Bleeping Computer
Siemens Energy has confirmed that data was stolen during the recent Clop ransomware data-theft attacks using a zero-day vulnerability in the MOVEit Transfer platform.
DataBreaches
Marianne Kobalsuk McGee reports: An Ohio community college is notifying 290,000 people of a data theft breach this spring that may have compromised their...
Bleeping Computer
Threat actors can steal data from organizations to sell to other malicious actors, making it a major risk for organizations. Wazuh, the free and open-source XDR/SIEM, offers several capabilities that protection against data theft.
SecurityWeek
Johnson Controls confirms that the recent ransomware attack resulted in data theft and says expenses reached $27 million.
The Record
Swedish automaker Volvo confirmed today a security breach and the theft of research and development (R&D) data from one of its file storage repositories.
Bleeping Computer
Several state and key industrial organizations in Russia were attacked with a custom Go-based backdoor that performs data theft, likely aiding espionage operations.
Bleeping Computer
The Clop ransomware gang has started extorting companies impacted by the MOVEit data theft attacks by listing them on a data leak site, a common extortion tactic used as a precursor for the public leaking of stolen data.
Bleeping Computer
NATO has confirmed that its IT team is investigating claims about an alleged data-theft hack on the Communities of Interest (COI) Cooperation Portal by a hacking group known as SiegedSec.
Bleeping Computer
The Vice Society ransomware gang is deploying a new, rather sophisticated PowerShell script to automate data theft from compromised networks.
The Cyber Express
Researchers discovered a new data theft campaign, active since at least 2021, attributed to an advanced persistent threat (APT) actor
The Record
The California city of El Cerrito is investigating the potential theft of data after a ransomware group added the city’s government to its list of victims on Wednesday.
Infosecurity News
A recent survey conducted by Integrity 360 shows that data theft has overtaken ransomware as a top concern for some IT decision makers
Bleeping Computer
Google is introducing multiple anti-theft and data protection features later this year, some available only for Android 15+ devices, while others will roll out to billions of devices running Android 10 and later.
The Hacker News
Dutch police arrest three hackers in connection with a large-scale criminal operation involving data theft, extortion, and money laundering operation.
SecurityWeek
Plex is scrambling to reset user passwords after a database hack that included the theft of emails, usernames, and encrypted passwords.
DataBreaches
Marco A. De Felice reports: 27,367 people, including patients and healthcare / administrative staff, were affected by the theft of sensitive data after the...
Bleeping Computer
Horizon3 security researchers have released proof-of-concept (PoC) exploit code for a remote code execution (RCE) bug in the MOVEit Transfer managed file transfer (MFT) solution abused by the Clop ransomware gang in data theft attacks.
Bleeping Computer
Latitude Financial Services (Latitude) has published a notice on its website today informing that it has suffered a ransomware attack that resulted in the theft of some customer data.
Bleeping Computer
The U.S. Marshals Service (USMS) is investigating the theft of sensitive law enforcement information following a ransomware attack that has impacted what it describes as "a stand-alone USMS system."
Security Affairs
Atlassian discloses a data leak that was caused by the theft of employee credentials which was used to steal data from a third-party vendor. A group of hackers called SiegedSec recently published on its Telegram channel a JSON file containing data belonging to thousands of Atlassian employees and floor plans for two of the company’s […]
DataBreaches
DutchNews.nl reports: Amsterdam’s cyber crime police team has arrested three young men as part of a major investigation into hacking, data theft, blackmail...
Bleeping Computer
The New York State Office of the Attorney General (NY OAG) warned victims of the August 2021 T-Mobile data breach that they faced identity theft risks after some of the stolen information ended up for sale on the dark web.
SecurityWeek
Multiple vulnerabilities in the airline and hotel rewards platform points.com could have led to personal information theft and hacking
DataBreaches
Mehal Jain reports: The Supreme Court on Tuesday remarked that in a case of hacking and data theft, in addition to penal provisions of the IT Act, offences...
Security Affairs
The Dark Angels (Dunghill) ransomware group claims the hack of the chipmaker Nexperia and the theft of 1 TB of data from the company.
HACKRead
Your data is now more vulnerable than ever and Identity theft has evolved far beyond the days of stolen mail and dumpster diving.
Bleeping Computer
Sebastien Raoult, a 22-year-old from France, has pleaded guilty in the U.S. District Court of Seattle to conspiracy to commit wire fraud and aggravated identity theft as part of his activities in the ShinyHunters hacking group.
Infosecurity News
Employee data was accessed by the threat actors, including names, addresses, and more
DataBreaches
Kim Jae-heun reports: Online thieves managed to steal customer data, including phone numbers, in a cyberattack on some data centers managed by Chanel Korea...
Infosecurity News
Accenture warns that stolen data is flooding the cybercrime underground
SecurityWeek
The Lapsus$ hacker group claims to have stolen information, including source code and customer data, from Microsoft, LGE and Okta.
DataBreaches
Jackson Lewis reports: Hackers have posted 42 gigabytes of data allegedly stolen from CEFCO Convenience Stores on a website known as Marketo. The website...
