In January 2022, DataBreaches reported that New York announced a $600,000 agreement with EyeMed that resolved a 2020 phishing incident that compromised the personal information of approximately 2.1 million consumers nationwide, including 98,632 in New York. But that was not the end of enforcement action and monetary penalties for EyeMed. Now the state’s Department of…
Category: Commentaries and Analyses
Israeli officer reveals intricate details of IDF’s first ever cyberattack
Yoav Zitun reports: Second Lieutenant B. was a young officer in the IDF’s Military Intelligence Directorate during the 1990s, and was the person who planned and executed the army first ever cyberattack. […] Instead of waiting for a bug in the enemy’s cyber system and “breaking in” during the short time window, the tactic the…
A Data Breach Is Bad, But Disclosing Too Much Could be Worse
Adam Stone reports: When state and local IT systems get breached, there’s a balancing act to be struck. How much can and should the public be told? Some advocates of transparency and accountability say anything that happens in the public realm ought to be public knowledge. On the opposite extreme, some IT leaders worry that…
Magniber Ransomware Adopts JavaScript to Attack Individual Users
Beth Maundrill reports: Recent analysis shows that Magniber ransomware has been targeting home users by masquerading as software updates. A ransomware campaign isolated by HP Wolf Security in September 2022 saw Magniber ransomware spread. The malware is known as a single-client ransomware family that demands $2,500 from victims. Previously Magniber was primarily spread through MSI and EXE files, but…
Interview with Hardbit Ransomware, a new group with great ambitions
Marco A. DeFelice (@amvinfe) interviewed a relatively new ransomware group called “Hardbit.” At one point in the interview, the exchange went: SF – Do you have a specific target regarding the victims? Do you pay more attention to a particular sector such as education, health, construction or is a victim “just a business” for you? (Support): It’s…
Retirement plan participants urge judge not to dismiss Horizon Actuarial Services data breach class action
Abraham Jewett reports that a group of Horizon Actuarial Services retirement plan participants are trying to save their proposed class action lawsuit from dismissal by a judge. The litigation stems from a ransomware incident in November 2021. The proposed class of more than 2 million Horizon retirement plan participants argue that the data breach was…