In May, the NYS Comptroller’s Office released an audit conducted to determine if the New York State Education Department (SED) consistently follows all laws and regulations regarding the safety and privacy of students’ data, and whether SED is properly monitoring school districts to ensure they are complying with the legislation and regulations that govern...

On September 15, DataBreaches reported LockBit3.0 had added Hillsborough County Public Schools in Florida to their dark web leak site.  There is currently less than two days left on their countdown clock to leak data, although LockBit3.0 does not always strictly follow up with their own deadlines. While the district originally reported on September...

On Friday, The Jamaica Gleaner reported that the government of Bermuda was hit by a cyberattack, suspected of originating in Russia. In early reports, the government said its telephone, Internet and e-mail systems were disrupted and that all departments were affected, which suggests this was a ransomware attack. The Bermuda Police Service said that...

Anthony Warren reports from Mississippi: Hinds County approved more than than $600,000 in payments Friday to restore its computer system after cyberattacks took it down days ago. At an emergency board meeting on Friday afternoon, the board voted 3-0 to approve paying $335,100 for cyber recovery services to Netlink Voice LLC, and up to...

Mark Harrington reports from Long Island: Suffolk County Executive Steve Bellone last week signed the 13th “local emergency order” tied to the September 2022 ransomware attack, delaying the county operating budget by a week while also declaring states of emergencies tied to the migrant crisis and Hurricane Lee. The latest cyberattack-related emergency declaration cites the...

On Friday, The Kyiv Independent reported that Russian proxies in occupied Crimea announced that there was a cyberattack of an “unprecedented” scale. “The attack occurred after the Russian Defense Ministry announced that a Ukrainian missile had struck Russia’s Black Sea Fleet headquarters in Sevastopol earlier in the day on Sept. 22,” they announced. More...

On September 2, the NoEscape ransomware group added Mulkay Cardiology Consultants to their leak site and claimed to have successfully encrypted them. “We have 60GB of confidential and personal data on more than 30,000 patients, scans, doctor’s conclusions about patients and many other confidential information,” they claimed in their listing about the New Jersey...

Joseph Menn reports on the group of hackers some have called “Scattered Spider:” … New research being presented Friday at the LABScon security conference outside Phoenix gives an origin story to the hackers, who the experts say call themselves Star Fraud. They say the group consists of a few dozen hackers who have connected...

Well, we expected there would be a lot of schools notified by the National Student Clearinghouse about the MOVEit breach, but now we have a bit more of the scope. NSC has notified the California Attorney General’s Office on behalf of almost 900 schools. Their notification letter to those affected indicated that the types...