Microsoft reports that Chinese hackers were able to gain access to select high-level US government email accounts via forged tokens. The breach window appears to have been from about mid-May to July 4. It was first detected in mid-June at the State Department.
If the data breach claim on the hacker forum turns out to be legitimate, Razer will have lost a potentially crippling amount of information: source code, internal login credentials and encryption keys. The hacker is seeking a $100,000 payment.
Anonymous Sudan claims to have stolen 30 million Microsoft accounts and is offering them up for $50,000, but the company says that the sample it posted cannot be authenticated and that there are no signs of a data breach.
A third-party data breach that began with systems integrator Kinmax Technology has flowed downstream to some big-name targets. The breach compromised Taiwan-based hardware supplier TSMC and LockBit is demanding a $70 million ransom.
Petro-Canada, retail arm of one of Canada’s largest gasoline producers, says that most of its gas stations are once again able to accept credit and debit card payments, as the recovery process continues after parent company Suncor Energy was hit by a cyber attack in late June.
Some pilots (and hopefuls) for American and Southwest Airlines may need to take steps to protect their identity, as a third party vendor has disclosed a data breach that involves an applicant portal it maintains.
Australian law firm HWL Ebsworth, trusted by numerous federal agencies and the country’s biggest banks, has suffered a data breach. Law firm said it became aware of the incident when stolen information was offered up on the dark web on April 28.
Clop ransomware gang’s recent rampage of MOVEit vulnerability exploitation has earned it a $10 million bounty from the US Department of State’s “Reward For Justice” program, but takers will need to show that the hackers sold stolen data to a foreign government.
The data breach window ran from at least February 2022 to April 2023, according to UPS. The attackers somehow accessed package tracking updates, then used that information to craft targeted SMS phishing messages.
Cl0p ransomware gang has indicated that this is only the first “batch” and that it has even more victims to menace in the coming weeks. The victims range across all types of both private sector and public operations, everything from state and federal government agencies to oil giant Shell.