Dissent Doe :cupofcoffee:

Blogger/journalist at databreaches.net and pogowasright.org. As a retired healthcare professional, breaches in the healthcare sector are my priority.

The header pic is Indy, a Siberian husky we rescued in 2016 after I read how nobody wanted her because she was so difficult. She is now living her best life and is a mushball with me.

Public Key

npub1rh9ks6jqam8nj4kccfk505f70erhhq0g0kcr6w32c5ywyqgltdpsmklmka

NIP-05 Address

[email protected]

Profile Code

nprofile1qqspmjmgdfqwanee2mvvym286yl8u3mms858mvpa8g4v2z8zqy04kscpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dspugzsp

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1rh9ks6jqam8nj4kccfk505f70erhhq0g0kcr6w32c5ywyqgltdpsmklmka

Show more details

Last Notes

2026-03-23 14:23:56 GMT

Also NEW by me:
"If threat actors gave you a chance to redact the patient data they hacked before they leak it, would you take them up on the offer? Read about the Woundtech incident."
I've never encountered any threat actors spending so much time redacting patient data before they leak it -- and even giving their victim the opportunity to redact the hacked data tranche before the threat actors leak it.
Read more about this one at:
https://databreaches.net/2026/03/23/if-threat-actors-gave-you-a-chance-to-redact-the-patient-data-they-hacked-before-they-leak-it-would-you-take-them-up-on-the-offer-read-about-the-woundtech-incident/
#databreach #healthsec #woundtech #cybersecurity #redaction #incidentresponse #FulcrumSec
@nprofile…gvek @nprofile…ydzz @nprofile…apgm @nprofile…uvky @nprofile…k3pe

2025-12-20 15:01:51 GMT

ANNOUNCE: Survey on threats experienced by journalists and security researchers
Are you a security researcher or a journalist in the cybersecurity/cybercrime space?
DataBreaches.net and Zack Whittaker at this.weekinsecurity.com are conducting a survey on the types of threats researchers and journalists have faced, including legal threats or legal process and threats of violence from cybercriminals.
The survey is at https://forms.gle/P9jr6VxfD1LV6odg9
Please complete the survey and share the link on social media and with your colleagues and friends to help us understand how widespread some problems may be.
Reposts with more tags to other individuals would be appreciated.
#journalism #pressfreedom #cybersecurity #risk #threats
@nprofile…tsvd @nprofile…889j @nprofile…4lw5 @nprofile…ktjy @nprofile…ppe2 @nprofile…tsl9

2025-12-07 15:09:21 GMT

When I get mad at #USPol stuff, I try to remind myself of all the good people in this country.
A woman who is a dog-sitter mentioned to her clients that she was collecting donations for the local shelter. Within days, here's what her living room looked like.
Bless her and the donors.
#DogsofMastodon #AdoptDontShop
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/678/908/499/775/515/original/c64ead074781bf6b.jpg

2025-12-05 21:04:57 GMT

EU issues €120 million fine to Elon Musk’s X under rules to tackle disinformation:
https://therecord.media/eu-fines-x-under-digital-services-act-disinformation-transparecy-rules
I think they should give all that money to @nprofile…pkdd as a reward for all he does to keep good information flowing here!

2025-11-21 15:14:31 GMT

Alleged Scattered Spider members Thalha Jubair and Owen Flowers who are both charged with the TransportForLondon cyberattack, pleaded not guilty in Southwark Crown Court in London today. The judge has set a trial date of June 8, 2026 for them, and they continue to be detained on remand.
Flowers is also charged with conspiring to damage the network of SSM Health Care Corporation and attempting to do the same to Sutter Health, both U.S. healthcare entities. He pleaded not guilty to those charges, too.
Jubair also faces an additional charge of not providing his password to investigators when they seized his devices.
#ScatteredSpider #databreach #ransom #cybersecurity

2025-10-31 14:27:36 GMT

Remember that frustrating situation where some of us couldn't get a vendor to respond to notifications that court-sealed records and sensitive files were exposed? One entity eventually reached the vendor by phone and was so angry at their response that they wound up canceling their account with them.
Yesterday, I finally reached the second court entity. They, too, wound up telling the vendor to take the share down.
How many other clients may still have exposed data because the vendor tells clients that everything's fine when it isn't? I don't know. If you know any entity using Software Unlimited Corp software (not Software Unlimited Inc, but Software Unlimited CORP), you may want to point them to my coverage:
Original Report:
https://databreaches.net/2025/10/13/months-after-being-notified-a-software-vendor-is-still-exposing-confidential-and-sealed-court-records/
Today's Update:
https://databreaches.net/2025/10/31/how-many-courts-have-had-sealed-and-sensitive-files-exposed-by-one-vendors-error/
#dataleak #vendor #incidentresponse #cybersecurity #SoftwareUnlimitedCorp #FTC #govsec
@nprofile…889j @nprofile…xqsy @nprofile…tsvd @nprofile…up2t

