Medya News reports: Sensitive personal data of Turkish citizens and residents of Turkey has been compromised, according to the Free Web Turkey, a platform dedicated to combating internet censorship in the country. On Friday, the platform exposed the existence of a website called Sorgu Paneli, which allows unrestricted access to personal data such as identification...

AFP reports: Switzerland said Thursday that government operational data might have been stolen in a cyberattack on the technology firm that provides software for several departments. “Xplain, a Swiss provider of government software, has been the victim of a ransomware attack. After the stolen data had been encrypted and the company blackmailed, the attackers posted some...

This site cannot keep up with all the class action litigation settlements, but when we do report on one, we try to see what the settlement requirements in terms of improving infosecurity and cybersecurity. Here’s one with a requirement, as reported by The Athletic: The San Francisco 49ers agreed to settle a class action lawsuit stemming from a...

Jean Laroche reports on the impact of the MOVEit breach by Clop threat actors on people in Nova Scotia: The Nova Scotia government revealed Friday that cyber criminals made off with the private information of tens of thousands of people, including high school students, short-term accommodation owners, newborns and people issued parking tickets in the Halifax...

Bill Toulas reports: A hacking group tracked as ‘Asylum Ambuscade’ was observed in recent attacks targeting small to medium-sized companies worldwide, combining cyber espionage with cybercrime. The particular threat group, believed to have been operational since at least 2020, was first identified by Proofpoint in a March 2022 report that focused on a phishing campaign against...

Hayley Raatis reports that about 95,000 students have been affected by the MOVEit file transfer breach that also affected the Minnesota Department of Education. The initial investigation found 24 files were accessed due to the vulnerability. These files included data transferred to MDE from the Minnesota Department of Human Services (DHS) to meet state...

The Justice Department unsealed charges related to the 2011 hack of the cryptocurrency exchange Mt. Gox and the operation of the illicit cryptocurrency exchange BTC-e. According to court documents, Alexey Bilyuchenko, 43, and Aleksandr Verner, 29, both Russian nationals, are charged with conspiring to launder approximately 647,000 bitcoins from their hack of Mt. Gox....

Quick update: Intellihartx LLC in Tennessee is notifying 489,830 of its clients’ patients about the Fortra/GoAnywhere breach by Clop. The types of information that may have been compromised include name, address, medical billing and insurance information, certain medical information such as diagnoses and medication, and demographic information such as date of birth and Social...

Columbus Regional Healthcare System (CRHS) is a non-profit organization in North Carolina licensed for 154 beds.  The Daixin ransomware group claims that on May 18, they encrypted the hospital’s servers after exfiltrating data and deleting backups. A Ransom Demand and Failed Negotiations A spokesperson for Daixin tells DataBreaches that three days after they encrypted...