A podcast from JacksonLewis: Class action lawsuits in response to data breaches have skyrocketed as plaintiffs look to take advantage of courts’ perceived leniency regarding standing. On this episode of We get privacy for work, we discuss what employers can do to shore up their legal defenses in the event of a data breach….
Category: U.S.
TransUnion notifying more than 4.4 U.S. million consumers of data breach (1)
When companies have big breaches, they have to notify the big credit reporting agencies. However, it is now one of the major credit reporting agencies that must send notifications. TransUnion has notified the Maine Attorney General’s Office that 4,461,511 U.S. persons were affected by an incident on July 28, 2025 that involved an unnamed third-party…
Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks
It looks like ShinyHunters and Scattered Spider have found yet another way to compromise Salesforce customers. Lawrence Abrams reports: Hackers breached sales automation platform Salesloft to steal OAuth and refresh tokens from its Drift chat agent integration with Salesforce to pivot to customer environments and exfiltrate data. Salesloft’s SalesDrift is a third-party platform that connects…
Silver State goes dark as cyberattack knocks Nevada websites offline
Connor Jones reports: The state of Nevada is now two days into a cyberattack that has brought down many of its digital services. The Office of Governor Joseph Lombardo announced the attack via social media on Monday, saying that a “network security incident” took hold in the early hours of August 24. Official state websites…
Attorney General James Sues Company Behind Zelle for Enabling Widespread Fraud
August 13, 2025 NEW YORK – New York Attorney General Letitia James today sued Early Warning Services, LLC (EWS), a company owned and controlled by a group of the largest banks in the United States that was tasked with developing and operating the electronic payment platform Zelle, for failing to protect its users from massive amounts…
Developer jailed for taking down employer’s network with kill switch malware
Iain Thomson reports an update to a case previously reported on this site: A US court sentenced a former developer at power management biz Eaton to four years in prison after he installed malware on the company’s servers. Davis Lu, 55, spent a dozen years at Eaton and rose to become a senior developer of…