#утечка-данных
-
Apollo confirms data breach amid a wave of attacks on financial giants
One of the world's largest private equity funds has reported the theft of personal data from its cloud infrastructure. The breach occurred a month after a warning from Google researchers.
-
Photo search service ClarityCheck exposed 9 million pictures of faces online
A tool for finding people by their photo left roughly 450 GB of images publicly accessible — including the faces of adults, teenagers and children — and also leaked personal data through unsecured APIs.
-
Sakura Internet Breach: Data on 1.36 Million Accounts at Risk
Japanese cloud provider Sakura Internet has reported that attackers gained access to a sales management system holding information about customer contracts and memberships. As many as 1,360,563 accounts may have been affected.
-
CareCloud confirms theft of medical data on 3.7 million patients
One of the largest breaches in the U.S. healthcare system this year: attackers stole the personal and medical data of more than 3.75 million people from CareCloud's cloud storage.
-
One Server Has Spent Over a Year Scraping Data from Salesforce and ServiceNow Portals
The firm Reco has detailed a campaign it calls City Forum: for a year, records from Salesforce and ServiceNow customer portals were harvested from a single VPS. The cause — a guest account with excessive access.
-
Hacker puts 3.6 million employee records from Fortune 500 Azure infrastructure up for sale
An attacker using the alias TheHatman claims to have siphoned employee databases from McDonald's, Vodafone, TCS and other corporations out of their Microsoft Azure tenants using compromised credentials. Some of the companies deny that any breach took place.
-
France's Tax Authority Data Breach Affects 678,000 People
France's Ministry for the Economy and Finance has disclosed a breach of the systems of the DGFiP tax agency: an attacker gained access to the tax and land-registry records of hundreds of thousands of citizens and companies.
-
SafePal Data Breach: Nearly 40,000 Customers Affected
SafePal, a maker of hardware crypto wallets, has disclosed a breach affecting 39,798 customers. The stolen order data is already up for sale on a cybercrime forum.
-
RingCentral Data Breach Affects 1.6 Million Accounts
The ransomware group ShinyHunters stole personal data from users of the RingCentral cloud platform following a July breach. The leak was confirmed by the Have I Been Pwned service.
-
Trezor Data Breach: Nearly 14,000 Customers Affected by a Hack of Its Logistics Partner
Trezor, the maker of hardware cryptocurrency wallets, has reported a leak of customers' personal data following a breach at its shipping contractor, ShipMonk. The devices themselves and the company's systems were unaffected.
-
Terabytes of Credentials Leaked: A Supply-Chain Attack via LiteLLM
The compromise of LiteLLM, a popular AI-development tool, led to the theft of secrets from more than 2,500 organizations, among them Microsoft, Amazon, Cisco, Samsung and Salesforce.
-
He Bought the Domain noreply.net — and Companies Flooded Him with Other People's Secrets
A security researcher bought placeholder domains like noreply.net and found that organizations around the world had spent years sending confidential data there, assuming the addresses were a void.
-
Valve Warns Steam Hardware Buyers of a Breach at Its Logistics Partner
The data of Valve's European customers was stolen after the servers of shipping company CEVA Logistics — which delivers Steam hardware — were hacked. The exposure covers names, addresses and phone numbers, but not payment data.
-
Zero-Day in Metabase: SQL Injection with CVSS 10.0 Used to Steal Customer Data
A critical vulnerability in the Metabase analytics platform allowed an unauthenticated attacker to gain administrator privileges. Among those affected are laptop maker Framework and the form service Tally.
-
Levi Strauss Says Corporate Data Was Stolen After Attack on Employees
Using social engineering, hackers broke into the work computers of three employees of the jeans maker and stole corporate information. According to the company, customer data was not affected.
-
181,874 meetings wide open: how you could read other people's calls in tl;dv
A security researcher discovered that tl;dv, an AI meeting-recording platform, kept its Firestore database with no isolation between accounts for months. Any free-tier user could enumerate every meeting on the service — and even barge into someone else's live call.
-
Hacker Who Breached Snowflake Customers Pleads Guilty: At Least 100 Million People Affected
Connor Riley Moucka has pleaded guilty to fraud and identity theft over the 2024 breaches of Snowflake customer accounts. The key to every break-in was old passwords, stolen by infostealers and never changed.
-
Breach of Britain's PNLD: Police Contacts Leaked to the Dark Web
The UK's Police National Legal Database has confirmed a leak of work contact details for police officers, officials and partners. The data was published on the dark web by the group ExfilSquad.
-
Amgen Reports Patient Data Breach from Cloud Systems
Biotech giant Amgen has confirmed the theft of corporate data and protected health information belonging to patients from the cloud environments of third-party service providers.
-
South Korea Fines Telecom KT $39 Million Over Data Breach
The PIPC regulator has levied nearly 54 billion won against South Korea's largest carrier for an 11-month network compromise carried out through a rogue base station — and for concealing that its servers had been infected with the BPFDoor malware.
- More