Attackers started leaking health data of selected public figures and politicians as well as people who may have had compromising conditions or treatments as Medibank has publicly committed to not making ransom payments.
Hackers are continuing to show a very strong interest in industrial control systems, but organizations also tend to be much more prepared. However, 35% are still not able to tell if they have been compromised and 17% still aren’t monitoring ICS cybersecurity.
The four data breaches that prompted FTC involvement collectively involved the loss of tens of millions of both customer and employee records, and were very preventable had the edtech giant been following basic cybersecurity best practices.
Security breach was traced back to an employee that followed a phishing link to a bogus login page and entered their credentials on October 13. The attackers then took the credentials and used them to raid some 130 GitHub repositories belonging to Dropbox.
The good news is that the cybersecurity workforce has grown to about 4.7 million strong worldwide. But a workforce gap of 3.4 million remains in spite of good recent growth.
The Twilio hack in August was not the first by that particular threat actor. An investigation has turned up an earlier breach by the same party, in which a vishing attack was used to steal a smaller amount of customer information.
The fine of the government supplier was the fourth largest ever issued in the UK. The ICO ruled that the company lacked employee security training, used outdated operating systems and failed to respond to antivirus warning.
At least 17,500 of the leaked ACL records contained some sort of pathology patient data. About 28,000 of the records went to the dark web accompanied by a credit card number, and 3,300 included a CVV.
Australia has been experiencing a string of high-profile data breaches since late September, and the latest incident in the trend is the theft of 200 GB of medical records from health insurance provider Medibank.
64% of security decision makers believe they have been targeted or impacted by a nation-state attack, and a similar majority say they have shifted their cybersecurity strategy due to the Russia-Ukraine conflict.