Tag:

Data Breach

Millville Dispatcher Accessed Sensitive Data: Cumberland County Prosecutor Millville Dispatcher Accessed Sensitive Data: Cumberland County Prosecutor
Millville Dispatcher Accessed Sensitive Data: Cumberland County Prosecutor A 30-year-old Millville dispatcher was arrested and charged with accessing sensitive information, authorities announced Friday, Feb. 27. While employed with the City of Millville as a Public Safety Telecommunicator/Dispatcher for the Millville Police Department, Samantha Simpkins unlawfully accessed or otherwise accessed in excess of her designated authority, multiple restricted items of data from the Millville Police Department and New Jersey Judiciary databases, Cumberland County Prosecutor Jennifer Webb McRae said. Simpkins shared restricted data obtained from sa…
825K NY Drivers’ License Numbers Exposed In Insurance Hacks; Companies To Pay $14.2M 825K NY Drivers’ License Numbers Exposed In Insurance Hacks; Companies To Pay $14.2M
825K NY Drivers’ License Numbers Exposed In Insurance Hacks; Companies To Pay $14.2M More than 825,000 New Yorkers had their personal information exposed in data breaches at major car insurance companies, Attorney General Letitia James announced. The breaches, which targeted online quoting tools at eight auto insurers, allowed hackers to steal driver’s license numbers and dates of birth, according to settlements announced Tuesday, Oct. 14. Some of the stolen data was later used to file fraudulent unemployment claims during the height of the COVID-19 pandemic. An investigation by the Office of the Attorney General and the New York State Department of Financial Services fou…
Peekskill Hacker, 22, Ran Massive Cybercrime Forum, Hoarded Child Abuse Files: Here's His Fate Peekskill Hacker, 22, Ran Massive Cybercrime Forum, Hoarded Child Abuse Files: Here's His Fate
Peekskill Hacker, 22, Ran Massive Cybercrime Forum, Hoarded Child Abuse Files: Here's His Fate A Westchester County man has been resentenced to federal prison for running one of the world’s largest online marketplaces for stolen data and for possessing child sexual abuse material, prosecutors announced.  Conor Brian Fitzpatrick, 22, of Peekskill, received a three-year prison sentence on Tuesday, Sept. 16, the US Department of Justice announced.  Prosecutors said Fitzpatrick admitted to creating and operating BreachForums, an English-language hacking site launched in March 2022 that quickly grew to more than 330,000 members. According to federal officials, it became a go-to…
Personal Data Breach Hits Major Credit Bureau, Exposing Millions: What To Know Personal Data Breach Hits Major Credit Bureau, Exposing Millions: What To Know
Personal Data Breach Hits Major Credit Bureau, Exposing Millions: What To Know More than four million people had their personal information compromised after a credit bureau suffered a major data breach. TransUnion confirmed the breach impacting more than 4.4 million people, national consumer rights law firm Wolf Haldenstein announced. According to a court filing in Texas, names, birthdates, and Social Security numbers were leaked. The breach happened on Monday, July 28, Maine court documents showed. It was discovered two days later, affecting at least 4,461,511 people. A TransUnion spokesperson told CNET the incident was identified and contained within hou…
Gmail Users Urged To Reset Passwords Now: Here's Why Gmail Users Urged To Reset Passwords Now: Here's Why
Gmail Users Urged To Reset Passwords Now: Here's Why It starts with an email that looks official, but isn’t. Google is warning all Gmail and Google Cloud users to change their passwords and boost account security after a surge in phishing and impersonation scams tied to a breach at Salesforce.  While Google’s own systems were not directly compromised, the third-party breach exposed information that hackers are now using in targeted attacks. The schemes include emails and phone calls designed to trick users into revealing their credentials.  Some attackers are posing as IT staff, pressing victims to hand over login codes.  Ot…
Hackers Steal Personal Data From Major HR Software Provider: What To Know Hackers Steal Personal Data From Major HR Software Provider: What To Know
Hackers Steal Personal Data From Major HR Software Provider: What To Know Workday says attackers obtained employee contact information in a recent breach, but did not reach customer human resources systems. In a blog post, Workday confirmed that hackers accessed personal data in a cyberattack that targeted the software giant earlier in August. The breach was discovered on Aug. 6, Bleeping Computer reported. The breach involved a third-party customer database platform, exposing data like employee names, email addresses, and phone numbers. "There is no indication of access to customer tenants or the data within them," Workday wrote. "We acted quickl…
