Another legal services vendor discloses a breach: Compex Legal Services Inc. (“Compex”) recently discovered an incident that may have impacted the privacy of information related to certain individuals. Compex provides record retrieval and litigation support services to insurance carriers, third party administrators and law firms. As Compex continues to investigate and work toward notifying impacted…
Category: Hack
Third-party breach resulted in Singapore Moneylenders Credit Bureau being leaked by GhostR (UPDATED)
Threat actors known as GhostR claim to have stolen more than 50 GB of files on loan borrowers from the Singapore MLCB (the Moneylenders Credit Bureau). They have offered some of the data as a leak on a popular hacking forum and provided proof of claims in the form of copies of completed loan applications:…
Kuwait Court Drops Case Against Notorious Pentagon Hacker
Asharq Al-Awsat reports: The Kuwaiti Court of Cassation upheld on Sunday the dismissal of criminal charges against a notorious Kuwaiti hacker who had infiltrated hundreds of websites around the world, including the US Department of Defense’s (Pentagon) website. The Court of Cassation, the highest judicial authority, affirmed a previous ruling by the Court of Appeals…
MNGI Digestive Health joins ranks of “late-notifiers,” finally notifying more than 767,000 patients of breach last summer
This seems to be the month in which many people affected by healthcare breaches in the summer of 2023 are first being notified individually (see, for example, reports on Southcoast Medical and Florida Community Health Centers). Here’s a third one: MNGI Digestive Health was the victim of a cyberattack on August 20, 2023. They reportedly discovered the breach…
Hacked in 2022, Dell & Dean law firm first notifying affected clients now
From DataBreaches’ “Now what does THIS mean?” file, a notification letter from Dell & Dean PLLC, a law firm in New York. On July 17, Dell & Dean’s external counsel notified the Maine Attorney General’s Office about a breach in September 2022 that affected 6,803 people. A copy of the firm’s notification letter was appended…
Hackers claim Disney data theft in protest against AI-generated artwork
Alex Hern reports: Hacktivists claim to have stolen more than a terabyte of data from Disney’s internal chat platform and are leaking the information online in a protest against what they say is the company’s anti-artist stance. The group, which calls itself NullBulge, has been active since at least May. It claims to be motivated…