Tag:

Data Breach

Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns
Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns A cybercriminal group known for extorting people and companies across the world is now targeting the airline industry. The FBI has issued a warning about Scattered Spider, a hacking group that has  expanded its operations to include major US airlines and their vendors.  The group is known for using convincing impersonation tactics to access corporate networks, often bypassing multi-factor authentication by tricking IT staff into adding unauthorized devices. Scattered Spider impersonates employees or contractors to deceive help desks. "These techniques frequently involve methods …
Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack
Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack A newly discovered trove of stolen login credentials may represent the largest data breach in history, with billions of usernames and passwords now circulating online. Researchers with Cybernews uncovered more than 16 billion records spread across 30 databases, many of them tied to malware known as infostealers. The findings, published Wednesday, June 18, reveal that the leaked data spans social media platforms, business services, VPNs, and developer tools. The leaked datasets provide access to nearly every online service, including major platforms like Apple, Facebook, Google, GitHub, and…
Data Breach Exposed 57K Cooper Health Care Patients' Info, Lawsuits Say Data Breach Exposed 57K Cooper Health Care Patients' Info, Lawsuits Say
Data Breach Exposed 57K Cooper Health Care Patients' Info, Lawsuits Say Cooper Health System is facing a wave of legal woes after revealing a data breach that may have exposed the personal and medical information of more than 57,000 people, according to legal filings and the health care system itself. Two lawsuits, one in federal court and one in New Jersey Superior Court, were filed this week by patients who say the breach was the result of Cooper's “negligence” and “failure to protect sensitive data.” According to a notice posted by Cooper on May 23, the hospital learned that an unauthorized actor had accessed private data on or around May 14, 2024. Coop…
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Most online users say they're worried about data breaches, but still skip basic ways to improve their cybersecurity, according to a new survey. The Acronis Data Privacy in 2025 Survey polled nearly 2,500 adults in the US and seven other countries, finding that many aren't doing enough to protect their personal data. The Swiss tech company found that while 64% of respondents listed data breaches as their top online privacy concern, only one-third back up their data daily or weekly. Fewer than half (46%) said they use security features like two-factor authentication. "Perhaps …
Massive Data Breach Exposes 184 Million Accounts: What To Know Massive Data Breach Exposes 184 Million Accounts: What To Know
Massive Data Breach Exposes 184 Million Accounts: What To Know A cybersecurity researcher has uncovered a massive trove of compromised login credentials, raising new alarms about the scope and scale of InfoStealer malware campaigns. The exposed Elasticsearch database contained more than 184 million unique usernames and passwords. It was not password-protected or encrypted, and it was publicly accessible when discovered earlier this month. The database included login details tied to popular platforms such as Microsoft, Facebook, Instagram, and Snapchat.  It also contained services with potentially greater stakes, including banking portals, health …
Westchester-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data Westchester-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data
Westchester-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data Regeneron Pharmaceuticals will acquire embattled DNA testing company 23andMe in a $256 million court-supervised sale, promising to honor existing privacy protections and continue consumer services with no changes. The agreement to buy 23andMe was announced in a news release on Monday, May 19. It comes two months after 23andMe filed for Chapter 11 bankruptcy. Under the deal, Westchester County, New York-based Regeneron will take over 23andMe's personal genome service, total health, and research services. The telehealth brand Lemonaid Health will be shut down and Regeneron has offered to…
Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers
Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers Customers of car rental company Hertz may have had their personal information stolen after a data breach exposed driver's license numbers, credit card details, and other sensitive records. Hertz confirmed the breach involved data stored by Cleo Communications, a vendor used by Hertz for file transfers. Hackers exploited security flaws in Cleo's system in October and December 2024, according to the company. Hertz verified on Monday, Feb. 10, that an "unauthorized third party" accessed customer data. The company completed its investigation on Wednesday, April 2, and began notifying affec…
$3.25M USAA Data Breach Settlement: Here's How To Learn If You Could Get Payout $3.25M USAA Data Breach Settlement: Here's How To Learn If You Could Get Payout
$3.25M Usaa Data Breach Settlement: Here's How To Learn If You Could Get Payout Those affected by a major data breach could get a part of a  settlement worth $3.25 million. If your personal information was compromised, you may be eligible for a payout, but you need to act fast to secure your claim before the deadline. The United Services Automobile Association (USAA), a financial services company dedicated to serving military members, veterans, and their families, has agreed to the nationwide class action lawsuit settlement.  This follows allegations that the company failed to adequately protect personal information during a data breach that occurred in May …