2025-10-23 11:45:57 GMT

As a loooong-time #F1 fan and a #databreach blogger, of course I had to read this report on hacking F1. It's the first part of a 3-part series on vulnerabilities in #Formula1
Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs:
https://ian.sh/fia
#FIA_vulnerabilities

2025-10-18 20:03:24 GMT

On a somewhat humorous note: I had mentioned in my blog post that this #NoKings protest was the first protest my husband would ever be going to in his life.
When we got there, I started taking pictures, and I told him to take some good pictures too.
So what does the volunteer at the animal shelter decide to photograph at the protest?
You guessed it: dogs wearing "NoKings" clothing or signs.
#DogsofMastodon #NoKingsCanines
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/396/928/385/933/100/original/9cf120a6f43045b6.jpg

2025-10-18 12:45:34 GMT

Today is a day of national protest against the authoritarian regime being imposed by a narcissist and those who are afraid to stand up to him.
Today is the day when my husband — an arch-Conservative who has never participated in a political protest in his life — is going to his first political protest.
We are doing it so that our grandchildren will have a country worth living in.
Read about my reasons for going today in my personal statement at
https://databreaches.net/2025/10/18/no-kings-not-today-not-ever/
#NoKings

2025-10-13 19:56:09 GMT

NEW, by me, the one some of you have been asking about:
Months After Being Notified, a Software Vendor is Still Exposing Confidential and Sealed Court Records
https://databreaches.net/2025/10/13/months-after-being-notified-a-software-vendor-is-still-exposing-confidential-and-sealed-court-records/
I don't usually ask for boosts, but if you are in a position to help spread the word about this vendor and that its clients need to check their security, that would be great.
#dataleak, #incidentresponse, #infosecurity, #cybersecurity, #SoftwareUnlimitedCorp #FBI #CISA
@nprofile…5xd5 @nprofile…ptue @nprofile…c8kq @nprofile…a6pf @nprofile…5lc3 @nprofile…5k2y

2025-10-09 11:19:17 GMT

According to a new state auditor's report, nearly a third of Mississippi's state agencies fail cybersecurity requirements
Media coverage: https://vicksburgnews.com/shad-whites-office-finds-nearly-a-third-of-state-agencies-fail-cybersecurity-requirements/
Direct link to state report: https://www.osa.ms.gov/sites/default/files/osa/files/reports/252025%20Review%20of%20Mississippi%20Enterprise%20Security%20Program%20Compliance%20%28Cybersecurity%29.pdf
#Audit #cybersecurity #govsec #Mississippi #ComplianceTech

2025-10-04 20:08:41 GMT

NEW: Just days before its data might be leaked, Qantas Airways obtained a permanent injunction
https://databreaches.net/2025/10/04/just-days-before-its-data-might-be-leaked-qantas-airways-obtained-a-permanent-injunction/
#injunction #censorship #pressfreedom #Qantas #Salesforce #databreach

2025-10-03 23:16:05 GMT

OT: It's one thing for our government to lie to us -- repeatedly -- but to change an employee's out-of-office message to include blaming Democrats for the government's shutdown when that is not what the employee wrote or wants to write is the most authoritarian bullshit I've read today.
Hatch Act, common decency, call it what you will --- the people who ordered this and are implementing this should be sued or impeached or locked out of access to the servers at the very least.
https://www.wired.com/story/government-workers-say-their-out-of-office-replies-were-forcibly-changed-to-blame-democrats-for-shutdown/
#NoKings #FuckYouGOP #FuckYouTrump

2025-09-07 11:50:02 GMT

Burger King hacked, systems described as 'solid as a paper Whopper wrapper in the rain’ – hackers 'impressed by the commitment to terrible security practices,' also exploited other RBI brands like Tim Hortons and Popeyes:
"Ethical hackers BobDaHacker and BobTheShoplifter have detailed their claim that they uncovered “catastrophic” vulnerabilities in multiple platforms hosted by Restaurant Brands International (RBI). While RBI may not be a very familiar name, this lax security means that systems powering mega brands like Burger King, Tim Hortons, and Popeyes, with over 30,000 locations worldwide, and all were almost trivially easy to hack. “Their security was about as solid as a paper Whopper wrapper in the rain,” snarks the BobDaHacker blog, sharing the full technical exposé (the blog has since been taken down, but it's archived here)."
https://www.tomshardware.com/tech-industry/cyber-security/burger-king-hacked-digital-platform-as-solid-as-a-paper-whopper-wrapper-in-the-rain-easy-security-bypass-exploited-catastrophic-vulnerabilities-also-worked-on-other-rbi-brands-like-tim-hortons-and-popeyes
#infosec #cybersecurity

