US federal grand jury has indicted Rim Jong Hyok of North Korea in connection with a 2022 campaign that saw the North Korean Hacker first conduct ransomware attacks against hospitals for profit, then turn those funds to conduct data theft attacks against the US Air Force, NASA and assorted defense contractors.
The MediSecure data breach does include potentially sensitive details of pharmacy prescriptions, but an apparent lack of structure to the stolen database means that these health details might not be directly linked with the leaked names.
Chunks of Disney’s internal Slack messaging are being released to the public via BitTorrent, and surprisingly the Russia-based hacking group behind the data leak does not seem interested in a ransom.
The “RockYou” files collect and organize existing password leaks. The new 1.5 billion entries, at least what amount of that is made up of valid data, appear to come from breaches that were dumped to the dark web between 2021 and this year.
The current data breach exposed the customer records for domestic calls and messages of about 110 million AT&T customers, or about the number of subscribers the company has in the United States.
The Justice Department says that it has taken down a bot farm run by RT for disinformation campaigns, seizing two domain names and 968 X accounts used to spread these posts.
A backup carrier for cloud-based communications platform Twilio was found to have an AWS S3 bucket open to the internet for several days, exposing “SMS-related” data including millions of one-time client passwords.
Hackers responsible for the Ticketmaster hack has released 39,000 more print-at-home concert tickets, and has promised to release millions more if not paid a ransom. Some 166,000 concert tickets for the extremely popular Taylor Swift tour has already been leaked last month.
Following a refusal by the Indonesian government to pay an $8 million ransom demand, Brain Cipher has provided the ransomware decryptor along with a request for donations.
Shinyhunters has offered 33 million stolen phone numbers for sale. Twilio has since confirmed the Authy data breach and that the leak occurred due to an improperly secured API endpoint.