You Can Get Up To $7,500 In Massive Cellphone Data Breach Settlement: Here's How You Can Get Up To $7,500 In Massive Cellphone Data Breach Settlement: Here's How
You Can Get Up To $7,500 In Massive Cellphone Data Breach Settlement: Here's How Customers whose personal or call record information was compromised in two major AT&T data breaches may be eligible to receive as much as $7,500. AT&T has agreed to pay $177 million to settle claims from two data breaches announced in March and July 2024 that exposed sensitive customer information. The settlement covers US residents whose data was included in either incident and offers payments of up to $7,500 for documented losses. The first breach involved names, addresses, phone numbers, email addresses, birth dates, account passcodes, billing account numbers, and Socia…
Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns
Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns A cybercriminal group known for extorting people and companies across the world is now targeting the airline industry. The FBI has issued a warning about Scattered Spider, a hacking group that has  expanded its operations to include major US airlines and their vendors.  The group is known for using convincing impersonation tactics to access corporate networks, often bypassing multi-factor authentication by tricking IT staff into adding unauthorized devices. Scattered Spider impersonates employees or contractors to deceive help desks. "These techniques frequently involve methods …
Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack
Billions Of Google, Facebook, Apple Passwords Breached In Potentially Record Hack A newly discovered trove of stolen login credentials may represent the largest data breach in history, with billions of usernames and passwords now circulating online. Researchers with Cybernews uncovered more than 16 billion records spread across 30 databases, many of them tied to malware known as infostealers. The findings, published Wednesday, June 18, reveal that the leaked data spans social media platforms, business services, VPNs, and developer tools. The leaked datasets provide access to nearly every online service, including major platforms like Apple, Facebook, Google, GitHub, and…
Data Breach Exposed 57K Cooper Health Care Patients' Info, Lawsuits Say Data Breach Exposed 57K Cooper Health Care Patients' Info, Lawsuits Say
Data Breach Exposed 57K Cooper Health Care Patients' Info, Lawsuits Say Cooper Health System is facing a wave of legal woes after revealing a data breach that may have exposed the personal and medical information of more than 57,000 people, according to legal filings and the health care system itself. Two lawsuits, one in federal court and one in New Jersey Superior Court, were filed this week by patients who say the breach was the result of Cooper's “negligence” and “failure to protect sensitive data.” According to a notice posted by Cooper on May 23, the hospital learned that an unauthorized actor had accessed private data on or around May 14, 2024. Coop…
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Most online users say they're worried about data breaches, but still skip basic ways to improve their cybersecurity, according to a new survey. The Acronis Data Privacy in 2025 Survey polled nearly 2,500 adults in the US and seven other countries, finding that many aren't doing enough to protect their personal data. The Swiss tech company found that while 64% of respondents listed data breaches as their top online privacy concern, only one-third back up their data daily or weekly. Fewer than half (46%) said they use security features like two-factor authentication. "Perhaps …
Massive Data Breach Exposes 184 Million Accounts: What To Know Massive Data Breach Exposes 184 Million Accounts: What To Know
Massive Data Breach Exposes 184 Million Accounts: What To Know A cybersecurity researcher has uncovered a massive trove of compromised login credentials, raising new alarms about the scope and scale of InfoStealer malware campaigns. The exposed Elasticsearch database contained more than 184 million unique usernames and passwords. It was not password-protected or encrypted, and it was publicly accessible when discovered earlier this month. The database included login details tied to popular platforms such as Microsoft, Facebook, Instagram, and Snapchat.  It also contained services with potentially greater stakes, including banking portals, health …
Westchester-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data Westchester-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data
