Data Breach Today

OCTOBER 13, 2020

Blackbaud, Magellan Health Incidents Trigger Numerous Breach Notifications Hacking incidents involving ransomware attacks continue to dominate the 2020 health data breach tally, with incidents affecting two companies - Blackbaud and Magellan Health - accounting for numerous breach notifications by their clients.

Data breaches 317

Data breaches Ransomware 317

Data Breach Today

JANUARY 27, 2021

Researchers Say Pandemic Triggered Surge in Activity The number of distributed denial-of-service attacks launched in 2020 surpassed 10 million, up from 8.5 million in 2019, according to NetScout's Atlas Security Engineering and Response Team.

Security 306

Security 306

Krebs on Security

DECEMBER 8, 2020

Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load.

Security 312

Security Risk IT 312

Data Breach Today

JULY 22, 2021

Justice Department for his alleged role in a July 2020 hack of Twitter and additional incidents involving TikTok and Snapchat. Spanish Police Arrested UK Citizen Joseph O'Connor at Request of US Prosecutors A U.K. citizen was arrested in Spain Wednesday at the request of the U.S. This is the third arrest in the Twitter case so far.

290

290

Data Breach Today

MAY 17, 2023

million fine as part of a settlement in the aftermath of a 2020 email phishing incident that affected 2.1 NJ, Pennsylvania, Oregon, Florida Settlements Follow Earlier Fines by NY Regulators The attorneys general of four states have smacked vision care provider EyeMed Vision Care with a $2.5 million individuals in the United States.

Phishing 255

Phishing 255

Data Breach Today

JULY 17, 2024

The Pysa ransomware group claimed credit for encrypting 440,000 files in 2020. s data watchdog on Wednesday reprimanded London's Hackney Council over its failure to protect the data of nearly 280,000 town residents from a ransomware hack that resulted in attackers leaking sensitive data.

Encryption 173

Encryption Ransomware IT 173

Data Breach Today

NOVEMBER 20, 2024

LA County Clinic Delayed Access to Patient's Medical Records During Pandemic Federal regulators have fined a Los Angeles county mental health clinic $100,000 for failure to provide a patient with timely access to her requested health records during the COVID-19 pandemic. The case is the U.S.

Access 246

Access Government 246

Krebs on Security

AUGUST 16, 2020

11’s Patch Tuesday was CVE-2020-1464 , a problem with the way every supported version of Windows validates digital signatures for computer programs. In fact, CVE-2020-1464 was first spotted in attacks used in the wild back in August 2018. One of the 120 security holes Microsoft fixed on Aug. Image: Securityinbits.com.

Security 358

Security IT 358

Data Breach Today

JUNE 8, 2021

Complaint Alleged Multiple Security 'Failures' Leading to 2020 Cyberattack A federal court has approved a proposed settlement in a class action lawsuit filed in February against Nebraska Medicine in the wake of a 2020 malware attack and exfiltration of sensitive personal and health data for tens of thousands of individuals.

Data breaches 323

Data breaches Security 323

Security Affairs

SEPTEMBER 22, 2024

GreyNoise Intelligence firm warns of a mysterious phenomenon observed since January 2020, massive waves of spoofed traffic called Noise Storms. GreyNoise Intelligence has been tracking a mysterious phenomenon since January 2020 consisting of massive waves of spoofed traffic, tracked by the experts as ‘Noise Storms.’

Communications 140

Communications Security Information Security IT 140

Data Breach Today

JULY 26, 2024

The botnet campaign pushed out the PlugX remote access Trojan that has infected 3,000 machines in France since 2020. National Police Probe Botnet Campaign That Infected 3,000 Machines The French government has launched an investigation into a suspected Chinese espionage campaign that infected thousands of networks in France.

Government 328

Government Access 328

Data Breach Today

OCTOBER 5, 2023

2020 Ransomware Incident Affected 13,000 Customers, Millions of Individuals Fundraising software powerhouse Blackbaud will pay $49.5 million to settle a multistate investigation into the company's data security practices and its response to a 2020 ransomware attack.

Ransomware 305

Ransomware Security IT 305

Data Breach Today

FEBRUARY 1, 2024

FTC Is Latest Agency to Rebuke Fundraising Firm for Lax Security in 2020 Attack The Federal Trade Commission is the latest regulatory agency taking action against fundraising and customer relationship management software provider Blackbaud in the aftermath of a 2020 ransomware incident that compromised the data of tens of thousands of clients and millions (..)

Ransomware 279

Ransomware Security 279

Data Breach Today

APRIL 24, 2020

It's the second-largest health data breach posted to the federal health data breach tally so far in 2020. Second Largest Health Data Breach So Far This Year A California-based genetic testing laboratory has reported an email hacking incident that may have exposed medical information on nearly 233,000 individuals.

Data breaches 360

Data breaches IT 360

Data Breach Today

JANUARY 21, 2021

Increasing Ransomware Varieties and Attack Volume Look Set to Continue, Experts Warn Ransomware dominated the cybercrime landscape in 2020 and looks set to do so again this year, as criminals seek fresh new ways to make victims pay. Experts predict gangs will double down on whatever works, which lately includes data exfiltration.

