Kristen Jordan Shamus reports: More than 1 million Michiganders were affected by a cybersecurity breach at Welltok Inc., a software company contracted to provide communication services for Corewell Health’s southeastern Michigan properties along with a healthy lifestyle portal for Priority Health, an insurance plan owned by Corewell. For about 2,500 Priority Health members, names, addresses and…
Line operator says 440,000 personal records leaked in data breach
Kyodo News reported: Tech giant LY Corp. reported a massive data breach on Monday, saying as many as 440,000 items of personal data, including more than 300,000 linked to Line messaging app users, were leaked due to unauthorized access to an affiliate’s computer system in October. The leaked data did not contain information regarding bank…
Ransomware group ‘Black Basta’ has raked in more than $100 million -researchers
Raphael Satter reports: A cyber extortion gang suspected of being an offshoot of the notorious Russian Conti group of hackers has raked in more than $100 million since it emerged last year, researchers said in a report published on Wednesday. Digital currency tracking service Elliptic and Corvus Insurance said in a joint report the ransom-seeking cybercrime group…
DFS Announces $1 Million Cybersecurity Settlement With First American Title Insurance Company
Press Release of November 28: The New York State Department of Financial Services (DFS) today announced that First American Title Insurance Company (First American) will pay a $1 million penalty to New York State for violations of DFS’s Cybersecurity Regulation (23 NYCRR Part 500) stemming from a large-scale cybersecurity breach in May 2019. The breach…
ID Theft Service Resold Access to USInfoSearch Data
Brian Krebs reports: One of the cybercrime underground’s more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, KrebsOnSecurity has learned. Since at least February 2023, a service advertised on Telegram called USiSLookups has operated an automated bot that allows anyone to look…
Okta admits hackers accessed data on all customers during recent breach
Carly Page reports: U.S. access and identity management giant Okta says hackers stole data about all of its customers during a recent breach of its support systems, despite previously stating that only a fraction of customers were affected. Okta confirmed in October that a hacker used a stolen credential to access its support case management system…