Choi Ji-Won reported on Tuesday: Seoul Guarantee Insurance, South Korea’s largest provider of guarantee insurance, has been crippled by a ransomware attack, with its core systems offline for a third straight day. The incident began early Monday, when SGI reported an “abnormal symptom” in its database system. By Tuesday afternoon, a joint investigation by the…
Theft from Glasgow’s Queen Elizabeth University Hospital sparks probe
Old-fashioned breaches still exist. Amanda Keenan reports: Health board chiefs have launched a major investigation after brazen thieves stole NHS laptops containing confidential patient data. Around 20 staff devices were snatched from an office block within the Queen Elizabeth University Hospital in Govan. Greater Glasgow and Clyde health board bosses have been forced to fork out £14,000 to…
Global operation targets NoName057(16) pro-Russian cybercrime network in Operation Eastwood
Europol reports: Between 14 and 17 July, a joint international operation, known as Eastwood and coordinated by Europol and Eurojust, targeted the cybercrime network NoName057(16). Law enforcement and judicial authorities from Czechia, France, Finland, Germany, Italy, Lithuania, Poland, Spain, Sweden, Switzerland, the Netherlands and the United States took simultaneous actions against offenders and infrastructure belonging…
More than 100 British government personnel exposed by Ministry of Defence data leak
More details continue to emerge about the Ministry of Defence data breach in 2022 that put thousands of Afghani people seeking relocation assistance and their family members at serious risk of Taliban reprisals. The breach occurred when an MoD employee mistakenly emailed a dataset with information on applicants to the Afghan Relocations and Assistance Policy…
New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers
Waqas reports: TeleMessage SGNL, a made-in-Israel clone of the Signal app used by US government agencies and regulated businesses, has been found running with an outdated configuration that exposes sensitive internal data to the internet, no login required. The main cause of the problem is how some deployments of TeleMessage SGNL are using older versions…
North Country Healthcare responds to Stormous’s claims of a breach (1)
On July 13, DataBreaches reported that the Stormous gang claimed to have exfiltrated 600,000 patients’ records from North Country Healthcare (NCH) in Arizona. At the time they provided a small sample of records in .csv format and indicated that they were going to leak 100,000 records for free and sell the other 500,000 records. Because…