By breaching these companies directly, the hackers gained access to all of the data through their customer connections to Salesforce. The vulnerability allowed Clop to steal reams of sensitive employee data, including data belonging to executives, from dozens of organizations that rely on Oracle’s software. But nothing quite came as close as DOGE ripping through federal government departments and databases in what became the biggest raid of U.S. government data in its history. The year started with a brazen cyberattack by Chinese hackers on the U.S. ABC News reports that the FBI’s job site has been the primary way to apply for a job with the bureau since 2017. The hackers told TechCrunch that they are not seeking a financial ransom but are demanding the correction of an earlier FBI-issued report, which they say misrepresents their activities.
Reportedly, stolen information includes patient names, addresses, dates of birth, social security numbers, drivers’ license numbers, medical record numbers, health insurance information, and clinical information related to some patients’ care. Over a three-year window, it’s suspected that as many as 4.7 million patients could be impacted. It’s estimated 200,000 customers were impacted, and leaked data included names, email addresses, phone numbers, ID numbers, IP addresses, bank account information, and a public crypto wallet address. Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis.
The incident resulted in unauthorised access to email accounts of a handful of attorneys at law-firm Williams & Connolly, and though the actor is believed to be a China-nexus state-linked threat group, the firm found “no evidence that confidential client data was taken from central databases”. The impact of the cyber attack was that “unauthorised access by a third party to a limited number of its IT systems” resulted in the compromise of “certain employee, customer and supplier information” at Australian Fluid Power. Some companies and organizations have had to shut down due to the fallout costs of a cyberattack.
- “Preliminary results from the investigation indicate that the compromised database did not contain personal or protected information about patients or employees.”
- While the bureau has notified employees, it’s less clear if the FBI has disclosed the incident to lawmakers in Congress who have oversight of the FBI.
- The firm, based in Kentucky, says that threat actors gained unauthorized access to personal information about millions of patients, as well as a considerable number of employees.
- Uber employees found out their systems had been breached after the hacker broke into a staff member’s slack account and sent out messages confirming they’d successfully compromised their network.
- A report said the hackers, identified as threat actor Storm‑2657, used phishing campaigns to compromise HR/payment systems at U.S. universities and divert employee salaries into attacker-controlled accounts.
Location of Breached Protected Health Information
Qantas Airways confirmed that the stolen customer data from its July breach had been published online by the hacker collective Scattered Lapsus$ Hunters, including 2.8 million records with names, email addresses and Frequent Flyer numbers, and 1.7 million with additional details (such as home addresses, dates of birth, phone numbers, gender or meal preferences). The cyber attack forced two Massachusetts hospitals to take their IT network offline, divert ambulance patients, and limit radiology and lab services, severely disrupting patient care. Dairy Farmers of America confirmed a ransomware attack in June 2025, claiming there was no evidence of misuse of the exposed employee data, while the https://chinanews777.com/neoprofit-is-the-leading-platform-for-automated-cryptocurrency-trading.html Play ransomware gang claimed responsibility, asserting they had stolen sensitive company and employee information before leaking it online. Around 70% of cyberattacks target business email accounts, so having staff that can recognize danger when it’s present is just as important as any software. A threat actor that goes by the name of IntelBroker posted some of the leaked data on the infamous hacking forum Breached.
- A September update confirmed that LastPass’s security measures prevented customer data from being breached, and the company reminded customers that they do not have access to or store users’ master passwords.
- The hackers broke in by exploiting a vulnerability in an Oracle PeopleSoft server, which hosts reams of human resources information on agents and now-employees who applied through the portal.
- Allianz Life Insurance Company confirmed that on July 16, 2025, cybercriminals accessed a third-party CRM system, exposing personal data such as names, addresses, dates of birth, and Social Security numbers of 1.49 million customers and employees.
- CHC, which provides such services as school-based healthcare and substance abuse programs, said that the unnamed hacker compromised its network on January 2 to steal patients’ personal data and sensitive health information.
- Hackers targeted at least two companies, Salesloft and Gainsight, both of which allow their customers to handle and analyze the data that they store in Salesforce.
The hackers broke in by exploiting a vulnerability in an Oracle PeopleSoft server, which hosts reams of human resources information on agents and now-employees who applied through the portal. As reported by MS Now reporter Ken Dilanian over the weekend, the FBI has since declared a “cyber security incident” in an internal notification to staff, telling employees that their names, addresses, job titles, and their Social Security numbers were exposed. The FBI has not publicly confirmed a breach beyond a statement last week, in which it said it was aware that a hacking group had claimed a cyberattack but that the theft of data was “still undetermined.” The Federal Bureau of Investigation has reportedly told its agents and support staff that their personal information was stolen in a recent cyberattack that targeted the bureau’s job application portal. The Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive after a nation-state-linked threat actor gained persistent access to F5 Networks’s systems, exfiltrating portions of the BIG-IP source code and undocumented vulnerability information, posing an “imminent threat” to U.S. federal networks.
