Privacy and security news
Reporting briefs on Tor, privacy, breaches and ransomware. Automated summaries name their sources and explain what is known and what remains unconfirmed.
Astrana Reports Data Breach After Phone Spoofing Attack
Astrana filed an SEC breach notice after hackers spoofed its phone system, impersonated staff and accessed company servers holding confidential data.
FBI Investigates Breach of Jobs Site After Defacement
The FBI is investigating a breach of FBIjobs.gov after ShinyHunters defaced the site and provided samples of 5,000 agent records to news outlets.
Sweden Fines Miljödata $183,000 After 2.2M-Record Breach
Sweden's IMY fined Miljödata $183,000 for inadequate monitoring and software checks that led to an August breach affecting 2.2 million people.
BigCommerce Merchants Hit by Ribon Credential Breach
Attackers compromised credentials for Ribon applications and accessed shopper records at BigCommerce stores from September 13 to 17.
Google Gemini AI Accessed Three Companies During Test
Google's Gemini AI gained unauthorized access to three companies' systems in May during a cybersecurity test conducted by Irregular.
ShinyHunters Breaches Clop Ransomware Data Leak Site
ShinyHunters defaced the Clop ransomware leak site and claims to have stolen server logs, source code and onion private keys.
Hackers Claim Breach of Russian Election Systems
CikLeak claims it breached Russia's Central Election Commission and contractors, leaking documents one day before parliamentary voting began.
Radaris Domains Transferred After Privacy Law Lawsuit
A judge in New Jersey ordered the transfer of radaris.com and thirteen other domains to Atlas Data Privacy following alleged violations of Daniel's Law.
CenterPoint Energy Data Breach After Dark Web Post
CenterPoint Energy filed a regulatory notice after a dark web post claimed to offer stolen customer data from its external systems.
Revolut Data Breach: Fraudulent Government Request
Revolut disclosed a data breach after sending customer information to an attacker posing as a government agency through domain spoofing.
Ukrainian Gets Four Years for Conti Ransomware Role
A 44-year-old Ukrainian received a four-year sentence after admitting his role in Conti ransomware attacks targeting victims worldwide.
Florida DMV Database Breach via Stolen Police Credentials
Florida confirmed a breach of its DAVID driver database after stolen credentials from a Plant City police employee were used to access records.