Brazilian Man Tried To Extort NJ Company For 3 Mil In Bitcoin Using Stolen Data: Feds Brazilian Man Tried To Extort NJ Company For 3 Mil In Bitcoin Using Stolen Data: Feds
Brazilian Man Tried To Extort NJ Company For 3 Mil In Bitcoin Using Stolen Data: Feds A 29-year-old Brazilian man was arrested and charged on Monday, Dec. 23 with threatening to extort a New Jersey company using stolen data, authorities said. In March 2020, Junior Barros De Oliveira gained unauthorized access and exceeded authorized access to the computer systems of an unnamed Brazilian subsidiary of a New Jersey company, US Attorney Phillip Sellinger said. Exploiting this access, De Oliveira obtained confidential customer information relating to approximately 300,000 customers of the company, Sellinger said. In September 2020, De Oliveira began contacting U.S. representativ…
Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System
Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System Hackers have found a hole in Krispy Kreme's online ordering system, leaving some customers temporarily unable to place digital orders for their favorite donuts.  The company has confirmed the incident and stated that its technical team is actively working to resolve the issue. Krispy Kreme reported that the breach influenced its web-based platforms but did not affect in-store operations or the safety of customers' personal data.  The attack was first discovered at the end of November, the company said in a filing with Securities Exchange Commission (SEC). Krispy Kreme said it "i…
Cyber Attack May Have Compromised Social Security Numbers Of NJ Students, District Says Cyber Attack May Have Compromised Social Security Numbers Of NJ Students, District Says
Cyber Attack May Have Compromised Social Security Numbers Of NJ Students, District Says The personal information of some New Jersey high schoolers may have been compromised in a 2023 cyber attack, district officials said. In a statement posted to its website, Shore Regional High School officials said the school experienced "unauthorized access to our network" on or about April 13, 2023. The information potentially impacted by this incident is full name, date of birth, Social Security number, employee ID, driver’s license or state identification, financial information, medical treatment or diagnosis, medical and/or health insurance information, and/or non-directory&nb…
Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says
Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says Personal information of millions of AT&T customers was posted to the dark web in a major data breach announced by the telecom company Saturday, March 30. The data set appears to be from 2019 or earlier, impacting approximately 73 million current AT&T account holders and approximately 65.4 million former account holders, the company said. "With respect to the balance of the data set, which includes personal information such as social security numbers, the source of the data is still being assessed," AT&T said. "Currently, AT&T does not have evidence of unauthorized acce…
NJ Addiction Centers Victim Of Data Breach NJ Addiction Centers Victim Of Data Breach
NJ Addiction Centers Victim Of Data Breach Addition centers in five locations have suffered a data breach that may compromise patients' private information, officials said. Maryville, a nonprofit addition agency, is offering credit monitoring services for those who may have had their Social Security numbers and other private details exposed as a result of the incident, according to spokesman Bill Crowe. The centers affected are in Williamstown, Turnersville, Pemberton, Vineland and Franklinville. "We have no indication that any information has been misused for identity theft," the agency said. On or around August 22, 2023, Maryvil…
Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft
Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft Millions of New Yorkers are being warned by Attorney General Leticia James to protect themselves against identity theft following a data breach at a medical transcription company.  The warning, issued by James on Tuesday, Nov. 28, urges New York residents to take action to prevent their identities from being stolen in the midst of a data breach at medical transcription company Perry Johnson & Associates.  The Nevada-based company, which provides transcription services to healthcare organizations and physicians to help them dictate and transcribe patient notes, first becam…
Possible Data Breach Puts NJ Hospital Patients At Risk Possible Data Breach Puts NJ Hospital Patients At Risk
Possible Data Breach Puts NJ Hospital Patients At Risk A hospital in South Jersey is warning patients that it may have suffered a serious data breach. Jefferson Cherry Hill Hospital mailed letters last week to patients “whose information may have been involved in a recent privacy incident,” the health system said in a press statement. A worker conducting maintenance discovered on June 15 that "a portable backup device was missing," Jefferson Health said. “Through this process, Jefferson has determined that the protected health information found on this drive that may be viewable could include names, dates of birth, medical record numbers, the …
Data Breach Reported At Mount Pleasant Central School District Data Breach Reported At Mount Pleasant Central School District
Data Breach Reported At Mount Pleasant Central School District A data breach may have exposed information related to some students at a school district in Northern Westchester.  The breach was announced by Mount Pleasant Central School District Superintendent Peter Giarrizzo on Friday, Feb. 17, who said that several student email passwords may have been compromised by the incident.  After the data breach was discovered on Friday, an investigation into the matter found that several passwords belonging to Grade 7 students in the district had been posted to a shared Google Classroom during the 2020-2021 school year. After this document was …
