Tag:

Data Breach

825K NY Drivers’ License Numbers Exposed In Insurance Hacks; Companies To Pay $14.2M 825K NY Drivers’ License Numbers Exposed In Insurance Hacks; Companies To Pay $14.2M
825K NY Drivers’ License Numbers Exposed In Insurance Hacks; Companies To Pay $14.2M More than 825,000 New Yorkers had their personal information exposed in data breaches at major car insurance companies, Attorney General Letitia James announced. The breaches, which targeted online quoting tools at eight auto insurers, allowed hackers to steal driver’s license numbers and dates of birth, according to settlements announced Tuesday, Oct. 14. Some of the stolen data was later used to file fraudulent unemployment claims during the height of the COVID-19 pandemic. An investigation by the Office of the Attorney General and the New York State Department of Financial Services fou…
NY Hacker, 22, Ran Massive Cybercrime Forum, Hoarded Child Abuse Files: Here's His Fate NY Hacker, 22, Ran Massive Cybercrime Forum, Hoarded Child Abuse Files: Here's His Fate
NY Hacker, 22, Ran Massive Cybercrime Forum, Hoarded Child Abuse Files: Here's His Fate A Westchester County man has been resentenced to federal prison for running one of the world’s largest online marketplaces for stolen data and for possessing child sexual abuse material, prosecutors announced.  Conor Brian Fitzpatrick, 22, of Peekskill, received a three-year prison sentence on Tuesday, Sept. 16, the US Department of Justice announced.  Prosecutors said Fitzpatrick admitted to creating and operating BreachForums, an English-language hacking site launched in March 2022 that quickly grew to more than 330,000 members. According to federal officials, it became a go-to…
Personal Data Breach Hits Major Credit Bureau, Exposing Millions: What To Know Personal Data Breach Hits Major Credit Bureau, Exposing Millions: What To Know
Personal Data Breach Hits Major Credit Bureau, Exposing Millions: What To Know More than four million people had their personal information compromised after a credit bureau suffered a major data breach. TransUnion confirmed the breach impacting more than 4.4 million people, national consumer rights law firm Wolf Haldenstein announced. According to a court filing in Texas, names, birthdates, and Social Security numbers were leaked. The breach happened on Monday, July 28, Maine court documents showed. It was discovered two days later, affecting at least 4,461,511 people. A TransUnion spokesperson told CNET the incident was identified and contained within hou…
Gmail Users Urged To Reset Passwords Now: Here's Why Gmail Users Urged To Reset Passwords Now: Here's Why
Gmail Users Urged To Reset Passwords Now: Here's Why It starts with an email that looks official, but isn’t. Google is warning all Gmail and Google Cloud users to change their passwords and boost account security after a surge in phishing and impersonation scams tied to a breach at Salesforce.  While Google’s own systems were not directly compromised, the third-party breach exposed information that hackers are now using in targeted attacks. The schemes include emails and phone calls designed to trick users into revealing their credentials.  Some attackers are posing as IT staff, pressing victims to hand over login codes.  Ot…
Hackers Steal Personal Data From Major HR Software Provider: What To Know Hackers Steal Personal Data From Major HR Software Provider: What To Know
Hackers Steal Personal Data From Major HR Software Provider: What To Know Workday says attackers obtained employee contact information in a recent breach, but did not reach customer human resources systems. In a blog post, Workday confirmed that hackers accessed personal data in a cyberattack that targeted the software giant earlier in August. The breach was discovered on Aug. 6, Bleeping Computer reported. The breach involved a third-party customer database platform, exposing data like employee names, email addresses, and phone numbers. "There is no indication of access to customer tenants or the data within them," Workday wrote. "We acted quickl…
You Can Get Up To $7,500 In Massive Cellphone Data Breach Settlement: Here's How You Can Get Up To $7,500 In Massive Cellphone Data Breach Settlement: Here's How
You Can Get Up To $7,500 In Massive Cellphone Data Breach Settlement: Here's How Customers whose personal or call record information was compromised in two major AT&T data breaches may be eligible to receive as much as $7,500. AT&T has agreed to pay $177 million to settle claims from two data breaches announced in March and July 2024 that exposed sensitive customer information. The settlement covers US residents whose data was included in either incident and offers payments of up to $7,500 for documented losses. The first breach involved names, addresses, phone numbers, email addresses, birth dates, account passcodes, billing account numbers, and Socia…
Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns
Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns A cybercriminal group known for extorting people and companies across the world is now targeting the airline industry. The FBI has issued a warning about Scattered Spider, a hacking group that has  expanded its operations to include major US airlines and their vendors.  The group is known for using convincing impersonation tactics to access corporate networks, often bypassing multi-factor authentication by tricking IT staff into adding unauthorized devices. Scattered Spider impersonates employees or contractors to deceive help desks. "These techniques frequently involve methods …
Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack
Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack A newly discovered trove of stolen login credentials may represent the largest data breach in history, with billions of usernames and passwords now circulating online. Researchers with Cybernews uncovered more than 16 billion records spread across 30 databases, many of them tied to malware known as infostealers. The findings, published Wednesday, June 18, reveal that the leaked data spans social media platforms, business services, VPNs, and developer tools. The leaked datasets provide access to nearly every online service, including major platforms like Apple, Facebook, Google, GitHub, and…
Data Breach Exposed 57K Healthcare System Patients' Info, Lawsuits Say Data Breach Exposed 57K Healthcare System Patients' Info, Lawsuits Say
Data Breach Exposed 57K Healthcare System Patients' Info, Lawsuits Say Cooper Health System is facing a wave of legal woes after revealing a data breach that may have exposed the personal and medical information of more than 57,000 people, according to legal filings and the health care system itself. Two lawsuits, one in federal court and one in New Jersey Superior Court, were filed this week by patients who say the breach was the result of Cooper's “negligence” and “failure to protect sensitive data.” According to a notice posted by Cooper on May 23, the hospital learned that an unauthorized actor had accessed private data on or around May 14, 2024. Coop…
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Most online users say they're worried about data breaches, but still skip basic ways to improve their cybersecurity, according to a new survey. The Acronis Data Privacy in 2025 Survey polled nearly 2,500 adults in the US and seven other countries, finding that many aren't doing enough to protect their personal data. The Swiss tech company found that while 64% of respondents listed data breaches as their top online privacy concern, only one-third back up their data daily or weekly. Fewer than half (46%) said they use security features like two-factor authentication. "Perhaps …
Massive Data Breach Exposes 184 Million Accounts: What To Know Massive Data Breach Exposes 184 Million Accounts: What To Know
Massive Data Breach Exposes 184 Million Accounts: What To Know A cybersecurity researcher has uncovered a massive trove of compromised login credentials, raising new alarms about the scope and scale of InfoStealer malware campaigns. The exposed Elasticsearch database contained more than 184 million unique usernames and passwords. It was not password-protected or encrypted, and it was publicly accessible when discovered earlier this month. The database included login details tied to popular platforms such as Microsoft, Facebook, Instagram, and Snapchat.  It also contained services with potentially greater stakes, including banking portals, health …
NY-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data NY-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data
Ny-based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data Regeneron Pharmaceuticals will acquire embattled DNA testing company 23andMe in a $256 million court-supervised sale, promising to honor existing privacy protections and continue consumer services with no changes. The agreement to buy 23andMe was announced in a news release on Monday, May 19. It comes two months after 23andMe filed for Chapter 11 bankruptcy. Under the deal, Westchester County, New York-based Regeneron will take over 23andMe's personal genome service, total health, and research services. The telehealth brand Lemonaid Health will be shut down and Regeneron has offered to…
Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers
Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers Customers of car rental company Hertz may have had their personal information stolen after a data breach exposed driver's license numbers, credit card details, and other sensitive records. Hertz confirmed the breach involved data stored by Cleo Communications, a vendor used by Hertz for file transfers. Hackers exploited security flaws in Cleo's system in October and December 2024, according to the company. Hertz verified on Monday, Feb. 10, that an "unauthorized third party" accessed customer data. The company completed its investigation on Wednesday, April 2, and began notifying affec…
$3.25M USAA Data Breach Settlement: Here's How To Learn If You Could Get Payout $3.25M USAA Data Breach Settlement: Here's How To Learn If You Could Get Payout
$3.25M Usaa Data Breach Settlement: Here's How To Learn If You Could Get Payout Those affected by a major data breach could get a part of a  settlement worth $3.25 million. If your personal information was compromised, you may be eligible for a payout, but you need to act fast to secure your claim before the deadline. The United Services Automobile Association (USAA), a financial services company dedicated to serving military members, veterans, and their families, has agreed to the nationwide class action lawsuit settlement.  This follows allegations that the company failed to adequately protect personal information during a data breach that occurred in May …
Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System
Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System Hackers have found a hole in Krispy Kreme's online ordering system, leaving some customers temporarily unable to place digital orders for their favorite donuts.  The company has confirmed the incident and stated that its technical team is actively working to resolve the issue. Krispy Kreme reported that the breach influenced its web-based platforms but did not affect in-store operations or the safety of customers' personal data.  The attack was first discovered at the end of November, the company said in a filing with Securities Exchange Commission (SEC). Krispy Kreme said it "i…
Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says
Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says Personal information of millions of AT&T customers was posted to the dark web in a major data breach announced by the telecom company Saturday, March 30. The data set appears to be from 2019 or earlier, impacting approximately 73 million current AT&T account holders and approximately 65.4 million former account holders, the company said. "With respect to the balance of the data set, which includes personal information such as social security numbers, the source of the data is still being assessed," AT&T said. "Currently, AT&T does not have evidence of unauthorized acce…
Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft
Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft Millions of New Yorkers are being warned by Attorney General Leticia James to protect themselves against identity theft following a data breach at a medical transcription company.  The warning, issued by James on Tuesday, Nov. 28, urges New York residents to take action to prevent their identities from being stolen in the midst of a data breach at medical transcription company Perry Johnson & Associates.  The Nevada-based company, which provides transcription services to healthcare organizations and physicians to help them dictate and transcribe patient notes, first becam…
Data Breach Reported At School District In Northern Westchester Data Breach Reported At School District In Northern Westchester
Data Breach Reported At School District In Northern Westchester A data breach may have exposed information related to some students at a school district in Northern Westchester.  The breach was announced by Mount Pleasant Central School District Superintendent Peter Giarrizzo on Friday, Feb. 17, who said that several student email passwords may have been compromised by the incident.  After the data breach was discovered on Friday, an investigation into the matter found that several passwords belonging to Grade 7 students in the district had been posted to a shared Google Classroom during the 2020-2021 school year. After this document was …
Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says
Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says A hacker accessed the personal data of tens of millions of T-Mobile's customers, the company announced. T-Mobile says it's "currently in the process of informing impacted customers that after a thorough investigation, we have determined that a bad actor used a single Application Programming Interface (or API) to obtain limited types of information on their accounts." The breach began on Friday, Nov. 25, and the data breached included name, billing address, email, phone number, date of birth, T-Mobile account number, and "information such as the number of lines on the account …
Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System
Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System The personal data of nearly a million New York students has been compromised by hackers attempting to alter grades, investigators announced. In January, Illuminate Education, a taxpayer-funded software company that tracks grades and attendance for the New York City Department of Education, was targeted, resulting in the data of approximately 820,000 students being made available. Specifically, officials said that the hackers gained access to students’ names, birthdays, ethnicities, English-speaking, special-education, teacher schedules, and free-lunch statuses, though information including …
1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds 1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds
1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds An investigation by the New York Attorney General's Office found that more than 1.1 million accounts were compromised in cyberattacks of 17 companies. Attorney General Letitia James said in an announcement on Wednesday, Jan. 5, that the "Credential Stuffing Attacks" involve repeated, automated attempts to access accounts by using information stolen from other websites. James said often people reuse the same passwords on different sites, which allows cybercriminals to use stolen passwords on other websites.  “Right now, there are more than 15 billion stolen credentials being circu…
NY School District Victim Of Ransomware Attack NY School District Victim Of Ransomware Attack
NY School District Victim Of Ransomware Attack Files stolen from a New York school district have reportedly been posted on the dark web following a ransomware attack after hackers did not receive ransom payments. On Long Island, acting Manhasset Schools Superintendent Gaurav Passi issued an alert to the community that said that the district was notified that some files stolen from school servers had been posted online. “We were notified that yesterday, the criminals posted certain files to the dark web that they stole from our servers,” he advised. “We are currently reviewing these files, and we will provide direct notification, in ac…
Wegmans Announces Breach Of Customers' Personal Information Wegmans Announces Breach Of Customers' Personal Information
Wegmans Announces Breach Of Customers' Personal Information Wegmans is warning customers that some personal information may have been exposed to hackers due to a recent data breach. The grocery giant issued an alert this week to notify customers that two databases used for Wegmans internal business purposes were inadvertently left open to potential outside access due to a configuration issue. Officials said that customer names, addresses, phone numbers, birth dates, Shoppers Club numbers, e-mail addresses and passwords for access to Wegmans.com accounts were included in the databases. "However, all impacted Wegmans.com account passwords were, in t…
Quest Diagnostics Says Nearly 12M May Have Had Financial, Personal Info Exposed In Data Breach Quest Diagnostics Says Nearly 12M May Have Had Financial, Personal Info Exposed In Data Breach