Westchester-Based Regeneron Buying Bankrupt 23andMe For $256M, Pledges To Protect DNA Data Regeneron Pharmaceuticals will acquire embattled DNA testing company 23andMe in a $256 million court-supervised sale, promising to honor existing privacy protections and continue consumer services with no changes. The agreement to buy 23andMe was announced in a news release on Monday, May 19. It comes two months after 23andMe filed for Chapter 11 bankruptcy. Under the deal, Westchester County, New York-based Regeneron will take over 23andMe's personal genome service, total health, and research services. The telehealth brand Lemonaid Health will be shut down and Regeneron has offered to…
Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers
Data Breach Exposed Driver's Licenses, Credit Cards Of Hertz Customers Customers of car rental company Hertz may have had their personal information stolen after a data breach exposed driver's license numbers, credit card details, and other sensitive records. Hertz confirmed the breach involved data stored by Cleo Communications, a vendor used by Hertz for file transfers. Hackers exploited security flaws in Cleo's system in October and December 2024, according to the company. Hertz verified on Monday, Feb. 10, that an "unauthorized third party" accessed customer data. The company completed its investigation on Wednesday, April 2, and began notifying affec…
$3.25M USAA Data Breach Settlement: Here's How To Learn If You Could Get Payout $3.25M USAA Data Breach Settlement: Here's How To Learn If You Could Get Payout
$3.25M Usaa Data Breach Settlement: Here's How To Learn If You Could Get Payout Those affected by a major data breach could get a part of a  settlement worth $3.25 million. If your personal information was compromised, you may be eligible for a payout, but you need to act fast to secure your claim before the deadline. The United Services Automobile Association (USAA), a financial services company dedicated to serving military members, veterans, and their families, has agreed to the nationwide class action lawsuit settlement.  This follows allegations that the company failed to adequately protect personal information during a data breach that occurred in May …
Brazilian Man Tried To Extort NJ Company For 3 Mil In Bitcoin Using Stolen Data: Feds Brazilian Man Tried To Extort NJ Company For 3 Mil In Bitcoin Using Stolen Data: Feds
Brazilian Man Tried To Extort NJ Company For 3 Mil In Bitcoin Using Stolen Data: Feds A 29-year-old Brazilian man was arrested and charged on Monday, Dec. 23 with threatening to extort a New Jersey company using stolen data, authorities said. In March 2020, Junior Barros De Oliveira gained unauthorized access and exceeded authorized access to the computer systems of an unnamed Brazilian subsidiary of a New Jersey company, US Attorney Phillip Sellinger said. Exploiting this access, De Oliveira obtained confidential customer information relating to approximately 300,000 customers of the company, Sellinger said. In September 2020, De Oliveira began contacting U.S. representativ…
Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System
Cyberattack Hits Krispy Kreme As Hackers Find Hole In Online Ordering System Hackers have found a hole in Krispy Kreme's online ordering system, leaving some customers temporarily unable to place digital orders for their favorite donuts.  The company has confirmed the incident and stated that its technical team is actively working to resolve the issue. Krispy Kreme reported that the breach influenced its web-based platforms but did not affect in-store operations or the safety of customers' personal data.  The attack was first discovered at the end of November, the company said in a filing with Securities Exchange Commission (SEC). Krispy Kreme said it "i…
Cyber Attack May Have Compromised Social Security Numbers Of NJ Students, District Says Cyber Attack May Have Compromised Social Security Numbers Of NJ Students, District Says
Cyber Attack May Have Compromised Social Security Numbers Of NJ Students, District Says The personal information of some New Jersey high schoolers may have been compromised in a 2023 cyber attack, district officials said. In a statement posted to its website, Shore Regional High School officials said the school experienced "unauthorized access to our network" on or about April 13, 2023. The information potentially impacted by this incident is full name, date of birth, Social Security number, employee ID, driver’s license or state identification, financial information, medical treatment or diagnosis, medical and/or health insurance information, and/or non-directory&nb…
Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says
