sargent & Lundy, an engineering firm that has designed more…
Vendor Claims to Have Scraped 400M Twitter User Records (with UPDATE 1)
Perhaps the top story this past week involves a sales offering on a popular hacking-related forum. The seller, who first joined the forum in December, has listed information on 400 million Twitter users for sale. No price is specified in the listing. The data, that were allegedly scraped due to a vulnerability, include email, name,…
Claimant to Maintain Anonymity in English High Court Cyber Attack Case
Hunton Andrews Kurth writes: On December 20, 2022, the English High Court has granted the victim of a cyber attack a permanent injunction against cyber attackers whilst the victim organization maintains its anonymity. Generally, a claimant’s identity is public in English court proceedings. Injunctions can be made against unknown and unidentifiable defendants enabling them to…