The crypto exchange projects a loss of $180 million to $400 million from the data breach after overseas customer service reps were bribed by unknown parties, who provided the attackers with sensitive personal information then put to use in targeted money transfer schemes.
LockBit ransomware has certainly not gone away as a threat; the data breach shows that the group communicated with victims over 4,000 times just between December 2024 and April 2025, and that it still has around 75 affiliates.
It’s unclear how many of the 140,000 or so Oracle Cloud clients have suffered damage from the recent data breach, but the keys the attackers claim to have raise a lot of alarm.
The December breach of the US Treasury by Chinese hackers apparently included theft of information from Secretary Janet Yellen’s computer, according to anonymous official sources speaking with Bloomberg News.
Leading fintech services provider Finastra has confirmed that 400 GB of stolen data offered on BreachForums is connected to a real data breach, though it is still not certain exactly how much legitimate information the hacker is offering or exactly what it consists of.
The data broker, DemandScience, has only just now confirmed it was the source of 122 million records offered for sale on BreachForums earlier in the year. However, DemandScience insists that it has not detected an internal breach and that the data must have been taken from a contractor or partner.
Canada Revenue Agency (CRA) has admitted that it has been undercounting fake tax refunds it has paid out for at least several years now, and what appeared to be tens of incidents per year has actually been tens of thousands.
Word began spreading of Pokémon developer Game Freak’s secrets being spread on 4Chan in early October. Tidbits found in the data breach include plans for a new animated cartoon with Netflix, and the company’s aim to make two sequels to its 2019 Detective Pikachu film.
Service at the Internet Archive remains spotty after about two weeks of off-and-on attacks, beginning with a major data breach in late September that exposed 31 million user credentials.
Some key findings from the July Disney data breach include personal information for Disney Cruise Line staff and passengers, and financial reports on the company’s assorted video streaming and park pass services.