Click any tag below to further narrow down your results
Links
New Zealand's health minister has initiated a review of a cyberattack on ManageMyHealth, potentially exposing the data of over 100,000 patients. The company, which manages health records for nearly 1.85 million people, is working with cybersecurity experts to assess the breach and safeguard data. A hacker claiming responsibility has threatened to release stolen data unless a ransom is paid.
Four individuals have been arrested in connection with recent cyber-attacks on M&S and the Co-op, which have led to significant operational disruptions for both retailers. The suspects face charges related to computer misuse, blackmail, and organized crime activities, with investigations ongoing to identify those responsible for the attacks that included data theft and ransomware deployment.
Matthew D. Lane, a 19-year-old college student, was sentenced to four years in prison for his role in a cyberattack on PowerSchool that led to a significant data breach affecting millions of students and teachers. He pleaded guilty to multiple charges, including unauthorized access and cyber extortion, and was ordered to pay $14 million in restitution. The attack involved stealing sensitive data and demanding a ransom, with ongoing legal scrutiny surrounding PowerSchool's security practices.
Salesforce has refused to pay a ransom demanded by a crime syndicate claiming to have stolen nearly 1 billion records from its customers. The group, known as Scattered LAPSUS$ Hunters, has threatened to leak the data unless Salesforce negotiates a ransom, citing numerous high-profile clients among the victims. Despite the situation's severity, Salesforce has stated it will not comply with the extortion demand.
Coinbase reported that hackers bribed overseas support agents to steal customer data, leading to potential costs of up to $400 million. The company received a ransom demand of $20 million but has refused to pay, instead offering a reward for information on the attackers. While sensitive customer information was accessed, no passwords or funds were compromised.