LVHN Pays $800K Over Ransomware Leak of Cancer Patients’ Photos
HHS OCR settled with Lehigh Valley Health Network for $800,000 over the 2023 BlackCat ransomware attack that leaked 248,359 patients' data, including cancer patients' treatment photos.
Data Breaches
Confirmed and claimed data breaches: who was hit, what was taken, how many people are affected and what to do if your data is in it.
HighBleepingComputer
Northflank Breach: Assume Every Secret Is Stolen, Rotate Now
Northflank tells customers to assume all environment variables were decrypted after a breach Wiz flagged on Oct. 30; users report their stored AI API keys being abused.
HighChainalysis
Chainalysis Breached by Attacker Using AI Agents, Firm Says
Chainalysis says an outside attacker using "offensive agentic techniques" reached its internal tools and user names, emails and role labels, but no investigation data so far.
HighThe Record
Florida Financial Aid Breach Spills SSNs of 4.9 Million Applicants
Florida's Department of Education says a breach of its Student Financial Aid website exposed names, birth dates and Social Security numbers of about 4.9 million aid applicants.
Hacker Trades in Victims’ Accounts, Then Tries to Extort GMO
GMO Internet says an attacker who breached Onamae.com Desktop Cloud used stolen logins to trade in customers' brokerage accounts and is now demanding money. GMO won't pay.
MediumBleepingComputer
ENGIE Customer Data Stolen Through a Partner’s Sales Tool
ENGIE says attackers stole French customers' contact details and contract and meter numbers from a partner marketing platform; no banking data, and its own systems weren't hit.
HighBleepingComputer
Sony’s So-net Breach Spills 2.6 Million ISP Customer Records
Sony Network Communications says an Oct. 19 intrusion exposed 2.59 million So-net and Docomo Hikari customer records, plus 54,401 email addresses with passwords. No card data was taken.
Brazilian Skimmers Rode an Analytics Script Into Dozens of Checkouts
Sansec says a Brazilian Magecart group planted a card skimmer in the Plausible analytics script every Convertr store loads, exposing checkouts at dozens of fashion brands Oct. 24 to 27.
Leaked Chats Show Silent Ransom Group Squeezing Law Firms by Phone
Ransom-ISAC's analysis of leaked Silent Ransom Group files shows callback-phishing extortion of mostly US law firms via AnyDesk, with at least $43.95 million confirmed received.
Quest Diagnostics Breach Hits Its Lab Ordering Platform
Quest Diagnostics says an intruder reached patient records through its Quanum Lab Services Manager platform. It hasn't said how many people are affected.
HighCBC News
Loblaw Says Its March Breach Hit 2 Million Shoppers
Loblaw's CEO has apologized to about two million customers whose names, addresses, birthdates and purchase details were taken in a February breach, and is offering two years of TransUnion monitoring.
MediumHoodline
A Bayview Staffer Pasted 3,182 Patients’ Records Into an AI Chatbot
Johns Hopkins Bayview is notifying 3,182 patients after an employee uploaded a spreadsheet of their records, including medications and record numbers, to an unapproved public AI tool.
A Stolen ConnectWise Credential Walked Into 173 Microsoft 365 Tenants
An attacker used ConnectWise Cloud Backup's own app credential to sign in to 173 partner and customer Microsoft 365 tenants, per Huntress. ConnectWise has taken the service offline and disabled seven app identities.