Dissent Doe :cupofcoffee:

Blogger/journalist at databreaches.net and pogowasright.org. As a retired healthcare professional, breaches in the healthcare sector are my priority.

The header pic is Indy, a Siberian husky we rescued in 2016 after I read how nobody wanted her because she was so difficult. She is now living her best life and is a mushball with me.

#DataBreaches: https://www.databreaches.net
#Privacy: https://www.pogowasright.org
Have a news tip?: Signal: Dissent.73
Email: Breaches@DataBreaches.net
Email: Breaches@protonmail.ch
Pronouns: She/Her

Public Key

npub17l5x90j8qck2eeyjdqhshha8lp6vyq6vh3w7v5qp2gcfzhsma0lshk4kr3

NIP-05 Address

pogowasright_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqs006rzhersvt9vujfxstctm7nlsaxzqdxtch0x2qq4yvy3tcd7hlcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds2zy6xc

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub17l5x90j8qck2eeyjdqhshha8lp6vyq6vh3w7v5qp2gcfzhsma0lshk4kr3

Show more details

Last Notes

2026-10-17 22:37:25 UTC

The Norwegian data protection authority issued its biggest fine ever ($9,758,476.80 USD).
"– We issued such a high fine in this case because the breaches we identified were very serious. Thousands of users in Norway have been subjected to unlawful sharing of their sensitive data, says Line Coll, Director General of the Norwegian Data Protection Authority.
Xandr acted as an intermediary that relayed the personal data of Grindr users in Norway, including data revealing sexual orientation, to potentially thousands of other companies. Xandr defended itself by saying that they thought Grindr had collected users’ consent, but the Norwegian Data Protection Authority does not accept that actors can simply blame one another."
Read their full press release at https://www.datatilsynet.no/en/news/news-2026/microsoft-company-fined-nok-92-million-for-unlawfully-sharing-personal-data/
#dataprotection #GRINDR #XANDR #datatilsynet #consent

2026-09-28 20:42:06 UTC

- reply

First: I don't agree with some of what @npub1vc3…axsh wrote, but that's for another time. Second: With van der Stap, the hacking was never for a shopping spree. He seldom spent any money he made extorting. He'd occasionally spend some on servers. He was just obsessed with databases, especially private ones. And he still was after he got out of prison, based on chats I had with him.
I don't know if there's any evidence linking him to the Odido hack, but four people say that the audio clip the Dutch police released is not van der Stap's voice.
As to ShinyHunters' statement claiming he is not a member, well, criminals lie all the time, right? I do predict we'll hear about evidence linking them, if not as a "full member," then as someone associated with them.
Bottom line: I think he's in serious trouble because he violated probation and allegedly engaged in cybercrime again, but let's hear what they claim he actually did.

2026-09-22 21:27:56 UTC

RE: https://cyberplace.social/@GossiTheDog/117313751385768529
I emailed Elsevier to ask whether there was any risk to any patient/healthcare data at all. They sent me a statement:
"On September 21, Elsevier identified that visitors to select platforms were being redirected to a third-party page. Our cybersecurity team responded immediately, resolving the issue and restoring normal service.
Our investigation indicates that this was a narrowly scoped, limited-duration event involving the temporary redirection of traffic for certain web properties. There is no indication that core platforms, customer data, research content, or operational systems were compromised."
#note1d7e…sw54

2026-09-18 19:58:29 UTC

NEW by me:
The U.S. military leaked more than 93,000 tips via insecure P3 Global Intel. Has anyone been notified?
I had reported on the school-related tips in the Navigate360 breach, and then the Crime Stoppers tips. In this post, I looked at the tips to the U.S. military.
https://databreaches.net/2026/09/18/the-u-s-military-leaked-more-than-93000-tips-via-insecure-p3-global-intel-has-anyone-been-notified/
#Navigate360 #P3GlobalIntel #databreach #cybersecurity #incidentresponse
@npub12wk…z5fq

2026-08-29 14:04:54 UTC

SCOOP: Some Click2Mail customers will soon be receiving notification of a data security incident
https://databreaches.net/2026/08/29/scoop-some-click2mail-customers-will-soon-be-receiving-notification-of-a-data-security-incident/
#databreach #cardskimmer #Click2Mail

2026-08-27 00:53:05 UTC

RE: https://infosec.exchange/@chum1ng0/117164044590120518
I just read your full post, and those folks are so fortunate that you didn't give up and kept trying every possible connection to get so much personal and sensitive information locked down. Well done, Chu!
#note1hx3…8d0m

2026-08-26 13:33:32 UTC

- reply

I have no history with this group (unless I knew them under another brand), so I can't be sure, but usually, when TAs tell me that they haven't disrupted, they haven't locked.
@npub19qj…eda3

2026-08-26 13:30:15 UTC

- reply

I was able to contact DireWolf, and they tell me they have not interfered with the registry's operations.
So that's a bit of a relief.
@npub19qj…eda3

2026-08-25 22:53:33 UTC

- reply

group encrypts, which could likely interfere with rapid matching and cause delays in matching or arranging for transfers.
I'm trying to reach the TAs on qTox to ask whether they actually locked the registry. Their "about" page suggests that they might have. 😡 I also reached out to the registry but no reply at this time. I noticed that they were able to update their website with a news update yesterday.
@npub19qj…eda3

2026-08-24 11:42:52 UTC

ShinyHunters added ReliaQuest to its DLS yesterday.
ReliaQuest responded with an entire blog post showing how ShinyHunters got nowhere.
"Our defense in depth starts from the assumption that a threat actor will eventually phish someone's account. Phishing works. Even well-trained people can be deceived by a convincing caller who knows a teammate's name. We don't treat a sign-in to our identity provider as permission to do anything at all. Our controls include device trust which prevent non-ReliaQuest devices from accessing any application or systems and containment actions terminated the attacker's sessions, expired the password, and reset every authentication factor."
Read their full blog post:
https://reliaquest.com/blog/threat-spotlight-social-engineering-attempt-against-reliaquest-what-we-found
#infosec #cybersecurity #reliaquest #shinyhunters

2026-08-04 12:42:26 UTC

More than a dozen Republican attorneys general are calling on #OpenAI to preserve records on its models’ recent breach of #HuggingFace, suggesting the #AI firm may have violated state or federal laws in the incident.
Press release: https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-leads-coalition-demanding-transparency-from-openai-after-ai-breach-and
Direct link to full letter:
https://www.iowaattorneygeneral.gov/media/cms/08_5392C9E17791C.pdf