A ransomware group breached its network, stole patient data, encrypted files, and demanded payment to delete the stolen data and unlock the encrypted files. This data includes patients’ addresses, phone numbers, diagnoses, treatment details, test results, Social Security numbers, and health insurance information. Community Health Center (CHC), a Connecticut-based nonprofit healthcare provider, said in January that a hacker had accessed the sensitive data of more than a million patients. Individuals working for Elon Musk, who is behind the Trump administration’s Department of Government Efficiency, or DOGE, took control of top federal departments and datasets to access huge troves of sensitive federal data. At the time, PowerSchool said that unnamed hackers used a single compromised credential to get into its customer support portal, granting access to the wealth of data in its school information system, PowerSchool SIS, which schools use to manage student records. Security experts said the breach was the most economically damaging cyberattack to hit the United Kingdom in history, showing that disruption may be more valuable for financially motivated hackers than stolen data.
Uber employees found out their systems had been breached after the hacker broke into a staff member’s slack account and sent out messages confirming they’d successfully compromised their network. “Preliminary results from the investigation indicate that the compromised database did not contain personal or protected information about patients or employees.” The firm, based in Kentucky, says that threat actors gained unauthorized access to personal information about millions of patients, as well as a considerable number of employees. While the bureau has notified employees, it’s less clear if the FBI has disclosed the incident to lawmakers in Congress who have oversight of the FBI. A report said the hackers, identified as threat actor Storm‑2657, used phishing campaigns to compromise HR/payment systems at U.S. universities and divert employee salaries into attacker-controlled accounts.
Initially arrested back in October of last year, the perpetrator sent SMS communications to 92 people saying that their personal information would be sold to other hackers if they didn’t pay AU$ 2000. Reuters reports that the breached system is usually used to process “TRANServe transit benefits,” which are effectively transport expenses that government employees commuting into offices can claim back. The Medical Center – which has over 40,000 employees – was one of several organizations added to the group leak database in November 2023. This may have violated state laws determining how long companies have to notify impacted customers, some reports have pointed out. An unauthorized third party had accessed their systems, and viewed or copied the data of current and former patients, and employees. Stolen files include patient information, such as names, addresses, dates of birth, driver’s license numbers, financial account numbers, medical information, and health insurance information.
North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack
Personally identifiable information of FBI employees, including social security numbers, addresses and job titles,… Do you feel that companies are doing enough to protect your data from hackers https://carsinfo.net/trading-platform-quantum-ai-main-advantages-and-scope-of-application.html and other cyber threats? Eight car-insurance firms in New York were ordered to pay US $14.2 million after hackers exploited “pre-fill” quoting tools to steal the personal info of over 825,000 New Yorkers, including driver’s-license numbers and DOBs, which were later used in fraudulent unemployment claims. Chinese state-linked threat actor Jewelbug (also known as Earth Alux) breached the systems of Russian IT service provider Positive Technologies between January and May 2025, compromising its software build and code-repository environments and potentially exposing dozens of Russian companies to further infiltration. The Harvard University breach impacted a limited number of parties tied to a small administrative unit via a vulnerability in Oracle E‑Business Suite, with the Cl0p gang claiming responsibility. The impact of the cyber attack was that the hacker group Crimson Collective claimed access to sensitive production assets, developer files, and backups of Nintendo Co., Ltd.’s internal systems.
Two 17-year-old boys were arrested in Bishop’s Stortford, Hertfordshire, on October 7, 2025, for a cyber attack on the Kido nursery chain, during which hackers stole and published profiles of 10 children online and threatened to release more unless a ransom was paid. Allianz Life Insurance Company confirmed that on July 16, 2025, cybercriminals accessed a third-party CRM system, exposing personal data such as names, addresses, dates of birth, and Social Security numbers of 1.49 million customers and employees. A September update confirmed that LastPass’s security measures prevented customer data from being breached, and the company reminded customers that they do not have access to or store users’ master passwords. CHC, which provides such services as school-based healthcare and substance abuse programs, said that the unnamed hacker compromised its network on January 2 to steal patients’ personal data and sensitive health information. Hackers targeted at least two companies, Salesloft and Gainsight, both of which allow their customers to handle and analyze the data that they store in Salesforce. Salesforce customers had a rough year after two separate data breaches at downstream tech companies allowed hackers to steal a billion records of customer data stored in Salesforce’s cloud.