2025-08-15 14:27:05 GMT

So as a quick update on the issue of two state courts that we know of exposing sealed records:
Last night, those of us still trying to figure out who was responsible figured it out -- it is a vendor (third-party) who is responsible for the exposed shares.
With the researcher's cooperation and input, I sent a detailed email last night to the only email address that vendor has on their website.
No reply was received, of course.
So I just called their main number... and started to tell them why I was calling, and they hung up on me.
😡
I just called back. They didn't answer the phone, so I left a VM on their administrative offices' extension.
If the firm doesn't call me back or lock down those shares today, expect me to say more here tomorrow.
It is now 1 month since people started trying to get these shares secured. None of us are paid to do this. And getting hung up on should get the company a #CID from the #FTC in a more perfect world -- to ask what their procedures and policies are for receiving a security alert from an external (third) party.
#infosec #cybersecurity #incidentresponse #dataleak #databreach

2025-08-13 11:33:29 GMT

Heads up, folks:
Michael Kan reports that National Public Data is back under new owners: https://www.pcmag.com/news/site-behind-major-ssn-leak-returns-with-detailed-data-on-millions-how-to
Here is the direct link to their opt-out page instructions:
https://nationalpublicdata.com/optout.html
I had opted out previously after their humongous #databreach last year. When I checked my name now, it did not find my profile, so if you opted out before, you may still be opted out, but better safe than sorry: check and opt-out if needed.
#NPD #NationalPublicData #OptOut #DataBroker #Privacy

2025-08-12 23:13:57 GMT

So yesterday, I emailed a state court system that appears to be linked to the exposed data I mentioned recently and that the host notified on or about July 28.
No reply was received.
Today, I sent a contact form message to the lawyer for a juvenile whose records were sealed. Sealed, except 11 of them were exposed to anyone who can access the data. I told him what was going on and suggested he contact the court and tell them to get the data secured.
No reply was received.
Today, I sent an email to the judge who ordered the juvenile's records sealed and I cc:d the district attorney. I gave them the juvenile's name, case number and that I could see all the sealed records. I urged them to have their IT or vendor call me and I could give them the IP address over the phone, etc.
No reply was received.
Dear Russia, China, and North Korea:
You do not need to hack our courts. They are leaking like sieves and do not respond when we try to tell them they need to secure the data.
Yours in total frustration,
/Dissent
#infosec #cybersecurity #incident_response #dataleak #databreach #WAKETHEFUCKUP

2025-08-10 11:58:35 GMT

NEW: Federal judiciary says it is boosting security after cyberattack; researcher finds new leaks
More of those frustrating leaks where, despite our best efforts, we have been unable to get the network shares locked down so far, even with the host's assistance.
This one involves two courts: one state and one federal, and yes, we saw some files that were supposed to be sealed or confidential.
https://databreaches.net/2025/08/10/federal-judiciary-says-it-is-boosting-security-after-cyberattack-researcher-finds-new-leaks/
#dataleak #infosec #cybersecurity #databreach #govsec

2025-08-08 22:59:26 GMT

"Breaking News:" The Scattered Spider kids seem to have opened their own channel on Telegram. Rude, crude, and leaking data already. Some of the redacted screenshots they have posted suggest that they may have had victims that we did not know about already.
#ScatteredSpider #ShinyHunters #SalesForce #AirFrance #Qantas #Gucci #databreach #extortion

2025-08-01 16:37:08 GMT

Belgium Bans Internet Archive’s ‘Open Library’ in Sweeping Site Blocking Order
"The Business Court in Brussels, Belgium, has issued an unprecedentedly broad site-blocking order that aims to restrict access to shadow libraries including Anna's Archive, Libgen, OceanofPDF, Z-Library, and the Internet Archive's Open Library. In addition to ISP blocks, the order also directs search engines, DNS resolvers, advertisers, domain name services, CDNs and hosting companies to take action."
Ernesto Van der Sar explains at https://torrentfreak.com/belgium-bans-internet-archives-open-library-in-sweeping-site-blocking-order/
#copyright #piracy #OpenLibrary #AaronSW
And raise your hand if this all reminds you how much Aaron Swartz is missed. 😭

2025-07-23 13:55:31 GMT

@nprofile…2m4m has a post about how injunctions and superinjunctions are being used to protect entities but work against having an informed public, especially when it comes to cybersecurity.
The recent #Qantas injunction is a useful example of how an injunction won't solve the problem it is sought to allegedly solve, and it only leaves the public in the dark. If @nprofile…xh95 were to be sent the data from Qantas, he could not add it to his database for HaveIBeenPwned because he is Australian and HIBP is an Australian entity. So millions of Qantas customers will not be able to check to see if their information has shown up on the dark web as a result of the Qantas breach because of the injunction that was justified as being needed to protect them.
The topic of injunctions and superinjunctions is very near and dear to @nprofile…2m4m's heart -- and mine -- as we both got hit with a #superinjunction earlier this year.
His post:
Legal Silence: Injunctions Against the Press in Cybersecurity
https://www.suspectfile.com/legal-silence-injunctions-against-the-press-in-cybersecurity/
#injunction #superinjunction #cybersecurity #pressfreedom #chillingeffects #journalism #databreach

