Finally, finally, FINALLY: exposed patient files from the Bolton Walk-In Clinic in Ontario have been secured. Now that the data is locked down, we can reveal more details about a seriously frustrating data leak that remained unsecured for at least 10 months while the clinic ignored all our notifications and alerts. It’s a story that…
Category: Of Note
Fact-Checking Claims By Cybernews: The 16 Billion Record Data Breach That Wasn’t
When Cybernews published an article about a 16 billion credentials leak, some of us strongly criticized the article as irresponsible and misleading journalism. Although some people have tried to suggest that the Cybernews article had some value in highlighting infostealers, the article was so riddled with falsehoods and misleading statements that the confusion and misunderstandings…
British national “IntelBroker” charged with causing $25 million in damages; U.S. seeks his extradition from France
“IntelBroker” was arrested in France in February, 2025, but news of his arrest was first disclosed today by French authorities. Now the U.S. is revealing its charges against him as they seek his extradition from France. From the U.S. Attorney’s Office for the Southern District of New York, this press release: Kai West, a British…
ShinyHunters and team members arrested in France (2)
The following are machine-translated bits and pieces from a fuller news story by Jean-Michel Décugis and Damien Licata Caruso: The FBI’s arrest of Conor Brian Fitzpatrick, aka “Pompompurin,” in March 2023 dealt a first blow to “Breached.” This American citizen was suspected of being the main manager of the platform, which had temporarily ceased operations….
Industry Letter – June 23, 2025: Impact to Financial Sector of Ongoing Global Conflicts
From: New York State Department of Financial Services To: All Individuals and Entities Regulated by the New York State Department of Financial Services Re: Impact to Financial Sector of Ongoing Global Conflicts The New York State Department of Financial Services (the “Department”) is issuing this guidance (“Guidance”) to all individuals and entities regulated by the…
No, the 16 billion credentials leak is not a new data breach — a wake-up call about fake news (Updated)
Kudos to Lawrence Abrams and Bleeping Computer for calling out Cybernews’ misleading reporting. News broke today of a “mother of all breaches,” sparking wide media coverage filled with warnings and fear-mongering. However, it appears to be a compilation of previously leaked credentials stolen by infostealers, exposed in data breaches, and via credential stuffing attacks. To be…