Data Breach Today

JULY 6, 2021

based British Airways have each agreed to settle class action lawsuits filed in the wake of two massive data breaches. Class Actions Filed Against Each Company After Hacking Incidents U.S.-based based pharmacy and supermarket chain Kroger and U.K.-based

Data breaches 345

Data breaches 345

Data Breach Today

SEPTEMBER 30, 2021

Exposed Data Includes Login Credentials, Security Questions Neiman Marcus Group says it is notifying 4.6 million of its online customers who are affected by a data breach that occurred in May 2020. The data includes personally identifiable data, payment and gift cards, online account credentials and security questions.

Data breaches 326

Data breaches Security IT 326

Data Breach Today

JANUARY 25, 2024

The Security of Our Customers' Data Is Our Top Priority' - Really? Does a day ever go by without a fresh set of data breach notifications? Some organizations' breach notifications at least signal respect for the recipient.

Data breaches 291

Data breaches Marketing Security IT 291

Data Breach Today

APRIL 24, 2023

Lee Shares 2023 Q1 Data Breach Report Highlights According to findings from the Identity Theft Resource Center's 2023 Q1 Data Breach Report, the number of publicly reported data compromises decreased, but the number of data breaches with no actionable information about the root cause of the compromise grew.

Data breaches 312

Data breaches 312

Data Breach Today

OCTOBER 9, 2024

Hotel Chain Also Settles with Federal Trade Commission The world's largest hotel chain agreed Wednesday to pay $52 million and agree to two decades of third-party monitoring of its cybersecurity program to settle a rash of data breaches affecting millions of guests. The multi-million payout is part of a settlement reached with 50 U.S.

Data breaches 303

Data breaches Cybersecurity IT 303

Data Breach Today

MAY 27, 2024

Class Action Law Firms Seek Access to Commissioned Deloitte Report Into Mega-Breach The Federal Court of Australia has rejected a request from telecommunications giant Optus to keep private a detailed digital forensic investigation report conducted by Deloitte into the massive data breach it suffered in 2022, exposing private information pertaining (..)

Data breaches 296

Data breaches Access IT 296

Data Breach Today

MAY 11, 2023

Also: Twitter Hacker Pleads Guilty, Seoul National University Hospital and Sysco In this week's data breach, the spotlight was on Dragos, a guilty plea from a Twitter hacker and cryptocurrency thief and North Korean hackers. Also, Sysco, a Ukrainian border truck queuing system and an update on Western Digital.

Data breaches 304

Data breaches Encryption 304

Data Breach Today

MAY 24, 2024

Telecom Company Also Faces OAIC Investigation and Potentially Millions in Fines The Australian Communications and Media Authority says it has filed proceedings against Optus in a federal court as the company failed to protect sensitive customer data during a data breach in September 2022.

Data breaches 278

Data breaches Communications IT 278

Data Breach Today

NOVEMBER 21, 2023

Hacktivists Leak Sensitive Employee Information From Idaho National Laboratory The hacktivist group SiegedSec has taken responsibility for a massive data breach targeting Idaho National Laboratory, a leading nuclear energy testing lab.

Data breaches 296

Data breaches Access IT 296

Data Breach Today

OCTOBER 31, 2023

Massachusetts Management Firm to Pay $100,000, Monitor HIPAA Compliance for 3 Years A Massachusetts-based medical management firm holds the dubious honor of being the first ransomware victim fined for a data breach by the Department of Health and Human Services.

Data breaches 305

Data breaches Ransomware Compliance 305

Data Breach Today

OCTOBER 27, 2023

Non-Banking Institutions Will Be Required to Report Breaches Under Revised Rule. Consumer lenders such as mortgage brokers, auto dealers and payday lenders must soon report data breaches to the Federal Trade Commission under a revised regulation that mandates public disclosure.