2025-07-18 14:06:13 GMT

Qantas obtained an injunction to prevent the publication of any of its stolen data.
This strikes me as an abuse of injunctions.
There was nothing particularly sensitive about the types of data in the Qantas breach. And criminals are going to laugh at any injunction and leak the data or sell it anyway if that's their plan, so what does the injunction really accomplish or who does it really help?
Censoring the press from reporting on data in fairly common types of breaches does not serve society well and strikes me as just a litigation defense strategy to limit potentially bad press.
https://databreaches.net/2025/07/18/qantas-obtains-injunction-to-prevent-hacked-datas-release/
#freepress #pressfreedom #journalism #censorship #databreach #transparency #incident response

2025-07-17 17:15:44 GMT

NEW: RansomedVC is back — and is still attacking its competitors:
https://databreaches.net/2025/07/17/ransomedvc-is-back-and-is-still-attacking-its-competitors/
RansomedVC has a history of leaking its competitors' data. Heck, they even leaked their own to get attention. Now they're back, and one of their first targets was the Medusa ransomware gang.
#databreach #ransomware #SnapAv #SnapOne #Medusa #RansomedVC
@nprofile…2m4m

2025-07-05 18:22:51 GMT

"An American Airlines passenger snooping on one of their seat neighbors forced the flight to return to San Juan after reporting a potential security concern based on an overseen text message.
Local news outlet Primera Hora reported that one passenger saw another receive a text message saying RIP (rest in peace) and interpreted it as a threat to the flight, according to Puerto Rico's Office of Explosives and Public Safety."
Source: USA Today: https://eu.usatoday.com/story/travel/airline-news/2025/07/03/american-airlines-text-message-bomb-threat/84461447007/
#RIP #shouldersurfing #security

2025-07-04 16:15:25 GMT

SK Telecom in South Korea had a bad data breach.... and boy, are they getting hit with all kinds of consequences for it, including:
-- a fine for late reporting ($22k USD);
-- an order to send notifications to all customers who were affected (23 million?!);
-- a judgment that they have to waive cancellation fees if dissatisfied customers canceled (and 660,000 canceled just last month alone); and
-- a criminal investigation has been launched into them for not preserving data properly for the regulator's investigation.
#databreach #SKTelecom #cybersecurity #malware

2025-07-02 13:26:19 GMT

#dogsofmastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/783/845/669/377/260/original/ae863d4914d88139.jpg

2025-06-30 23:38:59 GMT

#DogsofMastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/774/944/236/541/681/original/8ab9162e8ad05583.jpg

2025-06-30 11:34:05 GMT

When Cybernews published an article about a 16 billion credentials leak, some of us strongly criticized the article as irresponsible and misleading journalism. Although some people have tried to suggest that the Cybernews article had some value in highlighting infostealers, the article was so riddled with falsehoods and misleading statements that the confusion and misunderstandings it created outweighs any benefit one might try to ascribe to it.
To his credit, @nprofile…5au4 and a colleague have taken the time to analyze the datasets used in Cybernews‘ reporting and to fact-check their reporting with actual data and proof from their own research.
He has now written up their findings, in which they identified no less than five significant false claims by Cybernews. You can read his report here:
https://jltee.substack.com/p/fact-checking-claims-by-cybernews
#journalism #dataleak #databreach #infostealers

2025-06-27 00:59:58 GMT

- reply

@nprofile…5lc3
So sorry to read this. Donation made. I am wishing your family all the best.

2025-06-25 22:04:20 GMT

"IntelBroker's" real identity is Kai West, a British national, according to court filings now revealed by the U.S. Attorney's Office for the Southern District of New York today.
U.S. is seeking his extradition from France, where he was arrested on February 5 and detained.
USAO press release: https://www.justice.gov/usao-sdny/pr/serial-hacker-intelbroker-charged-causing-25-million-damages-victims
Kai West Four-Count Indictment: https://www.justice.gov/usao-sdny/media/1404621/dl?inline
Kai West Complaint: https://www.justice.gov/usao-sdny/media/1404616/dl?inline
#databreach #intelbroker #arrest #indictment
Here's a pic of him from his 2023 license (from court filing):
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/746/264/539/978/436/original/12384624e45f0e3f.jpg

2025-06-25 10:54:15 GMT

- reply

@nprofile…5k2y First you get your fingers burned. Now you get stung.
Is the universe suggesting you stop reporting on cyber and start reporting on first aid or safety? Or maybe good reasons to increase life insurance?
Stay safe, fella!

