The Office of Inadequate Security
CAUTION: This post contains some images showing adults with bruises or injuries. The images may be upsetting or disturbing. In October 2023, DataBreaches was contacted by a moderator for BreachForums. He had come across an exposed database and seeing how sensitive it was, contacted this site to see if we could alert those responsible for…
The Straits Times reports: Indonesia said it is beginning to recover data that had been encrypted in a major ransomware attack in June which affected more than 160 government agencies. The attackers, identified as Brain Cipher, asked for US$8 million (S$10.7 million) in ransom to unlock the data, before they later apologised and released the decryption key…
Christopher Palmieri reports: AT&T Inc. suffered a massive hack of customer data — separate from one reported earlier this year — that included records of calls and texts for nearly all of its mobile-phone users for a six-month period in 2022, one of the biggest breaches of private communications data in recent memory. The company said…
Zack Whittaker reports: A data breach at the phone surveillance operation mSpy has exposed millions of its customers who bought access to the phone spyware app over the past decade, as well as the Ukrainian company behind it. Unknown attackers stole millions of customer support tickets, including personal information, emails to support, and attachments, including…
Matt Burgess reports: For more than a decade, Vyacheslav Igorevich Penchukov—a Ukrainian who used the online hacker name “Tank”—managed to evade cops. When FBI and Ukrainian officials raided his Donetsk apartment in 2010, the place was deserted and Penchukov had vanished. But the criminal spree came to a juddering halt at the end of 2022,…
Read Change Healthcare’s Substitute Notice. Individual notices will go out at the end of July, but they may not have your address to notify you individually. Chad Van Alstin writes: Multiple state attorney generals have sent notices, informing residents about the Change Healthcare breach and urging them to enroll in the credit monitoring and identity…