Data Breach Leaks Social Security Numbers In Central Jersey School District Data Breach Leaks Social Security Numbers In Central Jersey School District
Data Breach Leaks Social Security Numbers In Central Jersey School District A school district in Somerset County announced a serious data breach in its computer system Bridgewater-Raritan Regional School District (BRRSD) said an unauthorized user accessed school employees' Social Security numbers between Dec. 10 and Dec. 12, according to this statement.  The district didn’t say how many people were affected by the computer breach. In addition to Social Security numbers, the hacker gained access to insurance enrollment information for employees s and unspecified “other individuals,” the district said. The school district said it sent letters to the affected e…
Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says
Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says A hacker accessed the personal data of tens of millions of T-Mobile's customers, the company announced. T-Mobile says it's "currently in the process of informing impacted customers that after a thorough investigation, we have determined that a bad actor used a single Application Programming Interface (or API) to obtain limited types of information on their accounts." The breach began on Friday, Nov. 25, and the data breached included name, billing address, email, phone number, date of birth, T-Mobile account number, and "information such as the number of lines on the account …
Marriott Confirms Data Breach At Baltimore Hotel Marriott Confirms Data Breach At Baltimore Hotel
Marriott Confirms Data Breach At Baltimore Hotel Hackers stole approximately 20 gigabytes of data from a computer at one of Marriott International's Baltimore hotels. The data breach — a ransom attempt against Marriott — happened at Baltimore-Washington International Airport and involved primarily non-sensitive internal business files regarding property operation, according to a statement from a company spokesperson. Between 300 and 400 individuals will be notified. "The threat actor did not gain access to Marriott’s core network," the statement reads, in part. "The incident was contained to a short period of time. Marriott identifi…
Cyberattack At Massachusetts-Based Healthcare Group Jeopardizes 2 Million People's Information Cyberattack At Massachusetts-Based Healthcare Group Jeopardizes 2 Million People's Information
Cyberattack At Massachusetts-Based Healthcare Group Jeopardizes 2 Million People's Information A security breach at a Quincy-based healthcare company has potentially put two million people's personal information at risk.  Shields Health Care Group Inc., or Shields, recently became aware of suspicious activity on its servers stemming from an incident on March 28, the company said in an online statement. An investigation revealed that "an unknown actor" accessed Shields' systems and acquired confidential information from March 7 to March 21, Shields said.  The information included people's Social Security number, birth date, address, provider information,…
Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System
Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System The personal data of nearly a million New York students has been compromised by hackers attempting to alter grades, investigators announced. In January, Illuminate Education, a taxpayer-funded software company that tracks grades and attendance for the New York City Department of Education, was targeted, resulting in the data of approximately 820,000 students being made available. Specifically, officials said that the hackers gained access to students’ names, birthdays, ethnicities, English-speaking, special-education, teacher schedules, and free-lunch statuses, though information including …
1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds 1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds
1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds An investigation by the New York Attorney General's Office found that more than 1.1 million accounts were compromised in cyberattacks of 17 companies. Attorney General Letitia James said in an announcement on Wednesday, Jan. 5, that the "Credential Stuffing Attacks" involve repeated, automated attempts to access accounts by using information stolen from other websites. James said often people reuse the same passwords on different sites, which allows cybercriminals to use stolen passwords on other websites.  “Right now, there are more than 15 billion stolen credentials being circu…
Police On Long Island Warning Residents To Ignore Latest Robocall Scam Police On Long Island Warning Residents To Ignore Latest Robocall Scam
Police On Long Island Warning Residents To Ignore Latest Robocall Scam Police on Long Island are investigating a robocall that claimed to be from a police department and referenced a data breach. Riverhead Police said the incident took place around 10 a.m. Monday, Dec. 6, when the department received a report of an unwanted robocall from phone number 631-902-5121 with the caller ID of Melissa Frost. When answered a recorded message stated the caller was Sgt. Frost of the Riverhead Police Department, calling about a data breach at the Riverhead High School, the department said. "This call was not from the Riverhead Police Department or any other affiliated ag…
NY School District Victim Of Ransomware Attack NY School District Victim Of Ransomware Attack
NY School District Victim Of Ransomware Attack Files stolen from a New York school district have reportedly been posted on the dark web following a ransomware attack after hackers did not receive ransom payments. On Long Island, acting Manhasset Schools Superintendent Gaurav Passi issued an alert to the community that said that the district was notified that some files stolen from school servers had been posted online. “We were notified that yesterday, the criminals posted certain files to the dark web that they stole from our servers,” he advised. “We are currently reviewing these files, and we will provide direct notification, in ac…