2025-06-20 15:49:37 GMT

Aflac notifies SEC of breach suspected to be work of Scattered Spider:
https://databreaches.net/2025/06/20/aflac-notifies-sec-of-breach-suspected-to-be-work-of-scattered-spider/
They're the third U.S. insurer breach we know about this month.
#databreach #ScatteredSpider #cybersecurity #insurance

2025-06-20 13:33:46 GMT

As much as I generally detest claims that something should be a wake-up call, @nprofile…zgwf response to @nprofile…4jdp "16 billion" story really should be a wake-up call for any news outlets who repeat any claims of discovered leaks or breaches by Cybernews.
See https://www.bleepingcomputer.com/news/security/no-the-16-billion-credentials-leak-is-not-a-new-data-breach/
DataBreaches.net will no longer link to Cybernews unless there is some reliable source that confirms that their claims are accurate and that they are not just reporting on leaks that they haven't even seriously tried to get locked down before they report on it.
Comments:
https://databreaches.net/2025/06/20/no-the-16-billion-credentials-leak-is-not-a-new-data-breach-a-wake-up-call-about-fake-news/
#journalism #databreach #dataleak #infostealers #passwords #hype #clickbait #ethics
@nprofile…5lc3 @nprofile…5au4 @nprofile…v6nv @nprofile…cnmq @nprofile…p209

2025-06-17 22:01:46 GMT

Episource is notifying 5.4 million patients of a cyberattack in January:
https://databreaches.net/2025/06/17/episource-notifying-5-4-million-patients-of-cyberattack-in-january/
Some media call this a #ransomware attack, but Episource does not mention any encryption of data and is silent on that question or any mention of any ransom demand. I cannot find any gang who has claimed responsibility for this incident or that has added it to any leak site.
#healthsec #databreach #businessassociate

2025-06-16 22:40:27 GMT

- reply

@nprofile…3nsk Slow down, tiger. No one has even confirmed a breach yet. :)
@nprofile…zgwf @nprofile…5xd5 @nprofile…c8kq

2025-06-16 22:04:23 GMT

NEW by me:
Credit Control Corporation data allegedly from 9.1 million consumers listed for sale on forum:
In a chat with me on Telegram, the seller claims that an employee at CCC (knowingly) gave them access to the server.
CCC has not confirmed nor denied any breach at this point. I hope they respond to the inquiries sent.
Following their last data breach, CCC committed to implementing specific security improvements. It's not clear to me whether they were all made already or not.
https://databreaches.net/2025/06/16/credit-control-corporation-data-allegedly-from-9-1-million-consumers-listed-for-sale-on-forum/
@nprofile…zgwf @nprofile…5xd5 @nprofile…c8kq
#insider #hack #databreach

2025-06-11 10:48:38 GMT

Help, please:
If anyone has a copy of the ransom note sent to PowerSchool in December 2024 or PowerSchool clients in May 2025, please email me a copy or upload it to me on Signal. I want to see not only the body, but the full header and signature.
PowerSchool has not been transparent about the extortion aspects of the incident and has not responded to inquiries.
To reach me on Signal, my number is +1 516-776-7756. Email: breaches@databreaches[.]net
#databreach #extortion #ransom #PowerSchool
@nprofile…wz7x @nprofile…c4cm @nprofile…l8lp

2025-06-03 17:00:54 GMT

- reply

@nprofile…5k2y OK, is this where you write a post with a headline that has "wake up call for..." in it?
J/K... wishing you a speedy and full recovery.

2025-05-28 23:22:07 GMT

Nova Scotia Power has repeatedly said that data from the ransomware attack it suffered has been published on the dark web. Yet not one media outlet or anyone I know has reported finding any data from this anywhere, and no ransomware group that I track has claimed responsibility for this incident.
Does anyone know where these data have allegedly been published? If so, please contact me privately.
#ransomware #databreach

2025-05-25 12:19:03 GMT

You may know this already, but in case you didn't: Threat actors have leaked some data from 2 more K-12 public school districts this week:
Some personal info on students at Coweta County School System was leaked by Nitrogen as proof of claims. I googled the parent information and found an exact match for name, address, and phone number.
Data from Kalamazoo Public School District was leaked by InterLock. InterLock claimed to have acquired 1,420 GB of data consisting of 724,477 Files and 82,820 Folders. It looks like they leaked it all but I didn't attempt to validate any data.
@nprofile…wz7x @nprofile…c4cm
#EduSec #cybersecurity #ransomware #databreach

2025-05-20 21:31:31 GMT

Massachusetts hacker to plead guilty to PowerSchool data breach:
https://www.investing.com/news/stock-market-news/massachusetts-hacker-to-plead-guilty-to-powerschool-data-breach-4055643
Related:
DOJ Press release: https://www.justice.gov/usao-ma/pr/worcester-college-student-plead-guilty-cyber-extortions
USA v. Matthew D. Lane - Information: https://www.justice.gov/usao-ma/media/1400921/dl
USA v. Matthew D. Lane - Plea Agreement:
https://www.justice.gov/usao-ma/media/1400926/dl
#databreach #PowerSchool #EduSec #cybersecurity
@nprofile…wz7x @nprofile…c4cm @nprofile…7nut @nprofile…l8lp