2026-07-24 13:19:02 UTC

In January 2025, the WA attorney general sued T-Mobile over a data breach that affected 2M residents (this was the 79M T-Mobile breach). One of the issues in the litigation was that T-Mobile didn't properly notify those affected of the breach -- it omitted telling them in SMS notifications that their SSN had been acquired.
For background, see https://www.atg.wa.gov/news/news-releases/ag-ferguson-files-lawsuit-against-t-mobile-massive-data-breach
Now a court has agreed with the state that the text message notifications did not comply with the state's breach notification law:
https://www.seattletimes.com/business/t-mobile-violated-wa-data-breach-notification-law-judge-rules/
T-Mobile says it will appeal.
#databreach #incidentresponse #notifications #TMobile

2026-07-09 02:29:34 UTC

- reply

I don't see any logical connection between the two, either. And now I'm wondering which law firm it was, and whether it was one of Silent Ransom Group's, in which case, the data may all be on a leak site.

2026-07-09 02:21:56 UTC

- reply

"On June 8, 2026, the Company became aware of a cybersecurity incident involving a third‑party law firm (the “Firm”) that provides services to the Company. The incident involved a ransomware attack affecting certain of the Firm’s information systems."
Third-party breach, not their system.

2026-07-02 19:04:45 UTC

NEW, by me:
Global Schools Holdings Cites Two Injunctions in a Bid to Chill Our Reporting. It Won't Work.
https://databreaches.net/2026/07/02/global-schools-holdings-cites-two-injunctions-in-a-bid-to-chill-our-reporting-it-wont-work/
Another day, another #legalthreat.
If you're a solo blogger or small outlet, don't panic just because you receive an injunction. They may have no jurisdiction over you, no matter how intimidating they may sound.
#GlobalSchoolsGroup #GlobalSchoolsHoldings #databreach #injunctions #FulcrumSec #freepress #pressfreedom #jursidiction #chillingeffects
@npub1p5z…krfz @npub1s69…rmen

2026-06-21 21:37:20 UTC

- reply

Am I missing something? Was there really a two-year gap between their requests?

2026-06-16 12:49:41 UTC

RE: https://infosec.exchange/@PogoWasRight/116757057256928362
DEVELOPING: This story just got wilder. I have been contacted by another gang that claims they also hit NovoNordisk at around the exact same time. They have also leaked data, but the data is different than what FulcrumSec is leaking. I will be posting a follow-up on this development when I get more info.
@npub1s69…rmen @npub1vwk…7k3l @npub19q3…dgem @npub1z3l…qvzu @npub1p5z…krfz @npub1cl6…76ay @npub1u96…psp5
#note13v7…redf

2026-06-16 00:55:08 UTC

New by me:
Scoop: FulcrumSec Leaks Novo Nordisk Data After $25M Demand Goes Unpaid
https://databreaches.net/2026/06/15/scoop-fulcrumsec-leaks-novo-nordisk-data-after-25m-demand-goes-unpaid/
#novonordisk #FulcrumSec #hackandleak #infosec #cybersecurity #databreach #intellectualproperty
@npub1s69…rmen @npub1z3l…qvzu @npub1p5z…krfz @npub1neu…ycl9 @npub1a9c…gqxz @npub1vc3…axsh @npub1vwk…7k3l

2026-06-15 22:49:01 UTC

RE: https://infosec.exchange/@metacurity/116756453345404501
Does anyone know who the third-party is and who the TA is?
#note1quq…mmcj

2026-06-12 13:52:26 UTC

NEW by me:
After a Massive Hack, Global Schools Group’s Negotiator Acted “Bizarrely.” It Didn’t End Well for Them.
https://databreaches.net/2026/06/12/after-a-massive-hack-global-schools-groups-negotiator-acted-bizarrely-it-didnt-end-well-for-them/
#GSG #GlobalSchoolsGroup #databreach #hack #EduSec #IncidentResponse #GIIS

2026-06-10 14:49:18 UTC

St. George Fire Protection District No. 2 in Louisiana has filed a lawsuit against its former IT security provider, General Informatics, LLC.
From reporting by #wafb:
"The lawsuit claims St. George discovered multiple security vulnerabilities after the breach, including unpatched servers, no network backups despite monthly payments for backup services, and administrative passwords stored in plain text.
General Informatics used the same username and password for its remote access tool across multiple clients, according to the petition. The lawsuit alleges the company continued using compromised credentials for other clients, including St. George, even after learning in November 2023 that the credentials had been breached."
Read more at WAFB: https://www.wafb.com/2026/06/09/st-george-fire-district-sues-it-company-over-cyberattack/
#databreach #vendor #infosec #cybersecurity #lawsuit

2026-06-01 14:44:56 UTC

#Microsoft walks back its threat to pursue those who don't disclose responsibly as criminals. They don't apologize, but merely "clarify" their position in a post on X.com today. Since their statement doesn't seem to be on their blog, I am linking to x.com:
https://x.com/msftsecresponse/status/2061293718942908925
This is the type of threat to researchers that @npub1p5z…krfz and I had been looking at in our survey on threats to journalists and researchers. It was impressive to see all of the experts like @npub1lcc…lcye speaking up to slam Microsoft for their blog post of May 27.
Confronted with overwhelming criticism by the security community, Microsoft stepped back.
#responsibledisclosure #Microsoft

2026-05-14 19:36:27 UTC

One of the many things I love about this platform is that people can disagree civilly.
So to thank you all, I will share with you the handwritten Mother's Day card my pre-teen granddaughter wrote to me:
Roses are red.
Violets are blue.
Life would suck
Without someone like you.
(Yes, it caught me by a bit of surprise, too.) 😂

2026-05-13 20:08:00 UTC

RE: https://infosec.exchange/@amvinfe/116567370386921171
I realize my view on whether it is ever okay to pay #ransom in a #hackandleak situation is contentious. Great thanks to @npub1a9c…gqxz for asking me to articulate my views. #incidentresponse #mitigation #responsibility #ethics
#note1dwl…wqx7

2026-05-07 20:59:35 UTC

RE: https://infosec.exchange/@adamshostack/116535298159373352
Well, yes. They scheduled it as soon as they realized they'd been hacked again.
#note14e2…r9r8

