cyberattack

US car dealerships face ongoing outage after CDK cyberattacks

Auto retailers and car dealerships across the U.S. are facing another day of outages after a second cyberattack hit tech company CDK Global, which develops software used for managing auto customers and their vehicles. In a message from CDK sent to customers Thursday, the company said the additional cyberattack late Wednesday may result in extended […]

US car dealerships face ongoing outage after CDK cyberattacks Read More »

UK national accused of hacking dozens of US companies arrested in Spain

Spanish police have arrested a British national accused of leading an organized cybercrime group that broke into dozens of U.S. companies.  The unnamed British national, aged 22, was arrested at Palma airport as he was about to leave the country on a charter flight to Naples, Spanish police confirmed in a press release.  In a

UK national accused of hacking dozens of US companies arrested in Spain Read More »

Mandiant says hackers stole a ‘significant volume of data’ from Snowflake customers

Security researchers say they believe financially motivated cybercriminals have stolen a “significant volume of data” from hundreds of customers hosting their vast banks of data with cloud storage giant Snowflake. Incident response firm Mandiant, which is working with Snowflake to investigate the recent spate of data thefts, said in a blog post Monday that the

Mandiant says hackers stole a ‘significant volume of data’ from Snowflake customers Read More »

‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

The incoming phone call flashes on a victim’s phone. It may only last a few seconds, but can end with the victim handing over codes that give cybercriminals the ability to hijack their online accounts or drain their crypto and digital wallets. “This is the PayPal security team here. We’ve detected some unusual activity on

‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts Read More »

Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

The ransomware gang that hacked into U.S. health tech giant Change Healthcare used a set of stolen credentials to remotely access the company’s systems that weren’t protected by multifactor authentication (MFA), according to the chief executive of its parent company, UnitedHealth Group (UHG). UnitedHealth CEO Andrew Witty provided the written testimony ahead of a House

Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO Read More »

Health insurance giant Kaiser will notify millions of a data breach after sharing patients’ data with advertisers

U.S. health conglomerate Kaiser is notifying millions of current and former members of a data breach after confirming it shared patients’ information with third-party advertisers, including Google, Microsoft and X (formerly Twitter). In a statement shared with TechCrunch, Kaiser said that it conducted an investigation that found “certain online technologies, previously installed on its websites

Health insurance giant Kaiser will notify millions of a data breach after sharing patients’ data with advertisers Read More »

UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’

Health insurance giant UnitedHealth Group has confirmed that a ransomware attack on its health tech subsidiary Change Healthcare earlier this year resulted in a huge theft of Americans’ private healthcare data. UnitedHealth said in a statement on Monday that a ransomware gang took files containing personal data and protected health information that it says may

UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’ Read More »

Lawmakers vote to reauthorize US spying law that critics say expands government surveillance

Lawmakers passed legislation early Saturday reauthorizing and expanding a controversial U.S. surveillance law shortly after the powers expired at midnight, rejecting opposition by privacy advocates and lawmakers. The bill, which passed on a 60-34 vote, reauthorizes powers known as Section 702 under the Foreign Intelligence Surveillance Act (FISA), which allows the government to collect the

Lawmakers vote to reauthorize US spying law that critics say expands government surveillance Read More »