Help, please: If anyone has a copy of the ransom note sent to PowerSchool in December 2024 or to PowerSchool clients on or about May 7, 2025, please email me a copy or upload it to me on Signal. I want to see not only the body, but the full header and signature. To reach…
RCMP thumb drive with informant, witness data obtained by criminals: watchdog
Jim Bronskill reports: The RCMP lost a USB key containing personal information about victims, witnesses and informants, and later learned it was being offered for sale by criminals, the federal privacy watchdog says. A detailed report from the Office of the Privacy Commissioner of Canada reveals the RCMP told the watchdog about the breach in March…
Evoke Wellness to Pay $1.9 Million to Settle FTC Claims That They Misled Consumers Seeking Substance Use Disorder Treatment
Evoke allegedly used Google ads and telemarketing to pretend to be other clinics; court order permanently bans them from similar deceptive conduct On June 10, DataBreaches sent Evoke Wellness in Hilliard, Ohio an inquiry about an insider-wrongdoing breach reported in Ohio media but not mentioned on their website. There has been no reply as of…
Former Hilliard treatment center employee accused of selling patient data on dark web
In case you were looking for yet another reminder of the insider threat in the healthcare sector, here’s a report from WBNS in Ohio: Authorities in Hilliard are investigating a widespread fraud and identity theft case involving a former employee of a local addiction treatment center who allegedly sold patients’ private data on the dark…
Trump Rewrites Cybersecurity Policy in Executive Order
David Perera reports: President Donald Trump signed Friday an executive order reframing U.S. cybersecurity policy, eliminating what the Republican White House described as “problematic elements” inherited from Democratic administrations. The new order strikes a push for digital identity documents made by then-President Joe Biden in one of his last acts as commander in chief. Digital IDs, the White House…
AMI Group – Travel & Tours notice of ransomware attack
The following notice was posted June 3 on Facebook. As of publication, there is no notice on their website, and although AMI indicates that APT73 is responsible for the attack, there is nothing on Bashe’s leak site or any other leak site. 𝗨𝗥𝗚𝗘𝗡𝗧 𝗣𝗨𝗕𝗟𝗜𝗖 𝗡𝗢𝗧𝗜𝗖𝗘 – 𝗖𝗬𝗕𝗘𝗥𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬 𝗔𝗟𝗘𝗥𝗧 𝗧𝗼 𝗼𝘂𝗿 𝘃𝗮𝗹𝘂𝗲𝗱 𝗰𝗹𝗶𝗲𝗻𝘁𝘀, 𝗽𝗮𝗿𝘁𝗻𝗲𝗿𝘀, 𝘀𝘁𝗮𝗸𝗲𝗵𝗼𝗹𝗱𝗲𝗿𝘀, 𝗮𝗻𝗱…