Quest Diagnostics Says Nearly 12M May Have Had Financial, Personal Info Exposed In Data Breach Millions of Quest Diagnostics patients may have had their financial, medical and other personal information exposed in a data breach, the company announced on Monday. Officials at Quest Diagnostics said Monday that 11.9 million peoples’ personal information, including Social Security numbers may have been compromised after one of its billing collectors reported a data breach. According to Quest Diagnostics, American Medical Collection Agency (AMCA) notified the company and a Quest contractor that uses AMCA’s billing services last month. The number of patients impacted was only recently dete…
These Are Most Hacked Passwords According To Brand-New Report These Are Most Hacked Passwords According To Brand-New Report
These Are Most Hacked Passwords According To Brand-New Report Despite the prevalence of online hackers and the concerns of cybersecurity breaches, many continue to use simple and easy to guess passwords that have led to data breaches, according to a new report. The UK’s National Cyber Security Centre (NCSC) first “cyber survey” determined the most commonly used passwords that were received in data breaches. According to the report, the most commonly used passwords that have been hacked are: 123456 (23.2 million); 123456789 (7.7 million); qwerty (3.8 million); password (3.6 million); 111111 (3.1 million); 12345678; abc123; 1234567;  password1, a…
'Massive, Extended' Marriott Breach Affects 500 Million Starwood Guests 'Massive, Extended' Marriott Breach Affects 500 Million Starwood Guests
'Massive, Extended' Marriott Breach Affects 500 Million Starwood Guests In one of the largest breaches of consumer data ever, up to 500 million guests' information may have been accessed as part of a breach of its Starwood guest reservation database, Marriott International announced on Friday morning. Following a three-month investigation, the company discovered there had been unauthorized access since 2014 and that an "unauthorized party" had copied and encrypted information. "The company has not finished identifying duplicate information in the database, but believes it contains information on up to approximately 500 million guests who made a r…
Facebook Hack Update: 14 Million Had Additional Data Stolen, Including Search Histories Facebook Hack Update: 14 Million Had Additional Data Stolen, Including Search Histories
Facebook Hack Update: 14 Million Had Additional Data Stolen, Including Search Histories Facebook has provided an update and notified users who had their phone numbers, email addresses and other personal information accessed after a hacker gained access to the site. In a call on Friday, Facebook officials said that the FBI is “actively investigating” the breach, which impacted nearly 30 million (down from the 50 million reported last month), including 14 million users who had additional information hacked, including their location, religion and search histories. According to the company, it still does not know the full extent of the attack, and other smaller-scale attacks may h…
Personal Info Of 50 Million Facebook Users Breached In Attack Personal Info Of 50 Million Facebook Users Breached In Attack
Personal Info Of 50 Million Facebook Users Breached In Attack Millions of people are not going to “like” hearing that a hacker gained access to Facebook accounts in the latest cyber attack to strike the company. A hacker gained access to the information of nearly 50 million Facebook user accounts in what appears to be the largest security breach in the company’s history. In a message posted on Friday, Facebook CEO Mark Zuckerberg, a White Plains native who attended Ardsley High School, said that “we do not yet know whether these accounts were misused, but we are continuing to look into this and will update when we learn more.” Facebook said that the …
Chili's Reports Data Breach At 'Certain Restaurants' Chili's Reports Data Breach At 'Certain Restaurants'
Chili's Reports Data Breach At 'Certain Restaurants' Chili’s has become the latest chain to be impacted by a data breach. The popular eatery’s parent company, Brinker International, announced this week that some customer credit and debit card information has been compromised at several Chili’s locations throughout the country in March and April this year, though the scope of the data breach remains under investigation. "We sincerely apologize to those who may have been affected and assure you we are working diligently to resolve this incident," Brinker said in a statement. They reportedly discovered the data breach on May 11. Accor…
Card Data Stolen From 5 Million Lord & Taylor, Saks Fifth Avenue Customers Card Data Stolen From 5 Million Lord & Taylor, Saks Fifth Avenue Customers
Card Data Stolen From 5 Million Lord & Taylor, Saks Fifth Avenue Customers Two of the nation's premier department stores suffered a security breach that has compromised credit and debit card as well as personal information for more than five million customers. About 125,000 cards used at Lord & Taylor and Saks Fifth Avenue have been released for sale so far on dark web forums, according to Gemini Advisory, a New York-based cyber-security firm. For a notice about the breach published by Gemini Advisory, click here. A spokesman for the Hudson's Bay Company, which owns both chain stores, confirmed the breach and released separate statements for customers of both…
W-2 Form Tax Scam: Be On The Lookout, IRS Says W-2 Form Tax Scam: Be On The Lookout, IRS Says
W-2 Form Tax Scam: Be On The Lookout, IRS Says The Internal Revenue Service is warning employers and employees in the Hudson Valley of a Form W-2 phishing scam that cost hundreds of organizations and employees thousands of dollars last year. During the last two tax seasons, cybercriminals tricked payroll personnel or people with access to payroll information into disclosing sensitive information for entire workforces, according to the IRS. The scam affected all types of employers, from small and large businesses to public schools and universities, hospitals, tribal governments and charities. In total, more than 900 phishing reports were…