2026-05-07 20:55:30 UTC

OK, so it seems that #ShinyHunters breached #Instructure *again* and replaced login pages with their own message to schools about how to contact them directly.
The Canvas login page were replaced with the message in the screenshot below.
Canvas subsequently replaced the login with "under maintenance" pages.
#databreach #hackandleak #EduSec #cybersecurity
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/535/270/579/925/607/original/8d9649cbdb76429b.jpeg

2026-05-06 21:16:53 UTC

RE: https://freeradical.zone/@funnymonkey/116529490033852866
That's an incredibly well-written piece. Thanks for pointing to it.
#note1qem…t8an

2026-04-30 23:16:51 UTC

Today, two cybersecurity professionals who made a deal with AlphV/BlackCat to use their #ransomware to attack multiple victims in the U.S. were sentenced to four years in prison. A third co-conspirator has yet to be sentenced.
Two of the three worked for DigitalMint; the third worked for Sygnia. Neither firm had any knowledge of its employees' illegal activities and cooperated fully with law enforcement.
One of the victims was a doctor's office that the defendants had encrypted. Then, when the doctor wouldn't pay, they leaked patient data and wouldn't provide a decryptor.
Both of the defendants sentenced today had pleaded guilty to one count of conspiracy to obstruct, delay, or affect commerce or the movement of any article or commodity in commerce by extortion in violation of 18 U.S.C. § 1951(a).
They faced maximum sentences of 20 years, but were sentenced to four years.
Goldilocks and the 3 Verdicts Poll:
Does their sentence seem

2026-04-22 22:46:53 UTC

BREAKING NEWS (I've always wanted to say that...):
The hacktivist who acquired the 8.3 million tips with sensitive info has decided NOT to try to sell the data. Given the sensitivity of the tips in #BlueLeaks2, that is welcome news.
https://databreaches.net/2026/04/22/not-for-sale-blueleaks-2-0-hacktivist-decides-not-to-sell-dataset-with-sensitive-data/
#databreach #infosec #hacktivism #ethics #P3Tips
@npub1p5z…krfz @npub1s69…rmen @npub1z3l…qvzu @npub1neu…ycl9 @npub10m3…qz3k @npub1dp6…xtp6

2026-04-10 22:58:14 UTC

- reply

I think that's supposed to be IntelBroker at the top -- there's a pic of him wearing a hat like that circulated after he was arrested.
Not sure about lower left. It reminds me of Omnipotent, though.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/382/868/763/135/869/original/82c42f44c2db8113.webp
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/382/879/038/309/685/original/b99eb6614a132f51.jpeg

2026-04-10 14:51:12 UTC

Note to ALL:
I am starting to use another hashtag called #HackAndLeak that I hope others will also use to describe incidents where there has been no indication that any #ransomware or #malware was deployed.
It's time we stopped calling most attacks "ransomware" when they are really hack and leak incidents.
If you agree, how about sharing/boosting this idea and hashtag shift?
If you don't agree, tell me why so I can argue with you. :))

2026-04-08 12:29:44 UTC

Steve Gielda has updated his research findings on VPNs and who really owns them, runs them, and where they really are.
So... who really runs your VPN? Read his update at https://codamail.com/articles/vpn_exposed.html
#privacy #VPN #analysis

2026-03-10 13:34:12 UTC

NEW by me:
Insightin Health discloses its second data security incident in two years:
https://databreaches.net/2026/03/10/insightin-health-discloses-its-second-data-security-incident-in-two-years/
#databreach #healthsec #thirdparty #dataleak #cybersecurity #HIPAA #SecurityRule

2026-02-01 14:21:35 UTC

For researchers and those trying to disclose incidents responsibly or get help:
There is an international organization called FIRST.
From the FIRST Teams website:
"This is a list of the contact information for incident response teams participating in FIRST, the Forum of Incident Response and Security Teams. The teams are responsible for providing FIRST with their latest contact information for this page. The list is alphabetized by team name. All telephone numbers are preceded with the appropriate country code."
There are 829 teams listed. Some are government CERT teams, some are corporate incident response teams.
You might want to bookmark the site to speed up your attempt to contact these teams:
https://www.first.org/members/teams/#
#responsibledisclosure #incidentresponse #CERT

2026-01-03 19:33:44 UTC

On its Telegram channel, ShinyHunters claims to have compromised @Resecurity, but it looks like they fell for a carefully crafted honeypot.
https://databreaches.net/2026/01/03/shinyhunters-claims-to-have-compromised-resecurity-but-it-looks-like-they-fell-for-a-honeypot/
#honeypot #ShinyHunters #Resecurity #infosecurity
@npub1s69…rmen @npub1lcc…lcye

2025-12-28 17:27:47 UTC

For those being notified or first learning about the #WIRED #databreach:
On December 25, I broke the story of how I had been contacted in November by "Lovely," who claimed to have discovered a vulnerability. They asked for help getting Condé Nast to respond to them. They claimed they were not seeking any bounty or payment and had only downloaded a few profiles as proof.
They showed me my own data.
Trying to help, I reached out to Condé Nast corporate as well as to a contact at #WIRED.
Condé Nast never responded to me -- or to "Lovely" who eventually showed their true colors as someone trying to extort Condé Nast.
Do they have more data? Yes, it appears they do.
@npub12zf…9xlm verified the data leak and #HIBP has been notifying its affected subscribers.
Read more details in my blog post at https://databreaches.net/2025/12/25/conde-nast-gets-hacked-and-databreaches-gets-played-christmas-lump-of-coal-edition/
@npub1p5z…krfz @npub1s69…rmen @npub1kcf…r43y @npub1neu…ycl9 @npub1u8y…uh6d
#databreach #dataleak #infosec #cybersecurity #incidentresponse #CondeNast

2025-12-24 14:10:51 UTC

OT: Falling down the stairs in my home resulted in a number of fractured vertebrae. Not good, obviously, and I'm told it will take about 12 weeks to heal.
After talking with the spine doc, I asked my husband to go down to his woodworking shop and make me a standing desk.
Do you know what happens when you ask a retired architect to build a desk? You get schematics, and plans, and discussions of what kinds of wood.
I have no idea if this desk will be done within 12 weeks, but I am anticipating it will require more clamps. 🤣
Wishing all who celebrate a Merry Christmas or Happy Kwanzaa.

