A massive data breach involving France’s national unemployment agency is thought to impact 43 million people, dating back through 20 years of records of those seeking employment assistance and benefits.
Two payment providers for the French medical insurance industry have been breached, and a total of over 33 million records that contain sensitive information have been exposed in the data breach.
23andMe seems committed to “it’s the customer’s fault” as their means of legal defense in the data breach suit, no matter how legally viable it might be or how much PR damage it might do. It will be interesting to see if the company actually improves its position.
ALPHV/BlackCat ransomware gang is adopting a new pressure tactic by filing a SEC complaint against lending software outfit MeridianLink for failure to report an early November data breach.
Singapore’s Marina Bay Sands is the latest casino-hotel complex to suffer a major data breach, and like the recent Vegas incidents it involves stolen loyalty program information.
23andMe’s data breach has apparently gotten about four times worse, as four million more files have been leaked to a dark web hacking forum. It’s still not clear how many of these are full genetic profiles.
Zaun first reported that no client information was taken, before updating that assessment to disclose that information about military bases was stolen. Data breach was due to a Windows 7 PC in its facilities that was somehow internet-accessible.
FTX and a number of other crypto exchanges that have gone under are having their bankruptcy claims managed by Kroll, which suffered a late August data breach. The exposed claimant information is already being used for phishing attempts that claim FTX funds are available to be withdrawn.
If the data breach claim on the hacker forum turns out to be legitimate, Razer will have lost a potentially crippling amount of information: source code, internal login credentials and encryption keys. The hacker is seeking a $100,000 payment.
Anonymous Sudan claims to have stolen 30 million Microsoft accounts and is offering them up for $50,000, but the company says that the sample it posted cannot be authenticated and that there are no signs of a data breach.