Capital One will pay $190 million to resolve claims it jeopardized customer information in a 2019 data breach. The settlement benefits around 98 million Capital One customers whose information was compromised as part of the 2019 data breach. Read more at TopClassActions. This settlement is separate from the $80million penalty Capital One was fined in…
Cybercriminal Sentenced To Federal Prison For Decrypting The Credentials Of Thousands Of Computers Across The World And Selling Them On A Dark Web Website
There is an update to the case against Glib Oleksandr Ivanov-Tolpintsev, a Ukrainian who was extradited here in September, 2021 after being arrested in Poland in October, 2020: Tampa, Florida – U.S. District Judge Steven D. Merryday today sentenced Glib Oleksandr Ivanov-Tolpintsev (28, Chernivtsi, Ukraine) to four years in federal prison for conspiring to traffic…
Cameron County Elections Office Reports Online Security Breach
Tim Sullivan reports: The Cameron County Elections Department is acknowledging a security breach in which someone gained access to files containing the personal identifying information of staff members and poll workers. Elections Administrator Remi Garza says the person was able to access files in the online storage system of Easy Vote, a company that provides…
Anonymous Social Media App Yik Yak Exposed Users’ Precise Locations
Lorenzo Franceschi-Bicchierai reports: The anonymous message board app Yik Yak is designed in a way that it is possible to get the precise location of a user’s post, and see users’ unique IDs, potentially allowing someone to dox and stalk users, according to a researcher. […] In April, David Teather, a computer science student, analyzed…
Refuah Health Center “recently discovered” a breach that was listed on the dark web in June, 2021?
On April 29, 2022, Refuah Health Center in New York issued a statement on their website that begins: The privacy and security of the personal and protected health information we maintain is of the utmost importance to Refuah Health Center. We recently discovered unauthorized access to our network occurred between May 31, 2021 and June…
DEA Investigating Breach of Law Enforcement Data Portal
Brian Krebs reports: The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment community that routinely impersonates police and government officials to harvest personal…