Catalin Cimpanu reports: One of the three operators of WeLeakInfo, a website that sold access to hacked databases, was sentenced today in the Netherlands to two years in prison, with one year suspended. In court proceedings that took place earlier this year, the suspect, a 23-year-old whose name was not released, admitted to managing the…
Category: Of Note
Data from Indiana and Oregon school districts dumped by ransomware threat actors
Updated March 7, 2022: On March 6, Logansport Community School Corp. reported the incident to the Maine Attorney General’s Office as impacting 2,750 people. Previous post: This week, two sets of threat actors dumped data from K-12 school districts in Indiana and Oregon. Both districts had disclosed ransomware incidents in April. Logansport Community School Corp…
“We are apolitical” — DarkSide threat actors
By now, probably everyone has heard about the Colonial Pipeline security incident that has been linked to threat actors known as DarkSide. On April 12, this site published an email chat with DarkSide. If you missed that chat write-up, you can read it here. On May 8, after the mainstream media reported that the Colonial…
Noblr Reciprocal Exchange to notify 97,633 consumers of breach involving insurance quote platform
The following incident sounds almost identical to the incident reported by American Family Insurance, but this report is from Noblr Reciprocal Exchange (Noblr). As with the one from American Family Insurance, if you receive a letter next week from Noblr, read it. A letter signed by Jennifer Lawrence, their Chief Legal Officer, explains, but begins…
American Family Insurance to notify 283,734 of breach linked to unemployment benefits fraud
American Family Mutual Insurance Company, S.I. (American Family) will be sending out letters on or about May 14 to people who may have — or may not have — sought an auto insurance quote from the firm using the firm’s web site. If you get a letter from them, read it carefully. A letter signed…
One of country’s largest pipelines shuts down to contain cybersecurity breach
Update: The Washington Post, who broke the story, updated their coverage to indicate that the threat actors are DarkSide. DataBreaches.net, who had recently interviewed DarkSide, reached out to ask them for a comment about the Colonial Pipeline report. They politely responded “Hello, no comments,” but then immediately sent another reply explaining, “At the time of…