2025-04-25 15:01:57 GMT

Holy sh*t...
FBI arrests judge in escalation of Trump immigration enforcement effort:
https://www.cnbc.com/2025/04/25/fbi-arrest-judge-hannah-dugan-milwaukee.html
#obstruction

2025-04-17 12:12:05 GMT

Former Trump Official Targeted With Government Probe Vows to Fight: https://www.wsj.com/politics/policy/chris-krebs-trump-cybersecurity-executive-action-31cb99cb
Good for Chris Krebs and all those who do not buckle to this administration's bullshit investigations and abuse of power.
And shame on the DOJ for allowing itself to be weaponized. They should be reminded hourly that their oath was to the Constitution, not to a malignant narcissist or anyone trying to use them for political revenge.

2025-04-12 14:46:27 GMT

Google Hit With Lawsuit Over Data Collection on School Kids
https://news.bloomberglaw.com/litigation/google-hit-with-privacy-suit-over-data-collection-on-school-kids
Nor for nothing, but this is the same issue some parents in Toronto and I tried to raise against Google years ago -- and Google told me that their relationship was with their clients -- the schools -- and the schools consented. It was up to the schools, they claimed, to seek parental consent.
@nprofile…wz7x @nprofile…c4cm @nprofile…l8lp
#Google #WorkspaceForEducation #EdTech #consent #privacy #dataprotection #k12

2025-04-06 14:57:54 GMT

In the middle of the night, there were numerous attempts to get Facebook accounts created for randomly generated usernames for my domain. The emails all provided different confirmation code numbers and different fake Chinese-sounding names.
It didn't work. And I am not happy that Facebook didn't catch that it was rapid-fire emailing me numerous requests to confirm accounts.
#phishing #Facebook
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/291/589/702/545/459/original/cf5cfced80e283a0.jpg

2025-04-05 23:46:22 GMT

And here's another reminder of the insider threat if you don't investigate your employees' or consultants' backgrounds and claimed credentials carefully enough. @nprofile…5k2y has the story and how a number of criminal cases may now be appealed or overturned:
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe:
https://krebsonsecurity.com/2025/04/cyber-forensic-expert-in-2000-cases-faces-fbi-probe/
#insiderthreat #fraud

2025-04-05 22:56:44 GMT

Today's reminder of the insider threat involves a pharmacist in Maryland who over a period of 8 years or more, used keyloggers and installed spyware on about 400 computers at the University of Maryland Medical System so he could spy on female co-workers in private moments at work (such as changing clothes, breastfeeding their babies), and in their homes. He was reportedly fired in October 2024, and was able to get another job in another healthcare facility in Maryland because there has been no criminal charges filed against him yet and UMMC apparently didn't alert his new employer.
If Maryland law is like my state's laws, the hospital may be barred legally from revealing what happened if asked for a recommendation by the new employer,. And it seems the Maryland state pharmacy board can't just suspend a license unless there's been a conviction, so the failure to have criminal charges filed already seems to have put more potential victims at risk.
Unsurprisingly, a potential class action lawsuit has already been filed against UMMS with six plaintiffs so far. There are estimates that there are more than 80 victims of the now-former employee.
Some of the media coverage on the case: https://thedailyrecord.com/2025/04/04/six-women-sue-umms-claiming-staffer-spied-on-them-after-security-breach/
#InsiderThreat #keylogger #workplace #privacy #infosec

2025-03-30 11:21:35 GMT

A little ray of sunshine:
The Journal Times, part of Lee Enterprises, had been seriously impacted by the #ransomware attack by Qilin in February. Today, they announced that they are back to full strength: https://journaltimes.com/opinion/column/article_856d2fed-473b-4683-bbf4-61e8fd157830.html
Sincere congrats to them after what was almost two months of intensive and dedicated efforts to fully recover.
#journalism #freepress

2025-03-19 14:31:47 GMT

Somewhat OT, but may be of interest/relevance to a number of folks:
" In a landmark opinion over the copyrightability of works created by artificial intelligence, a D.C. Circuit panel ruled on Tuesday that human authorship is required for copyright protection.
As AI technology quickly advances and intertwines with human creations, the unanimous opinion lays down the first precedential marker over who or what is the author of work created solely by artificial intelligence under copyright law."
https://www.courthousenews.com/dc-circuit-rules-ai-generated-work-ineligible-for-copyright/
Direct link to opinion:
https://www.courthousenews.com/wp-content/uploads/2025/03/thaler-v-perlmutter-dc-circuit-opinion.pdf
#copyright #AI #ArtificialIntelligence

