In August 2020, DataBreaches reported that the Maze ransomware gang had added Ventura Orthopedics to their name-and-shame leak site. At the time, Ventura did not respond to inquiries about whether they would confirm or deny the claims. And they did not respond to other inquiries from DataBreaches when the Conti ransomware gang subsequently listed 1,850…
Category: U.S.
Boeing Confirms ‘Cyber Incident’ from LockBit Hacking Group
Rojoef Manuel reports: Boeing has confirmed a “cyber incident” in its parts and distributions business days after a ransomware group published threats against the company. The acknowledgment came after LockBit hackers said on Friday they had tapped “a tremendous amount” of classified data from Boeing that would be leaked online if the company does not…
Okta hit by third-party data breach exposing employee information
Bill Toulas reports: Okta is warning nearly 5,000 current and former employees that their personal information was exposed after a third-party vendor was breached. Okta is a San Fransisco-based cloud identity and access management solutions provider whose Single Sign-On (SSO), multi-factor authentication (MFA), and API access management services are used by thousands of organizations worldwide….
Wawa Data Breach Settlement’s $3 Million Lawyers Fee Rejected
Jennifer Kay reports: A federal appeals court has vacated over $3 million in attorneys’ fees awarded as part of a $12.2 million data breach settlement against Wawa Inc. The fee award issue now is remanded to the district court “to take a closer look at the reasonableness of the attorney’s fees in proportion to class…
Town of Iowa in Louisiana victim of ransomware attack: ALPHV publishes a portion of the exfiltrated documents
Marco A. De Felice reports: The ransomware group ALPHV (BlackCat) has published a first part of exfiltrated data from the Town of Iowa in the state of Louisiana. Approximately 250 scanned documents in PDF format have been released, some of which contain visible Social Security numbers (SSNs) of employees, employee salaries, balance sheets, birthdates, addresses,…
Exclusive: Advarra hacked, threat actors threatening to leak data (1)
Advarra describes itself as providing integrated solutions to safeguard trial participants, empowering clinical sites, ensuring compliance, and optimizing research performance for thousands of sponsors, contract research organizations, institutions, academic medical centers, and research consortia that it services. On or about October 25, Advarra was hacked and data was exfiltrated. According to one of the people…