Data breaches 275

Data breaches 275

Data Breach Today

DECEMBER 13, 2023

New FCC Disclosure Rules Cover All Personal Information of Telecom Customers The FCC approved new guidelines that note how data breaches "have only grown in frequency and severity" since the commission adopted its privacy protection policies 16 years ago.

Data breaches 291

Data breaches Privacy Security IT 291

Data Breach Today

FEBRUARY 1, 2024

health data breaches - with 112.5 Will 2024 be another banner year for health data compromises? What Will 2024 Be Like If the Healthcare Sector Doesn't Step Up? Thanks to the massive Anthem hack, for nearly a decade 2015 has been the record year for U.S. million people affected. But 2023 shattered that record, big-time.

Data breaches 271

Data breaches 271

Data Breach Today

SEPTEMBER 5, 2023

Information Commissioner Urges Organizations to Accelerate Breach Notifications Australia's information commissioner has urged organifzations to quicken the process of notifying those affected by data breaches instead of spending months analyzing each incident.

Data breaches 275

Data breaches Risk IT 275

Data Breach Today

JULY 7, 2023

Latest Hacking, Vendor Incident Trends Emerging From the Federal Tally Hacking incidents, including those involving ransomware attacks or vendors, that affect tens of millions of individuals, continue to account for the majority of health data breaches reported to federal regulators so far this year.

Data breaches 264

Data breaches Ransomware 264

Data Breach Today

OCTOBER 13, 2023

Fine Imposed for Failing to Protect UK Customer Data and Misleading Britons A British financial regulator fined American credit reporting agency Equifax 11 billion pounds for its role in one of the world's largest data breaches.

Data breaches 285

Data breaches Military IT 285

Data Breach Today

JUNE 6, 2023

Report's Lead Author Shares Top Findings, Best Practices Pretexting incidents, a social engineering technique that manipulates victims into divulging information, have nearly doubled, representing 50% of all social engineering attacks, according to Verizon's 2023 Data Breach Investigations Report, which analyzed more than 16,312 security incidents. (..)

Data breaches 258

Data breaches Security 258

Data Breach Today

MAY 11, 2023

Beyond $25M in Estimated Cleanup Costs, The Game Remains Afoot for Victim Details In the annals of attempting to downplay the impact of a data breach, here's a new one: British outsourcing giant Capita says the hackers who hit it - steling data pertaining to customers, suppliers and employees - accessed "less than 0.1%

Data breaches 254

Data breaches Cleanup Access IT 254

Data Breach Today

AUGUST 23, 2023

More Hacks Compromising Protected Health Info Being Reported to Regulators The tally of entities notifying federal regulators about mega health data breaches involving Clop cybercrime group hacks on Progress Software's MOVEit file transfer application keeps growing, and millions of additional individuals have been affected.

Data breaches 242

Data breaches 242

Krebs on Security

AUGUST 16, 2022

That same month, they also sold data on 1.4 But this history was either overlooked or ignored by Group-IB , the Singapore-based cybersecurity firm apparently hired by Banorte to help respond to the data breach. “We ask you to remove this post containing Banorte data.

Data breaches 302

Data breaches Sales Marketing Cybersecurity 302

Data Breach Today

AUGUST 28, 2023

Scotland Yard Probes Impact of Suspected Hack Attack Against Service Provider London's Metropolitan Police Service is investigating a serious data breach that may have exposed names, ranks and photographs for potentially all 47,000 personnel, after someone gained access "unauthorized access to the IT system" of one of its suppliers.

Data breaches 246

Data breaches Risk Access IT 246

Krebs on Security

AUGUST 16, 2021

Communications giant T-Mobile said today it is investigating the extent of a breach that hackers claim has exposed sensitive personal data on 100 million T-Mobile USA customers, in many cases including the name, Social Security number, address, date of birth, phone number, security PINs and details that uniquely identify each customer’s mobile (..)

