cybersecurity

Petco confirms security lapse exposed customers’ personal data

Pet products and services giant Petco disclosed a data breach on Wednesday in a filing with California’s attorney general, which the company says involves the personal information of its customers. The state published a sample of the notification letter that Petco is sending to customers affected by the breach. In the letter, Petco said that […]

Petco confirms security lapse exposed customers’ personal data Read More »

Sanctioned spyware maker Intellexa had direct access to government espionage victims, researchers say

Spyware maker Intellexa had remote access to some of its government customers’ surveillance systems, giving company staffers the ability to see the personal data of people whose phones had been hacked with its Predator spyware, according to new evidence published by Amnesty International.  On Thursday, Amnesty and a coalition of media partners, including Israeli newspaper

Sanctioned spyware maker Intellexa had direct access to government espionage victims, researchers say Read More »

Fintech firm Marquis alerts dozens of US banks and credit unions of a data breach after ransomware attack

Fintech company Marquis is notifying dozens of U.S. banks and credit unions that they had customer data stolen in a cyberattack earlier this year.  Details of the cyberattack emerged this week after Marquis filed data breach notices with several U.S. states confirming its August 14 incident as a ransomware attack. Texas-based Marquis is a marketing

Fintech firm Marquis alerts dozens of US banks and credit unions of a data breach after ransomware attack Read More »

A data breach at analytics giant Mixpanel leaves a lot of open questions

A cybersecurity incident at analytics provider Mixpanel announced just hours before the U.S. Thanksgiving holiday weekend could set a new standard for how not to announce a data breach.  To recap: In a bare bones blog post last Wednesday, Mixpanel chief executive Jen Taylor announced that the company had detected an unspecified security incident on

A data breach at analytics giant Mixpanel leaves a lot of open questions Read More »

Korea’s Coupang says data breach exposed nearly 34M customers’ personal information

South Korean e-commerce platform Coupang over the weekend said nearly 34 million Korean customers’ personal information had been leaked in a data breach that had been ongoing for more than five months. The company said it first detected the unauthorized exposure of 4,500 user accounts on November 18, but a subsequent investigation revealed that the

Korea’s Coupang says data breach exposed nearly 34M customers’ personal information Read More »

Bug in jury systems used by several US states exposed sensitive personal data

Several public websites designed to allow courts across the United States and Canada to manage the personal information of potential jurors had a simple security flaw that easily exposed their sensitive data, including names and home addresses, TechCrunch has exclusively learned. A security researcher, who asked not to be named for this story, contacted TechCrunch

Bug in jury systems used by several US states exposed sensitive personal data Read More »

DOGE days are over as Trump disbands Elon Musk’s team of federal cost-cutters

The Trump administration has disbanded the Department of Government Efficiency, or DOGE, a controversial team of federal cost-cutters previously led by Elon Musk, despite months left of the unit’s mandate. Reuters first reported this weekend that DOGE had broken up, ending the months-long effort by Musk and his associates — many recruited from his various

DOGE days are over as Trump disbands Elon Musk’s team of federal cost-cutters Read More »

US banks scramble to assess data theft after hackers breach financial tech firm

Several U.S. banking giants and mortgage lenders are reportedly scrambling to assess how much of their customers’ data was stolen during a cyberattack on a New York financial technology company earlier this month. SitusAMC, which provides technology for over a thousand commercial and real estate financiers, confirmed in a statement over the weekend that it

US banks scramble to assess data theft after hackers breach financial tech firm Read More »

CrowdStrike fires ‘suspicious insider’ who passed information to hackers

Cybersecurity giant CrowdStrike has confirmed firing a “suspicious insider” last month who allegedly fed information about the company to a notorious hacking group. A hacking collective known as Scattered Lapsus$ Hunters published screenshots late Thursday and Friday morning in a public Telegram channel that allegedly showed insider access to CrowdStrike systems. The screenshots, which TechCrunch

CrowdStrike fires ‘suspicious insider’ who passed information to hackers Read More »

Google says hackers stole data from 200 companies following Gainsight breach

Google has confirmed that hackers have stolen the Salesforce-stored data of more than 200 companies in a large-scale supply chain hack. On Thursday, Salesforce disclosed a breach of “certain customers’ Salesforce data” — without naming affected companies — that was stolen via apps published by Gainsight, which provides a customer support platform to other companies.  

Google says hackers stole data from 200 companies following Gainsight breach Read More »