2025-12-20 15:01:51 UTC

ANNOUNCE: Survey on threats experienced by journalists and security researchers
Are you a security researcher or a journalist in the cybersecurity/cybercrime space?
DataBreaches.net and Zack Whittaker at this.weekinsecurity.com are conducting a survey on the types of threats researchers and journalists have faced, including legal threats or legal process and threats of violence from cybercriminals.
The survey is at https://forms.gle/P9jr6VxfD1LV6odg9
Please complete the survey and share the link on social media and with your colleagues and friends to help us understand how widespread some problems may be.
Reposts with more tags to other individuals would be appreciated.
#journalism #pressfreedom #cybersecurity #risk #threats
@npub1s69…rmen @npub1p5z…krfz @npub19q3…dgem @npub1vwk…7k3l @npub1vc3…axsh @npub1a9c…gqxz

2025-11-21 15:14:31 UTC

Alleged Scattered Spider members Thalha Jubair and Owen Flowers who are both charged with the TransportForLondon cyberattack, pleaded not guilty in Southwark Crown Court in London today. The judge has set a trial date of June 8, 2026 for them, and they continue to be detained on remand.
Flowers is also charged with conspiring to damage the network of SSM Health Care Corporation and attempting to do the same to Sutter Health, both U.S. healthcare entities. He pleaded not guilty to those charges, too.
Jubair also faces an additional charge of not providing his password to investigators when they seized his devices.
#ScatteredSpider #databreach #ransom #cybersecurity

2025-10-31 14:27:36 UTC

Remember that frustrating situation where some of us couldn't get a vendor to respond to notifications that court-sealed records and sensitive files were exposed? One entity eventually reached the vendor by phone and was so angry at their response that they wound up canceling their account with them.
Yesterday, I finally reached the second court entity. They, too, wound up telling the vendor to take the share down.
How many other clients may still have exposed data because the vendor tells clients that everything's fine when it isn't? I don't know. If you know any entity using Software Unlimited Corp software (not Software Unlimited Inc, but Software Unlimited *CORP*), you may want to point them to my coverage:
Original Report:
https://databreaches.net/2025/10/13/months-after-being-notified-a-software-vendor-is-still-exposing-confidential-and-sealed-court-records/
Today's Update:
https://databreaches.net/2025/10/31/how-many-courts-have-had-sealed-and-sensitive-files-exposed-by-one-vendors-error/
#dataleak #vendor #incidentresponse #cybersecurity #SoftwareUnlimitedCorp #FTC #govsec
@npub1p5z…krfz @npub1neu…ycl9 @npub1s69…rmen @npub16t3…dfw5

2025-10-23 11:45:57 UTC

As a loooong-time #F1 fan and a #databreach blogger, of *course* I had to read this report on hacking F1. It's the first part of a 3-part series on vulnerabilities in #Formula1
Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs:
https://ian.sh/fia
#FIA_vulnerabilities

2025-10-13 19:56:09 UTC

NEW, by me, the one some of you have been asking about:
Months After Being Notified, a Software Vendor is Still Exposing Confidential and Sealed Court Records
https://databreaches.net/2025/10/13/months-after-being-notified-a-software-vendor-is-still-exposing-confidential-and-sealed-court-records/
I don't usually ask for boosts, but if you are in a position to help spread the word about this vendor and that its clients need to check their security, that would be great.
#dataleak, #incidentresponse, #infosecurity, #cybersecurity, #SoftwareUnlimitedCorp #FBI #CISA
@npub1p5z…krfz @npub1neu…ycl9 @npub1s69…rmen [@therecord_media](https://mastodon.social/@therecord_media ) @npub1lcc…lcye @npub1vc3…axsh

2025-10-09 11:19:17 UTC

According to a new state auditor's report, nearly a third of Mississippi's state agencies fail cybersecurity requirements
Media coverage: https://vicksburgnews.com/shad-whites-office-finds-nearly-a-third-of-state-agencies-fail-cybersecurity-requirements/
Direct link to state report: https://www.osa.ms.gov/sites/default/files/osa/files/reports/252025%20Review%20of%20Mississippi%20Enterprise%20Security%20Program%20Compliance%20%28Cybersecurity%29.pdf
#Audit #cybersecurity #govsec #Mississippi #ComplianceTech

2025-10-04 20:08:41 UTC

NEW: Just days before its data might be leaked, Qantas Airways obtained a permanent injunction
https://databreaches.net/2025/10/04/just-days-before-its-data-might-be-leaked-qantas-airways-obtained-a-permanent-injunction/
#injunction #censorship #pressfreedom #Qantas #Salesforce #databreach

2025-09-26 18:04:43 UTC

Two teens have been arrested by Dutch authorities on espionage-related charges. They were allegedly recruited --and paid -- by pro-Russian hackers on Telegram to carry a wi-fi sniffer near areas that included embassies near the Hague, Europol, and Eurojust.
As part of their coverage of the story, the NL Times reports:
The father (of one of the boys) said his son is a diligent student, plays hockey, and works part-time in a supermarket. “He doesn’t go out, and shows no inclination to explore the world. We raise our children to handle everyday risks, but nothing like this. Who could have anticipated it?”
#espionage #recruitment #Telegram

2025-09-21 19:37:51 UTC

NEW: When “Goodbye” isn’t the end: Scattered LAPSUS$ Hunters hack on
Others seem to have interpreted their "goodbye" message differently than I had. Were they lying or did people just not understand a significant statement in their message?
And while headlines focus on them hitting a bank, I think we need to take a closer look at their attacks on the aviation sector.
https://databreaches.net/2025/09/21/when-goodbye-isnt-the-end-scattered-lapsus-hunters-hack-on/
#databreach #ScatteredSpider #ShinyHunters #LAPSUS$ #CollinsAerospace #airlines #airports

2025-09-18 22:57:56 UTC

- reply

Was he ever in a juvie facility or did they just send him home each time because he was a minor?
IntelBroker got into a diversion program at one point. It didn't stick, obviously, but do you know if either of these teens was ever in any kind of diversion program or getting any supervision?

