Lawrence Abrams reports: Email marketing firm MailChimp disclosed on Sunday that they had been hit by hackers who gained access to internal customer support and account management tools to steal audience data and conduct phishing attacks. Sunday morning, Twitter was abuzz with reports from owners of Trezor hardware cryptocurrency wallets who received phishing notifications claiming that the company suffered…
Ledger users file a class-action lawsuit against Shopify over a data breach
Ali Raza reports: Shopify, a leading global eCommerce platform, faces a class-action lawsuit filed by users of the Ledger hardware wallet. The lawsuit stems from a major data breach that happened in 2020. The class-action lawsuit was filed at the US District Court of Delaware on April 1. The lawsuit states that Shopify failed to protect the…
Indiana Amends State Data Breach Notification Law
On March 18, 2022, Indiana Governor Eric Holcomb signed into law an amendment to Indiana’s data breach notification statute. The amendment requires notification of a data breach to affected individuals and the Indiana Attorney General without unreasonable delay, but no later than forty-five (45) days after discovery of the breach. The amendment will take effect on July 1, 2022….
Germany closes Russian darknet market Hydra
DW reports: Federal police say they have shut down the German servers for the darknet hub, which saw its sales skyrocket during the pandemic. Investigators said on Tuesday that they had shut down the German servers for Hydra, a Russian darknet marketplace that was used to sell drugs, forged documents, intercepted data, and other illegal digital services….
Food Delivery Leak Unmasks Russian Security Agents
Russian tech giant Yandex has blamed one of its employees for the hacking and subsequent leak of data from Yandex Food, a popular food delivery service in Russia. Aric Toler reports: Among the many users affected are serving agents of Russia’s security services and military, who in several cases even ordered food to their places of…
Emma Sleep Company admits checkout Magecart attack
Paul Kunert reports: Emma Sleep Company has confirmed to The Reg that it suffered a Magecart attack which enabled ne’er-do-wells to skim customers’ credit or debit card data from its website. Customers were informed of the breach by the mattress maker via email in the past week, with the business saying it was “subject to a cyber…