Security Affairs
The Cactus ransomware gang claims the theft of 1.5TB of data from the Energy management and industrial automation firm Schneider Electric.
DataBreaches
Laptop theft involving unencrypted patient data is still a thing, although we don’t seem to hear about it as often as a number of years ago. KOKH reports...
Krebs on Security
One of the cybercrime underground's more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, KrebsOnSecurity has learned.
DataBreaches
Charles Rusnell and Jennie Russell report: The theft of a charity’s entire database containing the personal information of more than 27,000 clients,...
Infosecurity News
DTEX claims industrial espionage and IP theft are at an all-time high thanks to malicious insiders
DataBreaches
TNN reports: A company engaged in providing holistic care to children with special needs has accused one of its former executives of stealing confidential data...
Bleeping Computer
Prudential Financial has disclosed that its network was breached last week, with the attackers stealing employee and contractor data before being blocked from compromised systems one day later.
Bleeping Computer
General Electric is investigating claims that a threat actor breached the company's development environment in a cyberattack and leaked allegedly stolen data.
Bleeping Computer
The University of Manchester finally confirmed that attackers behind a cyberattack disclosed in early June had stolen data belonging to alumni and current students.
SecurityWeek
Microsoft on Monday shared information on patches and mitigations for a vulnerability impacting Azure Data Factory and Azure Synapse Pipelines.
Bleeping Computer
The United Nations Development Programme (UNDP) is investigating a cyberattack after threat actors breached its IT systems to steal human resources data.
The Hacker News
Credential theft is clearly still a problem. Organizations need to play catch-up when it comes to the security of their credentials.
DataBreaches
The Times of India reports: GHAZIABAD: Two people have been booked by Ghaziabad police for allegedly stealing data from a cosmetics company. The accused have...
DataBreaches
Brian Krebs reports: One of the cybercrime underground’s more active sellers of Social Security numbers, background and credit reports has been pulling data...
Bleeping Computer
Microsoft has linked the Clop ransomware gang to recent attacks exploiting a zero-day vulnerability in the MOVEit Transfer platform to steal data from organizations.
The Record
The multibillion-dollar technology services firm CDW said it is investigating claims made by a ransomware gang that data was stolen during a cyberattack.
DataBreaches
On July 30, 2021, DataBreaches.net reported on a claimed cyberattack against Sandhills Center in North Carolina. Data for sale had shown up on the...
The Hacker News
Salesforce-owned Heroku begins resetting users' passwords following the theft of GitHub OAuth tokens.
Infosecurity News
Scottish NHS trust reveals patient and staff data may have been taken in security breach
DataBreaches
SAN DIEGO, Oct. 6, 2021 /PRNewswire-PRWeb/ — Today, the Identity Theft Resource Center® (ITRC), a nationally recognized nonprofit organization...
SecurityWeek
United Nations Development Programme (UNDP) investigating a ransomware attack in which hackers stole sensitive data.
DataBreaches
Bill Toulas reports: A BlackByte ransomware affiliate is using a new custom data stealing tool called ‘ExByte’ to steal data from compromised...
Bleeping Computer
JVCKenwood has suffered a Conti ransomware attack where the threat actors claim to have stolen 1.7 TB of data and are demanding a $7 million ransom.
CyberSecurity Dive
A prolific Russia-affiliated group threatened to leak data if the aerospace company doesn't make contact by Nov. 2.
Bleeping Computer
Caesars Entertainment, self-described as the largest U.S. casino chain with the most extensive loyalty program in the industry, says it paid a ransom to avoid the online leak of customer data stolen in a recent cyberattack.
SecurityWeek
The Dark Angels (Dunghill) ransomware group claims to have stolen 1 Tb of data from Nexperia, which is investigating the incident.
ThreatPost
Rising critical unpatched vulnerabilities and a lack of encryption leave medical device data defenseless, researcher warn.
Bleeping Computer
Cybersecurity company Rubrik has confirmed that its data was stolen using a zero-day vulnerability in the Fortra GoAnywhere secure file transfer platform.
Bleeping Computer
Chip manufacturer AMD says they are investigating a cyberattack after threat actors claimed to have stolen 450 GB of data from the company last year.
Bleeping Computer
An ongoing hacking campaign called 'Hiatus' targets DrayTek Vigor router models 2960 and 3900 to steal data from victims and build a covert proxy network.
Bleeping Computer
World-leading chemical distribution company Brenntag has shared additional info on what data was stolen from its network by DarkSide ransomware operators during an attack from late April 2021 that targeted its North America division.
Infosecurity News
The 15-year-old Ebury botnet is more active than ever, as ESET found 400,000 Linux servers compromised for cryptocurrency theft and financial gain
Bleeping Computer
Consumer goods giant Procter & Gamble has confirmed a data breach affecting an undisclosed number of employees after its GoAnywhere MFT secure file-sharing platform was compromised in early February.
SecurityWeek
CISA has urged organizations to patch a recent Zimbra credential theft vulnerability after reports of exploitation in the wild.
SC Magazine
The stealthy threat group is particularly focused on exfiltrating data from Asia-Pacific government and defense organizations.