2025-03-16 11:09:31 GMT

Trump's attack on the media continues.
"In an executive order signed on Friday, President Donald Trump outlined seven federal agencies to be reduced in size, including the United States Agency for Global Media, which oversees Voice of America. The reduction was made to agencies Trump saw as "unnecessary," the order states.
"President Trump is delivering on his promise to make our government more efficient," White House Press Secretary Karoline Leavitt told USA TODAY on Saturday. "American taxpayers should not be funding anti-American propaganda in the name of journalism."
https://www.usatoday.com/story/news/politics/2025/03/15/trump-executive-order-voice-of-america/82443203007/
#press #media #journalism #VOA

2025-03-13 23:28:22 GMT

- reply

@nprofile…r0kn That is a great photo!

2025-03-13 20:12:53 GMT

Breach notifications needed to be made faster in 2024. Instead, they were made more slowly.
Some findings from #Bluesight 2025 Breach Barometer report plus additional observations and my frustration with #HHSOCR for not enforcing the notification requirements in #HIPAA and #HITECH.
https://databreaches.net/2025/03/13/breach-notifications-needed-to-be-made-faster-in-2024-instead-they-were-made-more-slowly/
#databreach

2025-03-06 21:19:06 GMT

Thanks to everyone in the fediverse who has favorited, boosted, and reached out to me supportively over the injunction and takedown order that I wouldn't comply with (overview: https://infosec.exchange/@PogoWasRight/114110520940142405)
Special thanks to @nprofile…5xd5 for reporting about it all on #TechCrunch:
https://techcrunch.com/2025/03/06/hacked-health-firm-hcrg-demanded-journalist-take-down-data-breach-reporting-citing-uk-court-order/
#databreach #HCRG #ransomware #incident_response #injunction

2025-03-05 15:26:08 GMT

Here's my post on the court injunction my site got hit with:
HCRG Care's lawyers claimed an injunction issued in a "private" hearing required us to remove two posts. We didn't comply.
HCRG Care was represented by the Pinsent Masons law firm in the UK in this matter. The injunction was issued by the High Court of Justice, King's Bench Division, Media and Communications List by the Honorable Mr. Justice Soole.
Pinsent Mason's attempt to get my web host to remove my posts also failed.
As always, I feel blessed to have the legal support of Covington and Burling's Kurt Wimmer Pro Media Freedom Initiative, which has represented my site pro bono for the last 16 years.
Read about the letter, the injunction, and why the High Court's over-reaching injunction endangers UK journalists and doesn't serve the public well.
https://databreaches.net/2025/03/05/hcrg-cares-lawyers-claimed-an-injunction-issued-in-a-private-hearing-required-us-to-remove-two-posts-we-didnt-comply/
Oh, and I'm not the only one ignoring the injunction. Medusa also got served with the injunction via tox chat, they tell me. And like other injunctions they have received, they are ignoring it. So what has HCRG really accomplished?
#databreach #ransomware #Medusa #transparency #censorship #pressfreedom #injunction #FirstAmendment
@nprofile…5xd5 @nprofile…c8kq @nprofile…zgwf @nprofile…8rys
@nprofile…2m4m @lawfare @nprofile…x3tn

2025-03-04 20:32:09 GMT

Last Friday I received a letter from a U.K. law firm with an attached injunction. The law firm claimed I must remove two posts about their client.
That is not going to happen. I am not under the jurisdiction of the U.K. or the High Court of Justice. My lawyer informed them of that yesterday.
But DataBreaches.net might disappear tomorrow because the U.K. law firm sent the injunction to my domain registrar who, innocently believing them, informed me they will suspend my site if I don't remove the posts within 24 hours. I have replied to them but have not heard back.
So...
If my site is gone tomorrow, I will let you know where you can read a lot more about the injunction and how the injunction poses a serious risk of censorship in the U.K.
If my site is still online tomorrow, I will still let you know here where you can read about the over-reaching injunction obtained in a private hearing where no one represented journalists whose reporting was being censored.
#censorship #injunction #pressfreedom
#AssociatedPress #RCFP #databreach #ransomware #journalism
@nprofile…x3tn @nprofile…c8kq @nprofile…5xd5 @nprofile…zqsg @nprofile…405a @nprofile…8rys @nprofile…2m4m @nprofile…et2y

2025-02-25 13:05:27 GMT

I don't know if this is a first or not, but it sure struck me as unusual:
RansomHub sends a letter to the editor. Really.
https://databreaches.net/2025/02/25/ransomhub-sends-a-letter-to-the-editor-really/
#ransomware #databreach
@nprofile…zgwf @nprofile…c8kq @nprofile…ptue

2024-03-29 10:25:53 GMT

Does anyone have a contact at WHO.int for infosec? A researcher is trying to contact them but got no response to info@

2024-03-07 22:55:28 GMT

- reply

@npub17lg…9uux @npub1hyp…aehm
This is extremely concerning if China is being accused of something that they didn't do. Has anyone in the govt actually spoken with Menlo's source to determine if the info really is on any level to support all these public suggestions?

