DESORDEN Group has added a new transparency demand to their attacks against Malaysian entities: victims must disclose the breach publicly if they have not paid the attackers. If the victim doesn’t disclose and Malaysian media does not report the incident, Malaysia should expect more breaches. The added demands arose after DESORDEN claimed they spent...

Maggie Miller reports: Albania was hit by cyberattacks earlier this year so debilitating that the government considered invoking a NATO declaration that could have pulled all member states into confrontation with Iran, Prime Minister Edi Rama said. It would have been the first time a NATO member state used a cyberattack to invoke Article...

Jake Lapham reports: A 19-year-old Sydney man has been charged after allegedly using information obtained during last month’s Optus data breach to blackmail people. It is alleged the man threatened 93 customers via text messages, saying he would use their details to commit financial crimes unless they paid $2,000. No customers paid the money....

Columbia River Mental Health Services in Vancouver, Washington has issued a press release about a breach that went undetected for approximately one year. From  their press release: Columbia River Mental Health Services (“CRMHS”) recently became aware of suspicious activity related to certain CRMHS email accounts.  CRMHS immediately launched an investigation, with the assistance of...

Andrew Martinez reports: The legal fallout from a massive data breach impacting over 4 million borrowers’ personally identifiable information just got bigger. A federal judge Monday ordered a class action lawsuit against Community Loan Servicing be folded into a larger, similar suit against two of its sister companies, according to court records. The consolidated complaints...

Maria Dinzeo reports: In a verdict with far-reaching implications for security chiefs nationwide, a federal jury convicted Uber’s former head of security Joe Sullivan on Wednesday of concealing a 2016 data breach from authorities and obstructing an investigation by the Federal Trade Commission into Uber’s security practices. Sullivan had only been on the job...

A Canadian man was sentenced to 20 years in prison and ordered to forfeit $21,500,000 today for his role in NetWalker ransomware attacks. The Court will order restitution at a later date. According to court documents, Sebastian Vachon-Desjardins, 35, of Gatineau, Quebec, participated in a sophisticated form of ransomware known as NetWalker. NetWalker ransomware...

Steven Musil reports: The hacker responsible for the massive 2019 data breach of Capital One has been sentenced to time served and five years of probation. US District Judge Robert S. Lasnik said sentencing former Amazon systems engineer Paige Thompson to time in prison would have been “particularly difficult on her because of her mental health...

Sergiu Gatlan reports: The City of Tucson, Arizona, has disclosed a data breach affecting the personal information of more than 125,000 individuals. As revealed in a notice of data breach sent to affected people, an attacker breached the city’s network and exfiltrated an undisclosed number of files containing sensitive information. Read more at Bleeping...