From their notice: The Mental Health Center of Greater Manchester (“MHCGM”) is providing notice of a recent data security event that occurred at a third-party community partner MHCGM had used for data storage, Center for Life Management (“CLM”), that may impact the privacy of certain information relating to MHCGM patients or those who were assessed…
Category: Hack
Illuminate Education breach that affected NYC schools spreads to other districts
Benjamin Freed reports: A school district in Coventry, Connecticut, notified families of its students this week that students’ data may have been swept up in a breach of one of its vendors earlier this year. The breach-notification letter, dated Tuesday, stated that data belonging to the roughly 1,700 students enrolled in Coventry Public Schools may have…
Scott County, Iowa discloses data security incident
Seen on the county’s website, dated April 22, 2022: Notice of Data Privacy Event Scott County, Iowa (“Scott County”) is providing notice of a data privacy event. To date, we have no evidence of actual or attempted misuse of information as a result of this incident. In an abundance of caution, we are notifying potentially…
GitHub: Attacker breached dozens of orgs using stolen OAuth tokens
Sergiu Gatlan reports: GitHub revealed today that an attacker is using stolen OAuth user tokens (issued to Heroku and Travis-CI) to download data from private repositories. Since this campaign was first spotted on April 12, 2022, the threat actor has already accessed and stolen data from dozens of victim organizations using Heroku and Travis-CI-maintained OAuth apps, including…
Contra Costa County Employee Email Accounts Hacked In Data Breach
Be forewarned: the news story misspells”breach” as “breech.” I couldn’t bring myself to use their headline so fixed that, but am leaving this: Contra Costa County officials have begun sending out letters this week to potential victims of the “unauthorized access to certain county employee email accounts” in a computer breech between July to August…
Big Coral Gables mortgage servicer hit by data breach, exposing clients’ personal information
Andres Viglucci reports: One of the country’s largest mortgage servicers, a company based in Coral Gables, has reported what appears to be a significant data breach to customers three months after discovering it, prompting two separate federal lawsuits. In a letter to customers dated March 18, Lakeview Loan Servicing said it had uncovered “a security…