2025-09-17 21:32:30 UTC

"The ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from 760 companies using compromised Salesloft Drift OAuth tokens.
[...]
In March, one of the threat actors breached Salesloft's GitHub repository, which contained the private source code for the company.
ShinyHunters told BleepingComputer that the threat actors used the TruffleHog security tool to scan the source code for secrets, which resulted in the finding of OAuth tokens for the Salesloft Drift and the Drift Email platforms."
Read more of Lawrence Abrams' great reporting on Bleeping Computer:
https://www.bleepingcomputer.com/news/security/shinyhunters-claims-15-billion-salesforce-records-stolen-in-drift-hacks/
#Salesforce #Salesloft #Oauth #Drift #databreach #ransom #ShinyyHunters #ScatteredSpider #LAPSUS$ #UNC6040 #UNC6395

2025-09-16 16:22:12 UTC

So many news reports have repeated the BBC's mistaken estimate about the number of customers affected by the Kering data breaches. So...
No, folks, it's not 7.4 million affected or fewer. It's a lot *more* because the BBC's estimate was based on just the second and smaller breach (Balenciaga, Brioni, and Alexander McQueen), and not the Gucci data which allegedly has more than 43 million records. Even assuming repeat customers are in there, there are likely a lot of unique customers in the Gucci data.
If we use the same percent based on 7.4 million out of almost 13 million recordsin the second data set, then that would yield 24-25 million unique email addresses for the Gucci data set, for an estimated total of more than 31 million customers all told.
I didn't estimate the number of unique customers in my reporting because it's too sloppy. But it's highly unlikely to be 7.4 million or fewer as BBC reported.
#Kering #Gucci #Balenciaga #Brioni #AlexanderMcQueen #databreach #Salesforce #ShinyHunters #UNC6040 #incidentresponse #transparency
My reports:
https://databreaches.net/2025/09/11/exclusive-high-end-fashion-retailers-gucci-balenciaga-brion-and-alexander-mcqueen-hit-by-salesforce-attacks/
https://databreaches.net/2025/09/15/update-kering-confirms-gucci-and-other-brands-hacked-claims-no-conversations-with-hackers/
@npub1neu…ycl9 @npub1p5z…krfz

2025-09-07 11:50:02 UTC

Burger King hacked, systems described as 'solid as a paper Whopper wrapper in the rain’ – hackers 'impressed by the commitment to terrible security practices,' also exploited other RBI brands like Tim Hortons and Popeyes:
"Ethical hackers BobDaHacker and BobTheShoplifter have detailed their claim that they uncovered “catastrophic” vulnerabilities in multiple platforms hosted by Restaurant Brands International (RBI). While RBI may not be a very familiar name, this lax security means that systems powering mega brands like Burger King, Tim Hortons, and Popeyes, with over 30,000 locations worldwide, and all were almost trivially easy to hack. “Their security was about as solid as a paper Whopper wrapper in the rain,” snarks the BobDaHacker blog, sharing the full technical exposé (the blog has since been taken down, but it's archived here)."
https://www.tomshardware.com/tech-industry/cyber-security/burger-king-hacked-digital-platform-as-solid-as-a-paper-whopper-wrapper-in-the-rain-easy-security-bypass-exploited-catastrophic-vulnerabilities-also-worked-on-other-rbi-brands-like-tim-hortons-and-popeyes
#infosec #cybersecurity

2025-08-13 11:33:29 UTC

Heads up, folks:
Michael Kan reports that National Public Data is back under new owners: https://www.pcmag.com/news/site-behind-major-ssn-leak-returns-with-detailed-data-on-millions-how-to
Here is the direct link to their opt-out page instructions:
https://nationalpublicdata.com/optout.html
I had opted out previously after their humongous #databreach last year. When I checked my name now, it did not find my profile, so if you opted out before, you may still be opted out, but better safe than sorry: check and opt-out if needed.
#NPD #NationalPublicData #OptOut #DataBroker #Privacy

2025-08-12 23:13:57 UTC

So yesterday, I emailed a state court system that appears to be linked to the exposed data I mentioned recently and that the host notified on or about July 28.
No reply was received.
Today, I sent a contact form message to the lawyer for a juvenile whose records were sealed. Sealed, except 11 of them were exposed to anyone who can access the data. I told him what was going on and suggested he contact the court and tell them to get the data secured.
No reply was received.
Today, I sent an email to the judge who ordered the juvenile's records sealed and I cc:d the district attorney. I gave them the juvenile's name, case number and that I could see all the sealed records. I urged them to have their IT or vendor call me and I could give them the IP address over the phone, etc.
No reply was received.
Dear Russia, China, and North Korea:
You do not need to hack our courts. They are leaking like sieves and do not respond when we try to tell them they need to secure the data.
Yours in total frustration,
/Dissent
#infosec #cybersecurity #incident_response #dataleak #databreach #WAKETHEFUCKUP

2025-08-10 11:58:35 UTC

NEW: Federal judiciary says it is boosting security after cyberattack; researcher finds new leaks
More of those frustrating leaks where, despite our best efforts, we have been unable to get the network shares locked down so far, even with the host's assistance.
This one involves two courts: one state and one federal, and yes, we saw some files that were supposed to be sealed or confidential.
https://databreaches.net/2025/08/10/federal-judiciary-says-it-is-boosting-security-after-cyberattack-researcher-finds-new-leaks/
#dataleak #infosec #cybersecurity #databreach #govsec

2025-08-08 22:59:26 UTC

"Breaking News:" The Scattered Spider kids seem to have opened their own channel on Telegram. Rude, crude, and leaking data already. Some of the redacted screenshots they have posted suggest that they may have had victims that we did not know about already.
#ScatteredSpider #ShinyHunters #SalesForce #AirFrance #Qantas #Gucci #databreach #extortion

2025-07-17 17:15:44 UTC

NEW: RansomedVC is back — and is still attacking its competitors:
https://databreaches.net/2025/07/17/ransomedvc-is-back-and-is-still-attacking-its-competitors/
RansomedVC has a history of leaking its competitors' data. Heck, they even leaked their own to get attention. Now they're back, and one of their first targets was the Medusa ransomware gang.
#databreach #ransomware #SnapAv #SnapOne #Medusa #RansomedVC
@npub1a9c…gqxz

2025-07-02 13:26:19 UTC

#dogsofmastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/783/845/669/377/260/original/ae863d4914d88139.jpg

2025-06-27 00:59:58 UTC

- reply

So sorry to read this. Donation made. I am wishing your family all the best.

