News

Prank Call Service PrankDial Exposed 138 Million Records Online

Jeremiah Fowler reports: On October 28th I discovered a non-password protected database that contained millions of log files. Upon further research, the records all contained information that identified PrankDial.com as the owner of the data. I immediately sent a responsible disclosure notice and the database was closed for public access shortly after. According to...

Analyzing Careless Users, An Often Overlooked Threat

Many have written about how to mitigate the risks posed by malicious insiders. But what about the vulnerabilities associated with Careless Users? What actions can healthcare organizations take to better prevent a breach caused by internal negligence? The Clearwater CyberIntelligence® Institute analyzed the Critical and High risks found in Clearwater’s IRM|Analysis™ database, specifically focusing...

TX: PNGISD technology held for ransom

Mary Meaux reports: Port Neches-Groves Independent School District was hit by ransomware, causing the disruption of all technology connections on Tuesday. Assistant superintendent Julie Gauthier provided a statement about the cyber security attack, saying the district is working with local law enforcement and forensic and cyber security specialists to remedy the situation. Read more...

CT: Starling Physicians Warns Patients of Data Breach

NBC reports: According to an announcement released Tuesday, Starling was the target of a cyber-phishing attack on February 8. When the Connecticut-based healthcare group learned of the breach, they secured the affected email accounts and hired a forensic security firm. On September 12, investigation found that the email accounts affected by the attack contained...