ASOS Confirms Data Breach Following Social Engineering
ASOS said an attacker obtained an employee’s login credentials by impersonating a trusted contact. The attacker then accessed data on certain third-party platforms.
Tag data breach
Cyberattack on Arizona Courts Affected Data of About 1.3 Million People
The Arizona Supreme Court confirmed an attack on the state court system. According to the court, attackers copied personal data of people referred to the FARE program.
PixelLeak GitHub Screenshots Expose the Risk of Public Storage
Glow Security says it found more than 13,000 screenshots from 343 organizations in public GitHub repositories. The case is not linked to a confirmed attack on GitHub, but to the public storage of outputs from tools used in development.
Helpfeel Confirms Leak of 23.62 Million Gyazo Records
Helpfeel confirmed the unauthorized exposure of millions of records from Gyazo after a vulnerability in the image upload server was exploited.
Possible GSS Data Leak After VPN Vulnerability Exploited in Japan
Japan’s Digital Agency is investigating the possible leak of approximately 246,000 records from the government’s GSS service after a VPN device vulnerability was exploited.
FLHSMV Confirms Incident Linked to Police User Account
Florida’s transportation agency confirmed unauthorized access linked to the credentials of a Plant City Police Department user. It has not yet disclosed the scope of the affected data.
Exposed APIS Database Contained Data on More Than 220 Million Travel Records
Researchers flagged a publicly accessible system containing travel and identification data linked to Vietnam. It has not been confirmed whether anyone copied or misused the data.
Mathspace Confirms Data Breach After Metabase Vulnerability Exploitation
Education platform Mathspace confirmed unauthorized access to its internal reporting system. The incident affects 1,079,819 people in Australia and New Zealand.
Weverse Payment Metadata Breach Affected 422,584 Accounts
Weverse confirmed the exposure of internal identifiers and transaction metadata involving 422,584 accounts. The company reported no exposure of payment card data, passwords, or contact information.
CNIL Fines HÔPITAL PRIVÉ DE LA LOIRE €500,000
French regulator CNIL fined HÔPITAL PRIVÉ DE LA LOIRE for inadequate security preceding the exfiltration of data belonging to 727,113 people.