Personal Info Of 73M AT&T Customers Posted To Dark Web In Massive Data Breach, Company Says Personal information of millions of AT&T customers was posted to the dark web in a major data breach announced by the telecom company Saturday, March 30. The data set appears to be from 2019 or earlier, impacting approximately 73 million current AT&T account holders and approximately 65.4 million former account holders, the company said. "With respect to the balance of the data set, which includes personal information such as social security numbers, the source of the data is still being assessed," AT&T said. "Currently, AT&T does not have evidence of unauthorized acce…
NJ Addiction Centers Victim Of Data Breach NJ Addiction Centers Victim Of Data Breach
NJ Addiction Centers Victim Of Data Breach Addition centers in five locations have suffered a data breach that may compromise patients' private information, officials said. Maryville, a nonprofit addition agency, is offering credit monitoring services for those who may have had their Social Security numbers and other private details exposed as a result of the incident, according to spokesman Bill Crowe. The centers affected are in Williamstown, Turnersville, Pemberton, Vineland and Franklinville. "We have no indication that any information has been misused for identity theft," the agency said. On or around August 22, 2023, Maryvil…
Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft
Medical Company Data Breach: Affected NY Residents Warned Of Potential Identity Theft Millions of New Yorkers are being warned by Attorney General Leticia James to protect themselves against identity theft following a data breach at a medical transcription company.  The warning, issued by James on Tuesday, Nov. 28, urges New York residents to take action to prevent their identities from being stolen in the midst of a data breach at medical transcription company Perry Johnson & Associates.  The Nevada-based company, which provides transcription services to healthcare organizations and physicians to help them dictate and transcribe patient notes, first becam…
Possible Data Breach Puts NJ Hospital Patients At Risk Possible Data Breach Puts NJ Hospital Patients At Risk
Possible Data Breach Puts NJ Hospital Patients At Risk A hospital in South Jersey is warning patients that it may have suffered a serious data breach. Jefferson Cherry Hill Hospital mailed letters last week to patients “whose information may have been involved in a recent privacy incident,” the health system said in a press statement. A worker conducting maintenance discovered on June 15 that "a portable backup device was missing," Jefferson Health said. “Through this process, Jefferson has determined that the protected health information found on this drive that may be viewable could include names, dates of birth, medical record numbers, the …
Data Breach Reported At Mount Pleasant Central School District Data Breach Reported At Mount Pleasant Central School District
Data Breach Reported At Mount Pleasant Central School District A data breach may have exposed information related to some students at a school district in Northern Westchester.  The breach was announced by Mount Pleasant Central School District Superintendent Peter Giarrizzo on Friday, Feb. 17, who said that several student email passwords may have been compromised by the incident.  After the data breach was discovered on Friday, an investigation into the matter found that several passwords belonging to Grade 7 students in the district had been posted to a shared Google Classroom during the 2020-2021 school year. After this document was …
Data Breach Leaks Social Security Numbers In Central Jersey School District Data Breach Leaks Social Security Numbers In Central Jersey School District
Data Breach Leaks Social Security Numbers In Central Jersey School District A school district in Somerset County announced a serious data breach in its computer system Bridgewater-Raritan Regional School District (BRRSD) said an unauthorized user accessed school employees' Social Security numbers between Dec. 10 and Dec. 12, according to this statement.  The district didn’t say how many people were affected by the computer breach. In addition to Social Security numbers, the hacker gained access to insurance enrollment information for employees s and unspecified “other individuals,” the district said. The school district said it sent letters to the affected e…
Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says
Hackers Accessed Personal Data Of 37 Million Customers, T-Mobile Says A hacker accessed the personal data of tens of millions of T-Mobile's customers, the company announced. T-Mobile says it's "currently in the process of informing impacted customers that after a thorough investigation, we have determined that a bad actor used a single Application Programming Interface (or API) to obtain limited types of information on their accounts." The breach began on Friday, Nov. 25, and the data breached included name, billing address, email, phone number, date of birth, T-Mobile account number, and "information such as the number of lines on the account …
