Security News

National Public Data Breach: Only 134 Million Unique Emails Leaked and Company Acknowledges Incident
2024-08-20 14:00

It wasn't until earlier this month that a user named "Fenice" leaked 2.7 billion unencrypted records on the dark web site known as "Breached," in the form of two csv files totalling 277GB. These did not contain phone numbers and email addresses, and Fenice said that the data originated from SXUL. As individuals will each have multiple records associated with them, one for each of their previous home addresses, the breach does not expose information about 2.7 billion different people. Must-read security coverage What security experts are saying about the breach Why are the National Public Data records so valuable to cyber criminals?

Toyota confirms third-party data breach impacting customers
2024-08-19 20:51

Toyota confirmed that customer data was exposed in a third-party data breach after a threat actor leaked an archive of 240GB of stolen data on a hacking forum. [...]

Toyota confirms breach after stolen data leaks on hacking forum
2024-08-19 20:51

Toyota confirmed that its network was breached after a threat actor leaked an archive of 240GB of data stolen from the company's systems on a hacking forum. [...]

National Public Data confirms breach exposing Social Security numbers
2024-08-16 17:18

Background check service National Public Data confirms that hackers breached its systems after threat actors leaked a stolen database with millions of social security numbers and other sensitive...

Attackers Exploit Public .env Files to Breach Cloud Accounts in Extortion Campaign
2024-08-16 16:30

A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files that contain credentials associated with cloud and social media applications. Env files, out of which 7,000 belonged to organizations' cloud services and 1,500 variables are linked to social media accounts.

How to Prevent Your First AI Data Breach
2024-08-13 14:02

The company identified the source of the data breach: a former employee used a gen AI copilot to access an internal database full of account data. In this article, we'll explore these challenges and show you how to secure your data in the era of gen AI. Gen AI's data risk.

CSC ServiceWorks discloses data breach after 2023 cyberattack
2024-08-09 17:56

​CSC ServiceWorks, a leading provider of commercial laundry services, has disclosed a data breach after the personal information of an undisclosed number of individuals was exposed in a 2023...

ADT confirms data breach after customer info leaked on hacking forum
2024-08-08 13:41

ADT Inc. disclosed via a Form 8-K filing at the U.S. Securities and Exchange Commission (SEC) that hackers have gained access to its systems, which hold customer order details. [...]

UK IT provider faces $7.7 million fine for 2022 ransomware breach
2024-08-07 17:14

The UK's Information Commissioner's Office (ICO) has announced a provisional decision to impose a fine of £6.09M ($7.74 million) on Advanced Computer Software Group Ltd (Advanced) for its failure...

Hackers breach ISP to poison software updates with malware
2024-08-03 14:12

A Chinese hacking group tracked as StormBamboo has compromised an undisclosed internet service provider (ISP) to poison automatic software updates with malware. [...]