“I think it’s probably one of the biggest breaches in a long time, can’t think of any bigger ones,” Pompompurin, the owner of Breached.to, wrote when asked about a new for-sale listing that appeared on his forum. A seller called “Data,” who Pompompurin says he will “vouch all day and night for” listed user data…
Category: Hack
Gag order issued to stop release of information stolen by hackers
The Tirana Times reports: With publication on the web of documents stolen by Iran-linked hackers from Albanian State Police servers, the Prosecutor’s Office of Tirana has ordered media to stop publishing any stories sourced from data published by the authors of the cyberattack. Many Albanian media say the order amounts to censorship, a stance backed…
Uber links breach to Lapsus$ group, blames contractor for hack
Sergiu Gatlan reports: Uber believes the hacker behind last week’s breach is affiliated with the Lapsus$ extortion group, known for breaching other high-profile tech companies such as Microsoft, Cisco, NVIDIA, Samsung, and Okta. The company added that the attacker used the stolen credentials of an Uber EXT contractor in an MFA fatigue attack where the contractor was flooded with two-factor authentication (2FA)…
ClearBalance, Bricker & Eckler settle data breach lawsuits involving patient data
To follow up on two previously reported breaches involving protected health information, here are two class action settlements that involve business associates: CSI Financial Services aka ClearBalance In July 2021, DataBreaches reported a breach at CSI Financial Services, aka ClearBalance, a firm that services loans made by hospitals and providers to patients who need to…
IHG hack: ‘Vindictive’ couple deleted hotel chain data for fun
Joe Tidy reports: Hackers have told the BBC they carried out a destructive cyber-attack against Holiday Inn owner Intercontinental Hotels Group (IHG) “for fun”. Describing themselves as a couple from Vietnam, they say they first tried a ransomware attack, then deleted large amounts of data when they were foiled. They accessed the FTSE 100 firm’s…
Starbucks Singapore hit by data breach affecting rewards program customers
CNA reports: Starbucks Singapore has been hit by a data breach affecting customers of its rewards membership programme. In an email sent to customers on Friday (Sep 16), Starbucks said it discovered “some unauthorised access” to user details such as name, gender, date of birth, mobile number, email address and residential address. Read more at…