Zack Whittaker reports: Streaming media platform Plex has confirmed a data breach and is warning users to change their passwords. Plex said it discovered the compromise on Tuesday and found the intruder had accessed “a limited subset of data that includes emails, usernames, and encrypted passwords.” Plex vice-president of engineering Schuyler Ullman told TechCrunch that…
ASL Città di Torino, the trouble continue after the cyber attack of 19 August
Marco A. De Felice reports: On August 19, a computer attack made it necessary to block all computer systems by the IT technicians of the “ASL Città di Torino”. A ransomware-type attack that has affected and continues to affect the San Giovanni Bosco, Maria Vittoria, Martini and Oftalmico hospitals. The cyber attack was discovered by…
Block sued after ex-staffer siphons customer data
Thomas Claburn reports: Block – the digital payments giant formerly known as Square – faces allegations it failed to take adequate measures to protect customers’ personal information. A lawsuit [PDF], filed Tuesday in a federal district in Oakland, California, on behalf of two users of Cash App, operated by Block subsidiary Cash App Investing, claims the company…
Liberty Counsel’s Donor Records and Pro-Trump Election Messaging Exposed in Data Breach
Micah Lee and Michael Sherrard report: Liberty Counsel, an evangelical Christian nonprofit that provided a brief cited by the Supreme Court in its decision to overturn Roe v. Wade, has been hacked, revealing a 25-gigabyte internal database that contains nearly seven years’ worth of donor records. The hacker, who identifies with the Anonymous movement, released…
OCR Settles Case Involving Decade-Long Improper Disposal of Protected Health Information
There is an enforcement update to an incident noted on this site in 2018. The incident that involved New England Dermatology P.C., d/b/a New England Dermatology and Laser Center (“NDELC”) was summarized by HHS in their resolution agreement and corrective action plan for this case: On May 11, 2021, NEDLC filed a breach notification report…
Schools in Texas, Pennsylvania, and California hit with ransomware as schools reopen for the year
One lesson that should have been learned from past years is that ransomware groups will attack schools right as they get ready to open for the school year because districts may feel more pressured to pay so they can open. So far this week, DataBreaches has spotted ransomware attack reports on two k-12 school districts…