2024-01-10 02:28:03 GMT

Sébastien Raoult, aka "Sezyo," sentenced in federal court today; could be out in less than 11 months:
https://www.databreaches.net/sebastien-raoult-sentenced-in-federal-court-could-be-out-in-less-than-11-months/
#databreach #phishing #Sawfish #ShinyHunters
@npub1wnv…899h @npub1pa8…7mjg

2023-12-14 20:47:02 GMT

Why federal efforts to protect schools from cybersecurity threats fall short:
https://theconversation.com/why-federal-efforts-to-protect-schools-from-cybersecurity-threats-fall-short-216866
@npub10k7…lp63 @npub107p…fkuv @npub1jah…0scu
#edusec #edtech #infosec #cybersecurity #databreach

2023-09-19 13:16:54 GMT

This week, Nuance (a MSFT-owned tech firm) disclosed a number of their clients who are HIPAA-covered entities were affected by the MOVEit breach. They did not reveal numbers and their disclosure is not on HHS's public breach tool yet.
But other covered entities of theirs may have chosen to make their own disclosures. While Nuance disclosed for some (see https://www.databreaches.net/more-victims-of-moveit-breach-are-revealed-nuance-discloses-for-covered-entities/)
St. Luke's Health System in Idaho did its own disclosure, reporting that 4,679 of their patients were affected.
We still may see more.
#hack #clop #moveit #ransom #databreach #cybersecurity #HIPAA #incidentresponse

2023-09-03 14:09:54 GMT

Pizza Hut Australia customer data hacked; ShinyHunters claims to have more than 1 million customers' information:
https://www.databreaches.net/pizza-hut-australia-customer-data-hacked-shinyhunters-claims-to-have-more-than-1-million-customers-information/
#databreach #ransom #extortion #infosec #cybersecurity
@npub1e2e…krxe @npub1a3j…zlqf

2023-08-18 17:35:50 GMT

Who among us has not driven off after leaving something on the roof of their car?
Police officer loses laptop and notebook as he drives along motorway after leaving them on roof of his car in fourth data breach by single police force
https://www.dailymail.co.uk/news/article-12421601/Police-officer-loses-laptop-notebook-drives-motorway-leaving-roof-car-fourth-data-breach-single-force.html
#databreach #HumanError #BrainFade #infosecurity

2023-08-18 17:27:22 GMT

Airline scammers: family trying to change flight home to get out of Maui sooner because fires were raging lost $3,400 after hackers changed airline contact info:
https://www.aerotime.aero/articles/airline-scammers-family-loses-3400-after-hackers-changed-airline-contact-info
#scammers

2023-08-16 17:49:04 GMT

RIP Anonfiles.com
https://media.infosec.exchange/infosecmediaeu/media_attachments/files/110/900/551/183/118/502/original/bab477e063c09b57.jpg

2023-08-15 19:59:51 GMT

When Centers for Medicare & Medicaid announced the #MOVEit #databreach reported to them by #Maximus last month, they estimated 645,000 were affected. The breach was eventually reported to HHS as affecting 1,362,470 -- about double what they had initially reported.
#healthsec #HIPAA #HITECH #incidentresponse
@npub1jah…0scu

2023-08-14 14:05:07 GMT

One of the #MOVEit victims was the Colorado Department of Health Care Policy & Financing, who was notified by #IBM of the #databreach.
Info types included full name, Social Security number, Medicaid ID number, Medicare ID number, date of birth, home address and other contact information, demographic or income information, clinical and medical information (such as diagnosis/condition, lab results, medication, or other treatment information), and health insurance information.
https://hcpf.colorado.gov/news-release-contractor-data-security-incident
They have now reported the incident to Maine's AG as affecting 4,091,794 .
That makes it the biggest or one of the biggest single reports on the MOVEit incident, I think.
@npub1jah…0scu

2023-08-03 19:22:26 GMT

- reply

@npub17lg…9uux
I find those multiple-site #ransomware listings confusing. Are they just sharing data, just boosting each other's ads, was there more than one attacker, or what? It could be any of the above or something else.
When I rule the world, they will not be allowed to confuse me.

2023-08-01 12:36:35 GMT

Cyber attack on Montclair Township led to $450K ransom payment:
https://montclairlocal.news/cyber-attack-on-montclair-township-led-to-450k-settlement/
So if they had had 2FA, they wouldn't have needed to pay $450k? Is that what we get from this one?
#databreach #ransomware #infosec #cybersecurity
@npub1jah…0scu @npub1a3j…zlqf @npub1fma…d2wy