Data Security

Cybersecurity
California Student Records Exposed in ETS SFTP Breach
Attackers used a compromised credential to sit inside an ETS SFTP site for nearly five months, exposing records of California public school students statewide.
Cybersecurity
Frontier Pays $625,000 to Connecticut Over 2024 Data Breach
Frontier Communications settled with Connecticut's attorney general for $625,000 over a 2024 breach that exposed Social Security numbers of 58,841 residents.
Cybersecurity
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
Rhysida is offering 2.6TB of data it says came from Anne Arundel County, Maryland, for 25 BTC; the county confirms an August 28 attack on ...
Cybersecurity
ICO Reprimands Met Police Over Unvetted Use of Auror Platform
The UK ICO reprimanded the Metropolitan Police and issued an enforcement notice after officers used the Auror retail crime platform without data checks.
Cybersecurity
Unsecured Database Holds 13.7M Breach Records Tied to Vibetech
Researcher Jeremiah Fowler found an unsecured database of 13.7 million records tied to AT&T, Amazon, Walmart and PayPal, linked to India-based Vibetech.
Cybersecurity
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
Meta is notifying about 1,500 people after hackers used an employee's stolen credentials to take product code and a small amount of personal data from ...
Cybersecurity
ShinyHunters Claims H&M Database Breach; Retailer Sees No Compromise
ShinyHunters claims it accessed H&M internal databases covering inventory and logistics; H&M says it is investigating and sees no sign of compromise yet.
Cybersecurity
UK Housing Ombudsman Probes Third-Party Incident, Pauses Complaints
The UK Housing Ombudsman Service is investigating a third-party security incident at its case management system and has blocked new online complaints.
Cybersecurity
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
Cybersecurity
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...