NJ Fertility Clinic Agrees To Pay State $495,000 Over Hack That Exposed 14,663 Patients' Data NJ Fertility Clinic Agrees To Pay State $495,000 Over Hack That Exposed 14,663 Patients' Data
NJ Fertility Clinic Agrees To Pay State $495,000 Over Hack That Exposed 14,663 Patients' Data A New Jersey fertility clinic agreed to pay the state nearly $500,000 to settle an investigation into a data breach that compromised the personal information of 14,663 patients, authorities said. The hack “allowed multiple instances of unauthorized access” to protected health information of patients of the Diamond Institute for Infertility and Menopause, LLC, which operates practices in Millburn, Dover and in Goshen, NY, Acting New Jersey Attorney General Andrew J. Bruck said Tuesday. “Inadequate data systems and protocols are every hacker’s dream,” state Division of Consumer Affairs Acting…
Wegmans Announces Breach Of Customers' Personal Information Wegmans Announces Breach Of Customers' Personal Information
Wegmans Announces Breach Of Customers' Personal Information Wegmans is warning customers that some personal information may have been exposed to hackers due to a recent data breach. The grocery giant issued an alert this week to notify customers that two databases used for Wegmans internal business purposes were inadvertently left open to potential outside access due to a configuration issue. Officials said that customer names, addresses, phone numbers, birth dates, Shoppers Club numbers, e-mail addresses and passwords for access to Wegmans.com accounts were included in the databases. "However, all impacted Wegmans.com account passwords were, in t…
Pennsylvania Department of Health Facing Class Action Lawsuit For Contract Tracing Data Breach Pennsylvania Department of Health Facing Class Action Lawsuit For Contract Tracing Data Breach
Pennsylvania Department of Health Facing Class Action Lawsuit For Contract Tracing Data Breach The Pennsylvania Department of Health is now the target of a class action lawsuit, along with Insight Global, following a data breach of contact tracing files, according to court documents. Over 72,000 Pennsylvanians had their data leaked, according to a statement by Insight Global on April 29. The lawsuit claims the Department of Health and Insight Global knew about the breach at the end of February but didn’t take action until the end of April. Both organizations are accused of negligence, according to the lawsuit filed Thursday. The leak included names, phone numbers, address, COVID-1…
Police Issue Alert For 'Sextortion' Phishing Scam In Fairfield County Police Issue Alert For 'Sextortion' Phishing Scam In Fairfield County
Police Issue Alert For 'Sextortion' Phishing Scam In Fairfield County Police in Fairfield County are warning residents of recently reported "sextortion" phishing scams and remind them of important safety tips to avoid being scammed. According to Fairfield Police Chief Christopher Lyddy, in recent weeks, the Connecticut Intelligence Center (CTIC) has received reports of "sextortion" scams that involve victims receiving an email from a purported hacker claiming to have hacked their computer and filmed them watching pornography.  The scammer then threatens to forward the material to all of the victim's contacts unless the victim pays a Bitcoin ransom, Lyddy…
Rockland Men Charged With Stalking, Posting Personal Info Of Police Officers Rockland Men Charged With Stalking, Posting Personal Info Of Police Officers
Rockland Men Charged With Stalking, Posting Personal Info Of Police Officers Two Rockland men waged a harassment campaign against dozens of police officers in New Jersey, researching and posting personal information about them online through what’s known as “doxing,” Bergen County Prosecutor Mark Musella said Wednesday. Evan V. Koulikov, 21, of Spring Valley “unlawfully accessed a secure database of a New Jersey medical services company and unlawfully copied the personal identifying information of approximately 50 public employees,” most of them police officers, Musella said. Koulikov got help from Eric Williams, 24, of New City in choosing targets, the prosecutor a…
DV Plus - Westchester, NY
Westchester Library System Attacked By Ransomware Virus Westchester Library System Attacked By Ransomware Virus
Westchester Library System Attacked By Ransomware Virus A ransomware virus attack on the Westchester Library System is being investigated, an IT official said in July. Public access PCs were turned off temporarily as a precaution and restored to service on Friday, July 5 and Saturday, July 6. In a public statement to library system patrons, WLS announced that the "virus disabled servers that control services used by PCs such as network management, printing and authentication." "The server that contains patron data, the circulation system and online catalog was not impacted by this event and no data breach is suspected," the announceme…
Quest Diagnostics Says Nearly 12M May Have Had Financial, Personal Info Exposed In Data Breach Quest Diagnostics Says Nearly 12M May Have Had Financial, Personal Info Exposed In Data Breach
Quest Diagnostics Says Nearly 12M May Have Had Financial, Personal Info Exposed In Data Breach Millions of Quest Diagnostics patients may have had their financial, medical and other personal information exposed in a data breach, the company announced on Monday. Officials at Quest Diagnostics said Monday that 11.9 million peoples’ personal information, including Social Security numbers may have been compromised after one of its billing collectors reported a data breach. According to Quest Diagnostics, American Medical Collection Agency (AMCA) notified the company and a Quest contractor that uses AMCA’s billing services last month. The number of patients impacted was only recently dete…