SecurityWeek
Google is bringing to Chrome new features to bind browser sessions to the device and protect users against cookie theft.
DataBreaches
Alexandra Jones reports: The Supreme Court unanimously shot down the government’s broad reading of identity theft law Thursday in a decision that will...
DataBreaches
Katie Nixon reports: A former Ashland City Elementary STEM Academy Parent-Teacher Organization (PTO) president is facing theft, forgery and computer crimes...
Bleeping Computer
RR Donnelly has confirmed that threat actors stole data in a December cyberattack, confirmed by BleepingComputer to be a Conti ransomware attack.
The Hacker News
American video game publisher Rockstar Games has confirmed that a hacker illegally downloaded early footage of Grand Theft Auto VI.
SecurityWeek
A 20-year-old Floridian was sentenced to prison for his role in a hacking scheme that led to the theft of $1 million in cryptocurrency.
CyberSecurity Dive
Inc, a relatively new threat group, previously claimed to have stolen company data.
Bleeping Computer
Cisco said that unauthenticated attackers could bypass TLS inspection filtering tech in multiple products to exfiltrate data from previously compromised servers inside customers' networks.
DataBreaches
Sergiu Gatlan reports: World-leading chemical distribution company Brenntag has shared additional info on what data was stolen from its network by DarkSide...
The Hacker News
A Chinese state-sponsored threat group named RedAlpha has been attributed to a multi-year mass credential theft campaign.
DataBreaches
I looked at this news article because it struck me as unusual that a middle school student would be charged with identity theft, but after reading the story,...
HACKRead
The U.S. DoJ has cracked down on a large-scale identity theft scheme orchestrated by North Korea (Democratic People's Republic of Korea).
HACKRead
The U.S. DoJ has cracked down on a large-scale identity theft scheme orchestrated by North Korea (Democratic People's Republic of Korea).
DataBreaches
NL Times reports: The ICAM Foundation filed a lawsuit against the Ministry of Public Health, Welfare, and Sport and 34 other agencies over a data breach at the...
DataBreaches
Dutch police have made another arrest involving an alleged hacker. It sounds like they identified and arrested this individual fairly quickly, which raises...
Ars Technica
Linwei Ding faces four counts of trade secret theft, each with a potential 10-year prison term.
The Hacker News
Crypto hardware wallet maker Ledger faces a major software breach, resulting in the theft of $600,000+ worth of virtual assets.
Infosecurity News
Kaspersky said cybercriminals harvested 50.9 login credentials per infected device in 2023
Bleeping Computer
McDonald's, the largest fast-food chain globally, has disclosed a data breach after hackers breached its systems and stole information belonging to customers and employees from the US, South Korea, and Taiwan.
The Hacker News
Muddled Libra threat group weaponizes SaaS & cloud environments for data exfiltration.
Latest Hacking News
Recently, a cryptocurrency firm, Fortress Trust, disclosed a theft of $15 million following a cyber attack. Investigating the matter revealed a design flaw in Google Authenticator that led to a series of incidents across multiple
Bleeping Computer
Hackers are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software to steal data from organizations.
Security Affairs
A China-linked APT group named RedAlpha is behind a long-running mass credential theft campaign aimed at organizations worldwide. Recorded Future researchers attributed a long-running mass credential theft campaign to a Chinese nation-state actor tracked RedAlpha. The campaign targeted global humanitarian, think tank, and government organizations. Experts believe RedAlpha is a group of contractors conducting cyber-espionage activity on behalf of […]
Bleeping Computer
Cybercriminals are embracing data-theft extortion by creating dark web marketplaces that exist solely to sell stolen data.
Security Affairs
Threat actors leaked source code and gameplay videos of Grand Theft Auto 6 (GTA6) after they have allegedly breached Rockstar Game. Threat actors allegedly compromised Rockstar Game’s Slack server and Confluence wiki and leaked Grand Theft Auto 6 gameplay videos and source code. On September 18, 2022, threat actors that go on GTAForums as ‘teapotuberhacker’ […]
DataBreaches
Sabelo Skiti reports: Two of the country’s largest consumer credit reporting agencies, TransUnion and Experian, may have been hit by a fresh data hack,...
DataBreaches
Krystal Kuykendall reports: The Royal Ransomware is claiming to have infiltrated public school management and virtual learning provider Edison Learning,...
Ars Technica
As car owners grow hip to one form a theft, crooks are turning to new ones.
Bleeping Computer
A new message today from the operators of Babuk ransomware clarifies that the gang has decided to close the affiliate program and move to an extortion model that does not rely on encrypting victim computers.
Infosecurity News
The group utilize malware like GAMMASTEEL to rapidly exfiltrate files within 30-50 minutes
The Record
A hacking operation labeled ToddyCat continues to steal data primarily from governmental targets in the region, researchers say.
The Record
The Canadian Nurses Association (CNA) confirmed that it is working with its members to respond to a leak of sensitive data stolen by a group of hackers earlier this year.
ZDNet
LockBit is threatening to leak documents stolen from the French Ministry of Justice.
Loading more articles....