Data breaches 348

Data breaches Access Retail Personal data 348

Data Breach Today

AUGUST 22, 2023

Whistleblower Leaks Included Information on 75,735 Current and Former Employees Tesla says it is suing two former employees for perpetrating a May data breach that exposed personal information for 75,735 current and former employees.

Data breaches 245

Data breaches IT 245

Data Breach Today

JULY 25, 2023

Healthcare Sector Spends Most on Cleanup, IBM's Annual Breach Study Finds A new IBM study of data breaches found that if an organization's internal team first detects a breach and the organization has well-practiced incident response plans, that organization will be able to more quickly detect and respond, which will lead to lower breach cleanup costs. (..)

Data breaches 244

Data breaches Cleanup 244

Data Breach Today

AUGUST 9, 2023

Current PSNI Employees' Surnames and Locations Revealed Via Public Spreadsheet Police officers in Northern Ireland are sounding alarms over their personal safety after a data breach revealed the surnames and locations where they serve for nearly 10,000 police officers and staff.

Data breaches 243

Data breaches Risk 243

Data Breach Today

MAY 22, 2023

Several Proposed Class Actions Filed Against NationsBenefits, Aetna, Others Proposed class action lawsuits are piling up over hackers' use of a vulnerability in Fortra's GoAnywhere secure file transfer and a resulting data breach affecting 3 million individuals.

Data breaches 235

Data breaches Access Security 235

Data Breach Today

SEPTEMBER 26, 2023

Two Online Threat Actors Claim Responsibility Sony is investigating an apparent leak of internal data posted onto the dark web and a criminal hacking board by separate criminal actors. Sony is saying little other than "we are currently investigating the situation, and we have no further comment at this time."

Data breaches 306

Data breaches 306

Data Breach Today

OCTOBER 8, 2021

US Breach Notification Transparency Declining, Identity Theft Resource Center Warns The number of breach reports filed by U.S. organizations looks set to break records, as breaches tied to phishing, ransomware and supply chain attacks keep surging, the Identity Theft Resource Center warns.

Data breaches 361

Data breaches Phishing Ransomware IT 361

Data Breach Today

OCTOBER 10, 2024

Nonprofit Digital Archive Also Suffers Denial-of-Service Attacks, Defacement The nonprofit Internet Archive has been hit by hackers, who stole usernames and for 31 million accounts, including email addresses and bcrypt-hashed passwords. In recent days, the digital archive has also suffered defacement and repeat denial-of-service attacks.

Archiving 306

Archiving Data breaches Passwords 306

Data Breach Today

MARCH 5, 2024

Experts Offer Tips for Ironing Out Common Kinks in Incident Response The healthcare sector should have plenty of experience responding to data security incidents and breaches, especially in light of the record number of breaches reported last year. But when leaders are dealing with an incident, response plans can go awry.

Data breaches 299

Data breaches Security 299

Data Breach Today

JUNE 21, 2024

Hackers Exploited Coding Error, Says Australian Communications and Media Authority Hackers behind the leak of 10 million records from Australia's second-largest telecommunications carrier Optus exploited a vulnerability the company unwittingly inserted four years earlier into a web portal access control, said the Australian Communications and Media (..)

Data breaches 290

Data breaches Communications Access 290

Data Breach Today

OCTOBER 8, 2024

Stolen Data Includes Social Security Numbers and Details of Criminal Investigations MoneyGram Payment Systems, a Dallas-based money transfer system, said hackers who hit its infrastructure last month stole customer data, including contact details, Social Security numbers and information pertaining to criminal fraud investigations.

Data breaches 290

Data breaches Security IT 290

Data Breach Today

MAY 17, 2024

Covered Financial Institutions Have 30 Days to Notify Customers of Data Breaches The Securities and Exchange Commission unanimously approved updated regulations for covered financial institutions requiring entities such as fund companies and investment advisers to notify customers within 30 days of a cyber incident that compromised their data.

Data breaches 189

Data breaches Security 189