2025-06-25 22:04:20 UTC

"IntelBroker's" real identity is Kai West, a British national, according to court filings now revealed by the U.S. Attorney's Office for the Southern District of New York today.
U.S. is seeking his extradition from France, where he was arrested on February 5 and detained.
USAO press release: https://www.justice.gov/usao-sdny/pr/serial-hacker-intelbroker-charged-causing-25-million-damages-victims
Kai West Four-Count Indictment: https://www.justice.gov/usao-sdny/media/1404621/dl?inline
Kai West Complaint: https://www.justice.gov/usao-sdny/media/1404616/dl?inline
#databreach #intelbroker #arrest #indictment
Here's a pic of him from his 2023 license (from court filing):
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/746/264/539/978/436/original/12384624e45f0e3f.jpg

2025-06-25 19:17:54 UTC

- reply

(continuing on ShinyHunters arrests)
The Paris prosecutor has issued a press release about the arrests. It doesn't provide real names but does reveal that IntelBroker is a British national who was arrested in France in February 2025 and was detained in pre-trial detention.
The press releases in French and English can be found on my site:
https://databreaches.net/wp-content/uploads/presse.jpg
https://databreaches.net/wp-content/uploads/presse_en.jpg
@npub1s69…rmen

2025-06-25 12:02:48 UTC

As expected, more details are emerging in other news outlets about the arrest of #ShinyHunters.
One detail I noted is that ShinyHunters is suspected of being responsible for the attacks on #LVMH, which is the high-end brand associated with Tiffany and Dior, who both reported breaches this year. Although there had been some speculation that #ScatteredSpider might be responsible for those breaches, it appears that ShinyHunters was allegedly responsible.
There have been a number of hacks this year where it is not clear -- in the absence of law enforcement confirmation -- whether a #databreach has been by Scattered Spider or ShinyHunters, or whether they have collaborated with one doing the hacking and the other doing the extortion. I predict in weeks/months to come, we will be given a pretty big list of big hacks that ShinyHunters has been involved in this year.
As I reported in my coverage of the PowerSchool hack and prosecution of Matthew Lane, ShinyHunters' name has been linked to that one, too, but was not named as a co-conspirator.
This is where I should write "This is a developing story..." huh?
@npub1s69…rmen

2025-06-25 10:54:15 UTC

- reply

First you get your fingers burned. Now you get stung.
Is the universe suggesting you stop reporting on cyber and start reporting on first aid or safety? Or maybe good reasons to increase life insurance?
Stay safe, fella!

2025-06-20 15:49:37 UTC

Aflac notifies SEC of breach suspected to be work of Scattered Spider:
https://databreaches.net/2025/06/20/aflac-notifies-sec-of-breach-suspected-to-be-work-of-scattered-spider/
They're the third U.S. insurer breach we know about this month.
#databreach #ScatteredSpider #cybersecurity #insurance

2025-06-20 13:33:46 UTC

As much as I generally detest claims that something should be a wake-up call, @npub1vwk…7k3l response to @npub1yvu…8mny "16 billion" story really should be a wake-up call for any news outlets who repeat any claims of discovered leaks or breaches by Cybernews.
See https://www.bleepingcomputer.com/news/security/no-the-16-billion-credentials-leak-is-not-a-new-data-breach/
DataBreaches.net will no longer link to Cybernews unless there is some reliable source that confirms that their claims are accurate and that they are not just reporting on leaks that they haven't even seriously tried to get locked down before they report on it.
Comments:
https://databreaches.net/2025/06/20/no-the-16-billion-credentials-leak-is-not-a-new-data-breach-a-wake-up-call-about-fake-news/
#journalism #databreach #dataleak #infostealers #passwords #hype #clickbait #ethics
@npub1lcc…lcye @npub16t3…dfw5 @npub1z3l…qvzu @npub1kcf…r43y @npub1vfn…4mmp

2025-06-03 17:00:54 UTC

- reply

OK, is this where you write a post with a headline that has "wake up call for..." in it?
J/K... wishing you a speedy and full recovery.

2025-05-28 23:22:07 UTC

Nova Scotia Power has repeatedly said that data from the ransomware attack it suffered has been published on the dark web. Yet not one media outlet or anyone I know has reported finding any data from this anywhere, and no ransomware group that I track has claimed responsibility for this incident.
Does anyone know where these data have allegedly been published? If so, please contact me privately.
#ransomware #databreach

2025-05-22 17:15:01 UTC

Clever teasing by #OperationEndgame
A new vid about Qakbot, "My Happy Lie by Cortes" and they reset the countdown timer to 16 hours while linking to a DOJ press release dated today that has not yet been released:
"Russian national and leader of Qakbot malware conspiracy indicted in long-running global ransomware scheme"
#qakbot #malware

2025-05-20 21:31:31 UTC

Massachusetts hacker to plead guilty to PowerSchool data breach:
https://www.investing.com/news/stock-market-news/massachusetts-hacker-to-plead-guilty-to-powerschool-data-breach-4055643
Related:
DOJ Press release: https://www.justice.gov/usao-ma/pr/worcester-college-student-plead-guilty-cyber-extortions
USA v. Matthew D. Lane - Information: https://www.justice.gov/usao-ma/media/1400921/dl
USA v. Matthew D. Lane - Plea Agreement:
https://www.justice.gov/usao-ma/media/1400926/dl
#databreach #PowerSchool #EduSec #cybersecurity
@npub12wk…z5fq @npub16nr…879s @npub1f79…vxnn @npub10m3…qz3k

2025-04-25 15:01:57 UTC

Holy sh*t...
FBI arrests judge in escalation of Trump immigration enforcement effort:
https://www.cnbc.com/2025/04/25/fbi-arrest-judge-hannah-dugan-milwaukee.html
#obstruction

2025-04-12 14:46:27 UTC

Google Hit With Lawsuit Over Data Collection on School Kids
https://news.bloomberglaw.com/litigation/google-hit-with-privacy-suit-over-data-collection-on-school-kids
Nor for nothing, but this is the same issue some parents in Toronto and I tried to raise against Google years ago -- and Google told me that their relationship was with their clients -- the schools -- and the schools consented. It was up to the schools, they claimed, to seek parental consent.
@npub12wk…z5fq @npub16nr…879s @npub10m3…qz3k
#Google #WorkspaceForEducation #EdTech #consent #privacy #dataprotection #k12

2025-04-05 23:46:22 UTC

And here's another reminder of the insider threat if you don't investigate your employees' or consultants' backgrounds and claimed credentials carefully enough. @npub1vc3…axsh has the story and how a number of criminal cases may now be appealed or overturned:
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe:
https://krebsonsecurity.com/2025/04/cyber-forensic-expert-in-2000-cases-faces-fbi-probe/
#insiderthreat #fraud

2025-03-30 11:21:35 UTC

A little ray of sunshine:
The Journal Times, part of Lee Enterprises, had been seriously impacted by the #ransomware attack by Qilin in February. Today, they announced that they are back to full strength: https://journaltimes.com/opinion/column/article_856d2fed-473b-4683-bbf4-61e8fd157830.html
Sincere congrats to them after what was almost two months of intensive and dedicated efforts to fully recover.
#journalism #freepress

