Catalin Cimpanu reports: A hacker has leaked online today the database of Daniel’s Hosting (DH), the largest free web hosting provider for dark web services. The leaked data was obtained after the hacker breached DH earlier this year, on March 10, 2020. At the time, DH owner Daniel Winzen told ZDNet the hacker breached his portal,…
Category: Non-U.S.
Ca: Privacy breach at Manitoba Agricultural Services Corporation
The Brandon Sun reports: The Manitoba Agricultural Services Corporation is notifying clients of a privacy breach of personal data that occurred on May 26. An attachment containing the name and contact information of AgriInsurance clients was attached in error to an email sent to 134 producers in Manitoba, the corporation said in a news release….
Internal Data Stolen, Leaked, in REvil Attack on Electricity Market’s Elexon
CBR reports: Cyber criminals using the REvil/Sodinokibi ransomware stole internal data during a May 11 attack on Elexon — the organisation that helps balance and settle the UK’s electricity market — and have now posted it online in a bid to pressure the organisation into paying a ransom. Read more on Computer Business Reviews.
UK: First Minister promises to build public trust in Test and Protect following NHS Orkney coronavirus data breach
Paul Malik reports: Faith in the Test and Protect system could be undermined should data breaches like the one committed by NHS Orkney be repeated, Nicola Sturgeon has warned. Ms Sturgeon was responding to questions after it was discovered more than 50 coronavirus test results were sent “in error” to a local business. As well…
India’s popular BHIM payments platform reportedly leaks 7M users’ data (UPDATED with NPCI denial)
Ivan Mehta reports: A data leak from India’s BHIM payment app exposed personal data of 7 million Indians including addresses, scans of Aadhar IDs, and caste certificates. A report from cybersecurity company VPN Mentor suggests that this 409GB database was stored in a misconfigured AWS S3 bucket, making all data publicly accessible. The report noted that the…
Security flaw in Qatar’s COVID-19 contact-tracing app ‘put 1m people’s sensitive data at risk’
From Amnesty USA: Serious security vulnerabilities in Qatar’s mandatory contact tracing app, uncovered by Amnesty International, must act as a wake-up call for governments rolling-out COVID-19 apps to ensure privacy safeguards are central to the technology. An investigation by Amnesty’s Security Lab discovered the critical weakness in the configuration of Qatar’s EHTERAZ contact tracing app….