We know that no security is perfect, but when a company collecting and storing teenagers’ data has repeated breaches, it’s cause for concern – and possible investigation by federal and state regulators. In 2017, we learned that the popular teen quiz app, Wishbone, had been “hacked.” According to reports at the time, hackers snagged 2.2…
Category: Breach Incidents
Japan suspects missile data leak in Mitsubishi cyberattack
Mari Yamaguchi of AP reports: Japan is investigating a possible leak of data including details of a prototype missile in a massive cyberattack earlier this year on Mitsubishi Electric Corp., officials said Wednesday. The suspected leak involves sensitive information about a prototype of a cutting-edge high speed gliding missile intended for deployment for the defense…
FBI investigating security breach of Arkansas’ self-employed aid website
Rolly Hoyt reports: The troubled website Arkansas built from scratch to offer unemployment assistance to freelancers and contractors knocked out of work by the COVID-19 pandemic remains offline Monday because of a security breach detected before the weekend. Technicians with the state Department of Commerce have been working to fix the portal after a person…
Hacker arrested in Ukraine for selling billions of stolen credentials
Catalin Cimpanu reports: The Ukrainian Secret Service (SSU) announced today the arrest of a hacker known as Sanix, responsible for selling billions of hacked credentials on hacking forums and Telegram channels. The SSU says it arrested Sanix in Ivano-Frankivsk, a city in western Ukraine. Read more on ZDNet.
REvil responds to Grubman Shire law firm: “We will get the money”
A ransomware team that locked up the files of entertainment law firm Grubman Shire Meiselas & Sacks after stealing copies of the files has responded to reactions to their demand for $42 million to unlock the files and to prevent the attackers from releasing the firm’s files about President Trump. The attackers claim that the…
AKO ransomware operators put some hurt on pain management doctors
Ransomware operators known as the Maze team have been getting media attention for their influence in implementing what is being called a double extortion scheme: attackers gain access to their victim’s network, exfiltrate data, and then lock up the victim’s system with ransomware. They then demand a fee — which may be hundreds of thousands…