2025-03-06 21:19:06 UTC

Thanks to everyone in the fediverse who has favorited, boosted, and reached out to me supportively over the injunction and takedown order that I wouldn't comply with (overview: https://infosec.exchange/@PogoWasRight/114110520940142405)
Special thanks to @npub1p5z…krfz for reporting about it all on #TechCrunch:
https://techcrunch.com/2025/03/06/hacked-health-firm-hcrg-demanded-journalist-take-down-data-breach-reporting-citing-uk-court-order/
#databreach #HCRG #ransomware #incident_response #injunction

2025-03-05 15:26:08 UTC

Here's my post on the court injunction my site got hit with:
HCRG Care's lawyers claimed an injunction issued in a "private" hearing required us to remove two posts. We didn't comply.
HCRG Care was represented by the Pinsent Masons law firm in the UK in this matter. The injunction was issued by the High Court of Justice, King's Bench Division, Media and Communications List by the Honorable Mr. Justice Soole.
Pinsent Mason's attempt to get my web host to remove my posts also failed.
As always, I feel blessed to have the legal support of Covington and Burling's Kurt Wimmer Pro Media Freedom Initiative, which has represented my site pro bono for the last 16 years.
Read about the letter, the injunction, and why the High Court's over-reaching injunction endangers UK journalists and doesn't serve the public well.
https://databreaches.net/2025/03/05/hcrg-cares-lawyers-claimed-an-injunction-issued-in-a-private-hearing-required-us-to-remove-two-posts-we-didnt-comply/
Oh, and I'm not the only one ignoring the injunction. Medusa also got served with the injunction via tox chat, they tell me. And like other injunctions they have received, they are ignoring it. So what has HCRG really accomplished?
#databreach #ransomware #Medusa #transparency #censorship #pressfreedom #injunction #FirstAmendment
@npub1p5z…krfz @npub1s69…rmen @npub1vwk…7k3l @npub1cdh…65e3
@npub1a9c…gqxz @lawfare @npub1hxa…caxd

2025-03-04 20:32:09 UTC

Last Friday I received a letter from a U.K. law firm with an attached injunction. The law firm claimed I must remove two posts about their client.
That is not going to happen. I am not under the jurisdiction of the U.K. or the High Court of Justice. My lawyer informed them of that yesterday.
But DataBreaches.net might disappear tomorrow because the U.K. law firm sent the injunction to my domain registrar who, innocently believing them, informed me they will suspend my site if I don't remove the posts within 24 hours. I have replied to them but have not heard back.
So...
If my site is gone tomorrow, I will let you know where you can read a lot more about the injunction and how the injunction poses a serious risk of censorship in the U.K.
If my site is still online tomorrow, I will still let you know here where you can read about the over-reaching injunction obtained in a private hearing where no one represented journalists whose reporting was being censored.
#censorship #injunction #pressfreedom
#AssociatedPress #RCFP #databreach #ransomware #journalism
@npub1hxa…caxd @npub1s69…rmen @npub1p5z…krfz [@aj_vicens](https://infosec.exchange/@aj_vicens ) @npub1m6u…rk8l @npub1cdh…65e3 @npub1a9c…gqxz @npub16r8…wmwp

2025-02-25 13:05:27 UTC

I don't know if this is a first or not, but it sure struck me as unusual:
RansomHub sends a letter to the editor. Really.
https://databreaches.net/2025/02/25/ransomhub-sends-a-letter-to-the-editor-really/
#ransomware #databreach
@npub1vwk…7k3l @npub1s69…rmen @npub1neu…ycl9

2025-01-29 22:09:57 UTC

The New York Blood Center was already having a blood shortage emergency and then they got hit with a ransomware attack.
Whoever hit them: please, please, please: you are putting more lives at risk every day. Give them a decryptor.
#emergency #blood #ransomware

2025-01-27 23:44:25 UTC

- reply

Being explicit that an attack is "ransomware" is only really helpful if we all only call an attack "ransomware" if ransomware is actually deployed and encrypts the victim's files. If there's no encryption of files, maybe we should call it a hack with an extortion attempt. Right now, too many folks use "ransomware" to describe incidents in which nothing's encrypted and I think that creates a wrong impression and may cause even more unease.

2025-01-07 14:22:48 UTC

Two ransomware groups claimed they attacked Rutherford County Schools. in Tennessee. One leaked sensitive records.
I skimmed the data tranche and found tens of thousands of files with sensitive student information and personnel files. Read more about it here:
https://databreaches.net/2025/01/07/two-ransomware-groups-claimed-they-attacked-rutherford-county-schools-one-leaked-sensitive-records/
#databreach #ransom #EduSec #cybersecurity
@npub12wk…z5fq @npub1f79…vxnn @npub16nr…879s

2024-12-17 21:52:36 UTC

OK, a huge thumbs up to Byte Federal for their breach notification letter. They frankly admit where they screwed up and what happened. I wish more notifications were as clear and straightforward as this one.
https://databreaches.net/2024/12/17/a-positive-example-of-forthright-breach-disclosure/
#databreach #transparency #disclosure #IncidentManagement #IncidentReporting #infosec

2024-12-16 18:23:58 UTC

Unbelievable. Or maybe too believable...
I previously posted about Bolton Walk-in Clinic in Ontario not locking down their patient data despite multiple responsible disclosure alerts (https://infosec.exchange/@PogoWasRight/113589181607493357). Then I reported that Canada's cybersecurity agency contacted me and offered to help (https://infosec.exchange/@PogoWasRight/113589757905504474).
Well, they tried... but got no results either. Bolton Walk-In Clinic is *still* exposing patient data and didn't even do anything when contacted by Canadian federal police.
If any Canadian news outlet would like to report on this, get in touch. @npub16t3…dfw5 and I will share the information with you (yes, I just volunteered him too). 😂
Or if anyone is in the vicinity of their clinic, maybe stand outside with a sign that says, "Bolton Walk-In Clinic is leaking patient data and ignoring alerts!" That might get some attention...
Bonus points if you get someone in a Santa outfit to stand outside their clinic with a sign that says "Bolton Walk-In Clinic is naughty -- they are leaking patient data."
#dataleak #negligence #healthsec #PHIPA #HIPA #cybersecurity #databreach #accountability

2024-12-06 20:22:06 UTC

How is it that no one has set up the dark web equivalent of archive.org to archive onion sites?
(Translation: a link is dead and I really want to know what data it linked to) :blobnotlike:

