This Week In Cybersecurity: April 1st to 5th, 2025

This week in cybersecurity covers a range of incidents, including the shutdown of openSNP over privacy concerns, a data breach affecting 173,000 patients, and a significant breach at SimonMed Imaging.
Table of Contents
    Add a header to begin generating the table of contents

    openSNP to Shut Down: Genetic Data Privacy Concerns Lead to Platform Closure

    openSNP, a genetic data sharing platform, will cease operations and delete all user data by April 30, 2025, due to escalating privacy concerns and the risk of misuse by governments. Co-founder Bastian Greshake Tzovaras emphasized that the ethical landscape surrounding genetic data has shifted, making the closure a responsible decision. Users can download their data until the shutdown date. Read more

    173,000 Patients Affected by Chord Specialty Dental Partners Email Data Breach

    Chord Specialty Dental Partners reported a data breach affecting 173,430 patients, exposing personal and health information. The breach occurred through employee email accounts and prompted the organization to offer free credit monitoring. Investigations are ongoing, and the company has strengthened its security measures in response. Read more

    SimonMed Imaging Confirms Cybersecurity Breach in January 2025

    SimonMed Imaging confirmed a cybersecurity breach that exposed sensitive patient data through a vendor. The breach, detected on January 27, 2025, involved unauthorized access and has led to at least one class-action lawsuit. The Medusa ransomware group claimed responsibility, alleging that 212 GB of data had been compromised. Read more

    Urgent Security Alert: Exploited CSLU Backdoor Threatens Cisco Systems

    Cisco issued a critical security alert regarding a vulnerability in its Smart Licensing Utility (CSLU), which has been exploited by attackers to gain unauthorized access. The vulnerability allows remote control of the CSLU application’s API. Cisco advises immediate patching to prevent potential attacks. Read more

    Triada Malware Preloaded on Counterfeit Android Devices

    Counterfeit Android devices have been found to contain Triada malware preinstalled, affecting users primarily in Russia. This malware can steal data and cryptocurrency by manipulating device settings and intercepting communications. Kaspersky researchers identified at least 2,600 infections, highlighting the risks of purchasing from unauthorized sellers. Read more

    Royal Mail Data Breach: No Operational Impact Reported

    Royal Mail is investigating a data breach involving third-party supplier Spectos GmbH, which leaked over 144GB of customer data, including personally identifiable information. Despite the breach, Royal Mail operations remain unaffected. The incident raises concerns about data security in third-party relationships. Read more


    Related Posts