IOL reports: Another major leak has surfaced for South Africans. A database containing sensitive personal data that came from a traffic fine platform has been leaked online, according to security researcher Troy Hunt and iAfrikan Digital founder Tefo Mohapi. The information contained in this leak includes names, ID numbers, e-mail addresses, and passwords stored in plain text from…
Data Leak May Have Affected Patients at Muir Medical Group IPA
NBC reports: Muir Medical Group patients who received treatment between November 2013 and February 2017 may have had their personal information shared without their consent, the company reported. The Walnut Creek-based firm discovered the leak on March 7 after a former employee took information with her before her employment ended, according to the company. This…
New VPNFilter malware targets at least 500K networking devices worldwide
Cisco’s Talos writes: For several months, Talos has been working with public- and private-sector threat intelligence partners and law enforcement in researching an advanced, likely state-sponsored or state-affiliated actor’s widespread use of a sophisticated modular malware system we call “VPNFilter.” We have not completed our research, but recent events have convinced us that the correct…
Comcast website bug leaks Xfinity customer data
ZackWhittaker reports: A bug in Comcast’s website used to activate Xfinity routers can return sensitive information on the company’s customers. The website, used by customers to set up their home internet and cable service, can be tricked into displaying the home address where the router is located, as well as the Wi-Fi name and password….
Update: LifeBridge Health notifying 500,000 patients of security incident
Remember that LifeBridge Health and LifeBridge Potomac Professionals malware incident noted on this site on May 16? Baltimore Sun reports that they are notifying 500,000. Ouch.
IN: Allied Physicians of Michiana report SamSam attack
South Bend Tribune reports: A local physicians network was the focus of a recent cyberattack that released ransomware into its network. According to a press release from Allied Physicians of Michiana CEO Shery Roussarie, the company became aware of the cyberattack on Thursday afternoon and immediately took steps to shut down the network in order…