Attorneys are closing in on a settlement deal that could deliver up to $63 million to some victims of one of the most cataclysmic data breaches in history The settlement, if approved by a judge, would end a seven-year legal effort to win compensation for more than 21 million current and former federal employees who were…
Insufficient Data Security and Disregard for Student Data Privacy Plague the DeKalb County School District; With Commentary by Jim Siegl
Keegan Brooks writes: The DeKalb County School District has been making thousands of files containing sensitive student and staff information widely accessible to anyone in the district. Types of information exposed have included social security numbers, academic records, medical forms, course transcripts, standardized test scores, discipline records, and the 504/IEP information of students, among others….
Sunday notes: Welldyne, North Alabama Bone & Joint Clinic disclose breaches affecting patient data
A Sunday two-fer on health data breaches: WellDyneRx, LLC (“WellDyne”) issued a press release on May 6 concerning an incident they first detected on December 2. The Florida-headquartered pharmacy benefits service provider’s investigation discovered that there was unauthorized access to an email account between October 30, 2021, and November 11, 2021. “Although there is no…
Cybercrime loves company: Conti cooperated with other ransomware gangs
Seems to be a lot of Conti-related analyses this week, as well as the $10 million reward offered by the government for information leadings to Conti’s leaders. From Intel471: Software developers often depend on the collective knowledge of the industry to build their products. Whether it’s through reverse engineering, poaching talent, or straight up cloning…
False-flag cyberattacks a red line for nation-states, says Mandiant boss
Jessica Lyons Hardcastle reports: False-flag cyberattacks represent a red line that even nation states like Russia and China don’t want to cross, according to Mandiant CEO Kevin Mandia. “It’s one of the last rules of the playground that a modern nation may not want to break because they don’t want everyone doing false flags,” he…
OpenSea Discord server hacked, increasing the risk of phishing scams
Ali Raza reports: OpenSea, a non-fungible token marketplace, has become the victim of a hack on its main Discord channel. The breach has allowed the threat actors to post fake announcements about partnerships between OpenSea and other projects. OpenSea shared a screenshot on May 6 showing the fake news about partnerships. The screenshot also contained a link…