Marriott Confirms Data Breach At Baltimore Hotel Marriott Confirms Data Breach At Baltimore Hotel
Marriott Confirms Data Breach At Baltimore Hotel Hackers stole approximately 20 gigabytes of data from a computer at one of Marriott International's Baltimore hotels. The data breach — a ransom attempt against Marriott — happened at Baltimore-Washington International Airport and involved primarily non-sensitive internal business files regarding property operation, according to a statement from a company spokesperson. Between 300 and 400 individuals will be notified. "The threat actor did not gain access to Marriott’s core network," the statement reads, in part. "The incident was contained to a short period of time. Marriott identifi…
Cyberattack At Massachusetts-Based Healthcare Group Jeopardizes 2 Million People's Information Cyberattack At Massachusetts-Based Healthcare Group Jeopardizes 2 Million People's Information
Cyberattack At Massachusetts-Based Healthcare Group Jeopardizes 2 Million People's Information A security breach at a Quincy-based healthcare company has potentially put two million people's personal information at risk.  Shields Health Care Group Inc., or Shields, recently became aware of suspicious activity on its servers stemming from an incident on March 28, the company said in an online statement. An investigation revealed that "an unknown actor" accessed Shields' systems and acquired confidential information from March 7 to March 21, Shields said.  The information included people's Social Security number, birth date, address, provider information,…
Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System
Data Of Nearly One Million NY Students Compromised In Hack Of Online Grading System The personal data of nearly a million New York students has been compromised by hackers attempting to alter grades, investigators announced. In January, Illuminate Education, a taxpayer-funded software company that tracks grades and attendance for the New York City Department of Education, was targeted, resulting in the data of approximately 820,000 students being made available. Specifically, officials said that the hackers gained access to students’ names, birthdays, ethnicities, English-speaking, special-education, teacher schedules, and free-lunch statuses, though information including …
1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds 1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds
1.1M Accounts Compromised In Cyberattacks Of 17 Companies, NY AG Investigation Finds An investigation by the New York Attorney General's Office found that more than 1.1 million accounts were compromised in cyberattacks of 17 companies. Attorney General Letitia James said in an announcement on Wednesday, Jan. 5, that the "Credential Stuffing Attacks" involve repeated, automated attempts to access accounts by using information stolen from other websites. James said often people reuse the same passwords on different sites, which allows cybercriminals to use stolen passwords on other websites.  “Right now, there are more than 15 billion stolen credentials being circu…
Police On Long Island Warning Residents To Ignore Latest Robocall Scam Police On Long Island Warning Residents To Ignore Latest Robocall Scam
Police On Long Island Warning Residents To Ignore Latest Robocall Scam Police on Long Island are investigating a robocall that claimed to be from a police department and referenced a data breach. Riverhead Police said the incident took place around 10 a.m. Monday, Dec. 6, when the department received a report of an unwanted robocall from phone number 631-902-5121 with the caller ID of Melissa Frost. When answered a recorded message stated the caller was Sgt. Frost of the Riverhead Police Department, calling about a data breach at the Riverhead High School, the department said. "This call was not from the Riverhead Police Department or any other affiliated ag…
NY School District Victim Of Ransomware Attack NY School District Victim Of Ransomware Attack
NY School District Victim Of Ransomware Attack Files stolen from a New York school district have reportedly been posted on the dark web following a ransomware attack after hackers did not receive ransom payments. On Long Island, acting Manhasset Schools Superintendent Gaurav Passi issued an alert to the community that said that the district was notified that some files stolen from school servers had been posted online. “We were notified that yesterday, the criminals posted certain files to the dark web that they stole from our servers,” he advised. “We are currently reviewing these files, and we will provide direct notification, in ac…