TECHNOLOGY · AI · CYBERSECURITY · THE SYSTEMS SHAPING BUSINESSPage 2 of 4: earlier stories.
Customer names and contact details on third-party platforms were exposed, the retailer said, but it has not disclosed how many people were affected or whether data was taken.
A year of internal messages describes Telegram job ads, forged IDs and flash-drive thefts aimed at about 50 organizations, most of them law firms.
Prosecutors say the Florida recovery firm sold its own decryption technology while buying keys from attackers, billing clients more than twice what it paid out.
Zhang Yu remains at large while co-defendant Xu Zewei, arrested in Milan last year, faces charges in the United States after his April extradition.
Names, contact details and partial Social Security numbers were exposed, but the utility has not said how the attacker got in or when it noticed.
Sources told Krebs on Security the stolen data could pose operational safety risks; the company says its investigation so far found no impact on operations or products.
A Seoul law firm is recruiting plaintiffs, while police say many of the 28 IP addresses tied to the attacks were relays used to hide the hackers' location.
Google blocked the accounts while responding to what it called an external attack, and South Korea's education minister has promised a nationwide check.
Nearly 30,000 protection orders and 150,000 foster care review reports were also taken from a backup server before staff shut the intrusion down.
The new crew says an infostealer on a partner employee's machine opened the door, and one listed buyer says a $100 phone deposit never produced a device.
Classes are canceled through Thursday, and records on at least 130,000 students, staff and others may have been exposed, according to The Record.
The bureau's first account of the root cause points to an unpatched third-party platform, which Reuters sources identify as Oracle PeopleSoft run by Accenture.
The alert, addressed to the retailer's data protection officer, reached customers' phones; ASOS has not said whether any data was taken or how the message was sent.
Regulators issued a consumer fraud alert as the count of exposed records grew, and Woori Bank and NH NongHyup Bank were reportedly targeted as well.
The privacy regulator found that swapping names for codes did not anonymize a database of about 1 million patient records drawn from 800 Italian family doctors.
A Russian-speaking group called DataSuckers put a ransom note and countdown on the chain's website and says it will sell the data, while ATB insists customer information is safe.
Names, addresses and lifelong CPR numbers for most people ever registered in Denmark were taken, in what may be the country’s largest breach.
A social engineering attack on a New Jersey insurer and a ransomware claim against a Texas back-office firm landed on the federal breach portal in the same week.
Regulators ordered lenders to cut external access to nonessential systems after finding the same IP address at all seven firms, including Yegaram Savings Bank.
Reuters sources say the suspect, named as Saif al-Din Khader, has handed over devices and messages, while Jordanian state media confirmed an arrest Saturday.
An intruder used stolen credentials to reach DTU's identity system, which holds records back to 2003, and downloaded data including Danish CPR numbers and next-of-kin contacts.
The K-12 software vendor traced the intrusion to a flaw in an unnamed third-party product and has not said how many employees across its districts are affected.
The company stresses that a notice does not mean data was taken, but it has not named the recipients, and forensic researchers say some records of the activity were erased.
The city of more than 20,000 has promised no shutoffs or late fees while the FBI and DHS investigate whether resident and employee data was taken.