2024-12-05 17:47:21 UTC

Scattered Spider Hacking Gang Arrests Mount With Teen:
Remington Ogletree (aka "Remi") arrested and charged with wire fraud and aggravated identity theft.
This teen had jaw-droppingly bad opsec, and to add to it, he used a crypto laundering service on TG that was actually an undercover FBI operation.
https://databreaches.net/2024/12/05/scattered-spider-hacking-gang-arrests-mount-with-teen/
#ScatteredSpider #FinSec #Telecoms #Hack #phishing #infosec #databreach

2024-12-05 00:16:03 UTC

#dogsofmastodon #doghair
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/597/321/696/809/704/original/f2c24a8b9c9bddeb.jpg

2024-11-20 18:40:29 UTC

- reply

Yeah... I kinda hate LinkedIn and am only on it minimally. I am more likely to read you here than there so count me as one of the "Do it!" replies.

2024-11-14 00:49:05 UTC

Idaho man who hacked medical entities and made vile threats sentenced to 10 years in prison:
https://databreaches.net/2024/11/13/idaho-man-who-hacked-medical-entities-and-made-vile-threats-sentenced-to-10-years-in-prison/
This is a case that started because the threat actor, "Lifelock," contacted DataBreaches to try to get DataBreaches.net to report on victims who hadn't paid his ransom demands.
Some of his court filings tried to blame me for the FBI raiding him and seizing his devices. The FBI did their own investigation but yes, it was my reporting that initially made the FBI aware of Robert Purbeck.
#databreach #healthsec #cybersecurity #infosec #extortion
@npub1neu…ycl9 @npub1s69…rmen @npub1kcf…r43y @npub1p5z…krfz

2024-10-31 10:54:46 UTC

- reply

I wasn't thinking about cheap or lazy or apathetic, and I apologize if it came across that way. What I was asking about was entities with limited resources making tough decisions in their budgets. I can see why some may not invest more in security. In other cases, it may not be as obvious to the public why an entity didn't do more before a breach or why entities aren't flat-out required to do more.

2024-10-31 00:16:50 UTC

- reply

Are you confident that it's an inability to secure themselves in most cases and not just a lack of prioritizing security when they'd rather use the money for something else?
And if they're unable to secure themselves because they choose not to allocate a bigger percentage of their budget to security, what then? What's the fix?
@npub1vtx…e7wk

2024-10-30 23:25:53 UTC

What do you think is more effective in getting entities to level up their cybersecurity? What type of consequence will be more likely to get others to up their game?

2024-10-30 19:17:16 UTC

In every generation, there have been people who stood up for inclusion while others spewed divisiveness.
Franklin debuted on Peanuts in a decade that saw civil rights protests, children hit with firehose for protesting, MLK assassinated, and so much more.... Remembering Charles Schulz:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/397/940/478/842/723/original/1ea16f4f1f42680f.jpg

2024-10-16 19:44:37 UTC

Breaking News: The threat actor known as "USDoD" (aka "EquationCorp" and other monikers") has been arrested by Brazilian Federal Police. USDoD is probably best known for his attacks on #InfraGard, Airbus, and his role in the recent National Public Data breach.
Media coverage indicates he was arrested this morning: https://g1.globo.com/politica/noticia/2024/10/16/pf-prende-hacker-de-33-anos-suspeito-de-invadir-sistemas-e-vazar-dados-de-policiais.ghtml
#databreach #hacker #USDoD #EquationCorp
@npub1f79…vxnn @npub1s69…rmen

2024-10-16 18:30:57 UTC

The #SEC doesn't take kindly to be lied to, it seems.
Data Center Company CEO Indicted for Major Fraud and Making False Statements to the U.S. Securities and Exchange Commission:
https://www.justice.gov/opa/pr/data-center-company-ceo-indicted-major-fraud-and-making-false-statements-us-securities-and
They don't name the company but a little googling suggests that Deepak Jain's data center was AiNET in Beltsville, MD.
#fraud #datasecurity

2024-10-15 16:59:48 UTC

British intelligence services to protect all UK schools from ransomware attacks:
https://therecord.media/uk-pdns-schools-cyberdefense-intelligence-services
Direct link to #NCSC announcement: https://www.ncsc.gov.uk/blog-post/pdns-for-schools-provide-cyber-resilience-for-more-institutions
@npub12wk…z5fq @npub16nr…879s @npub10m3…qz3k @npub1f79…vxnn @npub1vfn…4mmp
#EduSec #cybersecurity #ransomware

2024-09-30 11:21:07 UTC

Heads up! New developments -- and arrests -- in law enforcement pursuit of LockBit.
Law enforcement reactivated a previously seized LockBit URL to announce what will be revealed tomorrow. Announcements will include the arrest of what they describe as a major LockBit actor, other LockBit-linked UK arrests, and a member of EvilCorp identified as a LockBit affiliate.
Stay tuned, it seems.
#LockBit30 #NCA #disruption #EvilCorp #ransomware
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/226/219/950/939/560/original/80518d4235696017.png

2024-09-18 01:27:41 UTC

Threat actors called VANIR Ransomware Group posted a few listings in July. Tonight, their onion site has a seized message:
" THIS HIDDEN SITE HAS BEEN SEIZED
by the State Bureau of Investigation Baden-Württemberg as a part of a law enforcement action taken against Vanir Ransomware Group "
From the press release about the seizure, it sounds like there have been no arrests and the identity of the TAs is not yet known: https://www.presseportal.de/blaulicht/pm/110980/5866617
For more on what Vanir's leak site looked like previously, see Cyjax: https://www.cyjax.com/data-leak-site-emergence-continues-to-increase/
#ransomware #databreach
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/155/926/581/299/311/original/67faf2b93a7c6f65.png

2024-09-14 11:22:07 UTC

This seems to be a week for announcing big lawsuit settlements. Here's another big one:
An Oracle lawsuit settlement for $115 million addresses claims that Oracle unlawfully tracked and collected vast amounts of personal information without obtaining proper consent from users and allegedly sold it to third parties for advertising purposes through Oracle’s various advertising products, including ID Graph and Data Marketplace.
Official settlement website: https://www.katzprivacysettlement.com/
If you think you might be an eligible class member, you only have until Oct. 17th to file a claim. See the settlement site for info on who's eligible, etc.
#privacy #consent #Oracle #lawsuit
@npub1s69…rmen