It is still fairly rare for a ransomware victim to totally shutter its doors permanently as a result of an incident, but a relatively small breach in Georgia was reportedly fatal for Ascension Health Services LLC DBA Alpha Wellness and Alpha Medical Centre. A notice on its website dated April 4, 2025 reads: We are…
Category: Breach Incidents
Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks
Ravie Lakshmanan reports: Microsoft on Sunday released security patches for an actively exploited security flaw in SharePoint and also disclosed details of another vulnerability that it said has been addressed with “more robust protections.” The tech giant acknowledged it’s “aware of active attacks targeting on-premises SharePoint Server customers by exploiting vulnerabilities partially addressed by the July Security Update.” CVE-2025-53770 (CVSS…
Premier Health Partners issues a press release about a breach two years ago. Why was this needed now?
Premier Health Partners (“PHP”) in Ohio issued a press release this week and uploaded a substitute notice to its website. Why they first concluded an investigation into a breach they discovered on July 12, 2023 requires more explanation than they provide. Premier Health Partners (“Premier Health”) is providing notice of a cyber incident that may…
Missouri Adopts New Data Breach Notice Law
J. Randall Coffey, Daniel Pepper, and Jillian Seifrit of Fisher Phillips write: On July 2, Missouri’s Governor approved House Bill 974, “The Insurance Data Security Act,” which will establish standards for insurers and licensed entities regarding data security, breach investigations, and notification protocols when it takes effect on January 1, 2026. What are the 10…
Qantas obtains injunction to prevent hacked data’s release
Adam Thorn reports: Qantas has obtained a court injunction to prevent any person or organisation from publishing the customer information stolen in its recent hack. The airline called the ruling of the NSW Supreme Court an “important next course of action” but also reiterated that there is still “no evidence” that any data had been…
Global operation targets NoName057(16) pro-Russian cybercrime network in Operation Eastwood
Europol reports: Between 14 and 17 July, a joint international operation, known as Eastwood and coordinated by Europol and Eurojust, targeted the cybercrime network NoName057(16). Law enforcement and judicial authorities from Czechia, France, Finland, Germany, Italy, Lithuania, Poland, Spain, Sweden, Switzerland, the Netherlands and the United States took simultaneous actions against offenders and infrastructure belonging…