In T-Mobile related news this week, a faulty update exposed customer data, and T-Mobile authorized retailer Connectivity Source suffered a data breach. Faulty update mix-up The faulty T-Mobile update resulted in customers seeing other users’ sensitive data when logged in to their T-Mobile accounts. According to The Verge, who first broke the story on Wednesday, …
T-Mobile Glitch Exposes Data, Plus Retailer Breached Read More »
Ransomware gang 8Base declared yesterday in an X (formerly Twitter) post that “hospitals, non-profit organizations, social funds, and schools” were “NO LONGER of interest” to the criminal group. Instead, the gang claimed it would “leave NOTES with safety recommendations” if it accessed such organizations, presumably to help them beef up their cyber defenses. The gang’s …
According to data from eCrime.ch, 390 organizations were listed on ransomware leak sites in August. This is approximately an 18% decrease from July, which saw 478 organizations listed. The top five most targeted sectors in August were law (21), IT (18), construction (15), education (12), and government (11). 125 of the victim organizations, 32% of …
On Wednesday, ransomware gang Cl0p began leaking the data it stole from Pension Benefits Information (PBI). The stolen data contains personal information, including SSNs, of customers of insurance and pension companies that work with PBI. Cl0p’s publication of this data puts these customers at risk of identity theft. So far, California Public Employees’ Retirement System …
Raivo OTP is a popular free and open source authenticator app for iOS that is well-respected in the privacy community. However, in a surprise announcement on Monday, Raivo declared it had been acquired by a little known app development company called Mobime. While Raivo’s announcement claimed “nothing will change for you, except for more support …
After adding a Massachusetts school district to their dark web leak site last Wednesday, the Royal ransomware gang appears to have had a change of heart. In a lengthy statement shared by security researcher Dominic Alvieri on Twitter, the gang claimed they were no longer planning to release the stolen data and had instead deleted …
According to security researcher Dominic Alvieri, notorious ransomware gang BlackCat allegedly breached an Alabama based mental health provider. Safe Not Scammed is not naming the facility so it can focus on securing its systems and protecting its patients. The breach BlackCat claims to have stolen “patient logs, patient mental illness records, SSNs, DLs, [and] Employees …
The fallout from ransomware gang Cl0p’s massive, worldwide attack continues to grow. Police departments, state and federal agencies, and numerous companies are among the known victims. Recap Cl0p stole data from hundreds of organizations by exploiting a vulnerability in popular file transfer software MOVEit at the end of May. The cybercriminals then told organizations to …
Yesterday, ransomware gang Cl0p began listing organizations affected by its exploit of file transfer software MOVEit. The gang used the exploit to steal data from potentially hundreds of companies around the world at the end of May. The gang had previously instructed affected companies to begin negotiations by June 14th to avoid being named and …
On Friday, the State of Illinois and the Minnesota Department of Education both revealed they were victims of the Cl0p ransomware gang. Cl0p exploited a vulnerability in file transfer software MOVEit at the end of May, breaching up to hundreds of organizations worldwide. Minnesota Department of Education The Minnesota Department of Education (MDE) reported that …
Ransomware gang Cl0p has exploited a vulnerability in file transfer software MOVEit to compromise companies around the world. Security researcher Kevin Beaumont estimates “there are over one hundred” organizations affected by the attack, with British Airways, the BBC and Boots already confirmed as victims. Cl0p posted a message to companies who use MOVEit on their …