Ransomware 359

Ransomware 359

Data Breach Today

FEBRUARY 10, 2021

billion in 2020, up 70% from the previous year, and exports of products and services increased as well, according to the Israel National Cyber Directorate. Exports Also Continue to Grow Pre-IPO investments in Israeli cybersecurity firms totaled $2.9 Security experts offer insights on the reasons behind the growth.

Cybersecurity 341

Cybersecurity Security 341

Data Breach Today

MARCH 28, 2024

Also: Hackers Target Apple Password Reset Flaw This week, Russian organizations are losing Microsoft Cloud, hackers targeted an Apple flaw, Germany warned of critical flaws in Microsoft Exchange, an info stealer targeted Indian government agencies and the energy sector, and Finland confirmed APT31's role in a 2020 breach of Parliament.

Cloud 310

Cloud Passwords Government 310

Krebs on Security

FEBRUARY 26, 2023

But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved.

Phishing 309

Phishing Passwords Authentication Security 309

Data Breach Today

JANUARY 29, 2024

Russian intelligence hacked the company in an incident disclosed in 2020.

Cybersecurity 297

Cybersecurity Security IT 297

Data Breach Today

JULY 29, 2021

says its clients' average claims for losses when they were hit by a ransomware attack totaled $184,000 in the first half of this year, down 45% compared to the second half of 2020. Key Factors: Negotiating Lower Ransoms, Improving Recovery Cyber insurance provider Coalition Inc.

Insurance 331

Insurance Ransomware IT 331

Data Breach Today

SEPTEMBER 30, 2021

million of its online customers who are affected by a data breach that occurred in May 2020. Exposed Data Includes Login Credentials, Security Questions Neiman Marcus Group says it is notifying 4.6 The data includes personally identifiable data, payment and gift cards, online account credentials and security questions.

Data breaches 326

Data breaches Security IT 326

Data Breach Today

MAY 1, 2021

Agency Warns Attackers Could Use IT Exploits to Pivot to OT Systems The NSA is offering operational technology security guidance for the Defense Department as well as third-party military contractors and firms in the wake of the attack that targeted SolarWinds in 2020.

Military 331

Military Security IT 331

Data Breach Today

APRIL 2, 2021

Company Called Out by Whistleblower for Attack Response Internet of things vendor Ubiquiti revealed in a security notice that an attacker had attempted to extort money from the company following a December 2020 cyber incident - a fact not mentioned in the company's earlier notice about the attack.

Security 323

Security 323

Data Breach Today

FEBRUARY 8, 2024

Authorities Hacked the End-to-End Encryption Platform in 2020 The Dominican Republic earlier this month extradited to France a suspected administrator of now-defunct encrypted messaging service EncroChat.

Encryption 297

Encryption IT 297

Data Breach Today

SEPTEMBER 7, 2020

Cosmic Lynx the First Russian Gang to Enter the BEC Game The average amount stolen in a business email compromise (BEC) scam increased 48% during the second quarter of 2020, however, this transpired as the number of attacks decreased during that period, reports the Anti-Phishing Working Group.

Phishing 321

Phishing 321

Data Breach Today

APRIL 27, 2022

80 Zero-Day Vulnerabilities - a Record Number - Were Exploited in the Wild in 2021 The median number of days an attacker dwells in a system before detection fell from 24 days in 2020 to 21 days in 2021, according to a Mandiant report.

IT 277

IT 277

Data Breach Today

JANUARY 21, 2021

Increasing Ransomware Varieties and Attack Volume Look Set to Continue, Experts Warn Ransomware dominated the cybercrime landscape in 2020 and looks set to do so again this year, as criminals seek fresh new ways to make victims pay. Experts predict gangs will double down on whatever works, which lately includes data exfiltration.

Ransomware 320

Ransomware 320

Data Breach Today

AUGUST 1, 2021

throughout 2020, according to an update posted by the Justice Department. DOJ: Russian-Linked Group Breached Office 365 Accounts in 27 Offices The Russian-linked group that targeted SolarWinds using a supply chain attack compromised at least one email account at 27 U.S. Attorneys' Offices in 15 states and Washington D.C.

Access 317

Access 317

Data Breach Today

DECEMBER 10, 2020

Hunters Could Become the Hunted After Theft of Cybersecurity Firm's Hacking Tools Because 2020 wasn't already exciting enough, now we have to worry about being hunted by adversaries wielding FireEye's penetration testing tools, thanks to the company having suffered a big, bad breach.

Cybersecurity 317

Cybersecurity 317

Data Breach Today

FEBRUARY 12, 2021

Nebraska Medicine/UNMC Now Contacting Patients Impacted by September 2020 Breach Nebraska Medicine/UNMC has just begun notifying 219,000 individuals of a hacking incident that was discovered last September.

Security 311

Security 311