data breach

Ransomware attack on health giant Ascension hits 5.6 million patients

A May ransomware attack on Ascension, a U.S. healthcare giant with more than 140 hospitals and dozens of senior living facilities, allowed hackers to steal personal and sensitive health information on 5.6 million patients, according to a new filing with Maine’s attorney general. The cyberattack caused widespread disruption across its hospital system, with some staff

Ransomware attack on health giant Ascension hits 5.6 million patients Read More »

Tracker firm Hapn spilling names of thousands of GPS tracking customers

GPS tracking firm Hapn is exposing the names of thousands of its customers due to a website bug, TechCrunch has learned. A security researcher alerted TechCrunch in late November to customer names and affiliations — such as the name of their workplace — spilling from one of Hapn’s servers, which TechCrunch has seen.  Hapn, formerly

Tracker firm Hapn spilling names of thousands of GPS tracking customers Read More »

Nebraska sues Change Healthcare over security failings that led to medical data breach of over 100 million Americans

The U.S. state of Nebraska has sued the healthtech giant Change Healthcare over a series of alleged security failings that resulted in a historical data breach exposing the sensitive health information of at least 100 million Americans.  In a complaint filed this week, Nebraska’s attorney general Mike Hilgers claims UnitedHealth-owned Change Healthcare failed to implement

Nebraska sues Change Healthcare over security failings that led to medical data breach of over 100 million Americans Read More »

Texas medical school says hackers stole sensitive health data of 1.4 million individuals

The Texas Tech University Health Sciences Center confirmed hackers accessed the personal and sensitive health data of over 1.4 million individuals during a September cyberattack. The cyberattack, which also affected TTUHSC’s El Paso campus, saw attackers steal information including Social Security numbers, financial account information, government-issued ID details, and health information — including medical records

Texas medical school says hackers stole sensitive health data of 1.4 million individuals Read More »

Called your doctor after-hours? ConnectOnCall hackers may have stolen your medical data

ConnectOnCall is alerting almost a million individuals whose personal and health information was stolen in a May data breach. ConnectOnCall, owned by healthcare tech company Phreesia, provides a digital answering service to healthcare providers for handling calls from patients outside of working hours. The May breach involves information shared between patients and doctor’s offices that

Called your doctor after-hours? ConnectOnCall hackers may have stolen your medical data Read More »

Bitcoin ATM giant Byte Federal says 58,000 users’ personal data compromised in breach

Byte Federal, one of the largest Bitcoin ATM operators in the U.S., said the personal data of thousands of customers may have been compromised during a recent breach. In a filing with Maine’s attorney general, Florida-based Byte Federal said hackers tried to access the data of 58,000 customers, including names, addresses, phone numbers, government-issued IDs,

Bitcoin ATM giant Byte Federal says 58,000 users’ personal data compromised in breach Read More »

Krispy Kreme discloses cyberattack that is disrupting online orders

International doughnut chain Krispy Kreme disclosed a security incident on Wednesday, which the company said has caused  “certain operational disruptions, including with online ordering in parts of the United States.” Krispy Kreme disclosed the cyberattack in an 8-K filing with the SEC. The company said it was “notified regarding unauthorized activity on a portion of

Krispy Kreme discloses cyberattack that is disrupting online orders Read More »

Hackers are exploiting a flaw in popular file-transfer tools to launch mass hacks, again

Security researchers are warning that hackers are actively exploiting another high-risk vulnerability in a popular file transfer technology to launch mass hacks.  The vulnerability, tracked as CVE-2024-50623, affects software developed by Illinois-based enterprise software company Cleo, according to researchers at cybersecurity company Huntress.  The flaw was first disclosed by Cleo in a security advisory on

Hackers are exploiting a flaw in popular file-transfer tools to launch mass hacks, again Read More »