Natasha Kumar reports: A gang of cyber hackers posted on the dark web confidential documents from Promutuel Insurance. The company, which has around 630,000 customers, is still paralyzed a month after a cyberattack. Our Investigation Office noted the publication of these data on a site of the group of hackers DopplePaymer (sic) in the hidden internet (dark web),…
Category: Business Sector
Ultrapar, attacked on Monday, operates under a contingency regime
CISO Advisor reports (translation): Ultrapar, the parent company of Grupo Ultra, sent CVM today a communication of relevant fact to report a cyber incident. The company says that yesterday it was attacked, without offering other details, and that “preventively interrupted some systems”. There is still no information on the dark web that a ransomware operator has…
SolarWinds Says It Has Found Source of Massive Cyberattack
M. Corey Goldman reports: Security software provider SolarWinds (SWI) – Get Report revealed Tuesday that it has found the source of a highly sophisticated malicious code injection that it believes was used by the perpetrators of the recent cyberattack on the company and its clients, including federal government agencies. In a regulatory filing, SolarWinds said that it was…
National Board of Certified Counselors, Inc. – Notice of Data Breach
The National Board for Certified Counselors (“NBCC”) today is providing information about a recent event that may impact the privacy of some personal data related to individuals associated with NBCC. What Happened? On September 7, 2020, National Board of Certified Counselors, Inc. (“NBCC”) became aware of unusual activity on its network. NBCC conducted an immediate investigation and…
Email security firm Mimecast says hackers hijacked its products to spy on customers
Reuters reports: Email security provider Mimecast said on Tuesday that hackers had hijacked its products in order to spy on its customers. The company said it had been alerted to the attack by investigators at Microsoft and that “a sophisticated threat actor” had compromised the certificate used to guard connections between its products and Microsoft’s…
SolarLeaks site claims to sell data stolen in SolarWinds attacks
Yesterday, an individual or individuals claimed that they were selling information stolen from companies known to have been compromised by the SolarWinds attack. But was the offer real or is it a scam? Lawrence Abrams reports on the site and the question of whether it is legitimate or not. As part of his reporting,…