As reported previously, Lewis and Clark Community College was hit with a ransomware attack in November, 2021. They announced it immediately due to impact on the functioning of their systems, but it appears that they are just now issuing breach notification letters to individuals. Their notification letter says that information was encrypted but that there…
Edu-tech firm GeniusU fined $35,000 for data leak affecting 1.26m users
Rei Kurohei reports: GeniusU, a Singapore-based education technology company, has been fined $35,000 for a data breach that resulted in the theft of 1.26 million users’ personal data. The incident is one of the largest data breaches here in recent years, in terms of the number of users affected. Read more at The Straits Times. As…
Kaiser Wins Trademark Injunction Against Patient Data Company
Isaiah Poritz reports: Kaiser Foundation Health Plan Inc. won a preliminary injunction in California federal court against medical records company SureFile Filing Systems for attempting to sell patient data using Kaiser’s trademarks. Kaiser is likely to succeed on the merits of its breach of contract and common law trademark counterclaims against SureFile, Judge Mark C. Scarsi…
Wawa wants a refund, says Mastercard owes $32 million for data breach penalties
Joseph N. DiStefano reports: Wawa, the Delaware County-based convenience store and gas station chain, paid $10.7 million last year linked to a 2019 breach of its customer payment security systems. But now it wants that money back — and more. On Monday in federal court in New York, Wawa sued Mastercard, the giant payment-card network,…
Report: Pro-Iran hackers target Israel Airports Authority website; Israeli portal also hit
JNS reports: A pro-Iran hacking group named Altahrea Team targeted the website of the Israel Airports Authority, Israeli media reported on Wednesday. The group said its actions were “revenge” for the assassination by the United States on Jan. 3 of Iranian Quds Force commander Qassem Soleimani and Abu Mahdi Al-Muhandes, the commander of the pro-Iranian…
REvil ransomware group’s infrastructure comes back online hinting at fresh campaign
Connor Jones reports: ….. Some researchers noted the return of REvil’s ‘happy blog’ – the place where it announced its hacks – on 19 April, returning an Nginx 404 error. Others said the signs of a return started as far back as December, one month after law enforcement made the original arrests of the gang members. Using the…