A U.S. citizen living in Moscow was arrested Wednesday after he flew to the United States to surrender to face charges he stole contact information for over 100 million customers of U.S. financial institutions, brokerage firms and financial news publishers, authorities said.
Read the full article on CBS News
In what is likely the largest data breach ever, Yahoo is reporting that data associated with more than 1 billion user accounts was stolen in August 2013.The incident is separate from a breach Yahoo reported in September involving at least 500 million users that originally occurred in late 2014 and shook public trust in the company.
Full article via CSO Online
A hacker claims to have stolen thousands of passport numbers and other pieces of personal information from the website of a Russian consular department.The hacker, who calls himself Kapustkiy, plans to publish around a thousand records out of the 30,000 or so he allegedly obtained. The apparent target was ambru.nl, the website for the Consular Department of the Embassy of the Russian Federation in the Netherlands.
Read more on Motherboard
Dutch hospitals reported 304 separate incidents of patient data loss since January 1. According to the Authority for Personal Data (AP), the hospitals rarely encrypted the data. They also reported that the majority of the data loss occurred due to human error. Many data losses occurred after employees misplaced essential USB drives and other storage mediums. For example, a doctor from Antoni van Leeuwenhoekziekenhuis lost a hard drive with 800 patient records. Hackers have also accessed electronic healthcare records (EHR) through compromised email addresses.
Read the full article on Deep Dot Web
Kagoya, a famous hosting service provider in Japan has suffered a security breach in which personal and financial data of its customers has been stolen. In an email to their customers, Kagoya stated that the hack attack was discovered this month after an in-house screening which revealed that customers who used their credit cards between April 1, 2015, to September 21, 2016, are among the impacted ones.
Full article on HackRead
It was only last week that Experian released a white paper on what it sees as data breach risks for 2017. Perhaps ironically, then, it was only days later when a dark web vendor claimed to have Experian’s database for sale.
Full article via DataBreaches.net
Breach notification service LeakedSource, announced on Monday that they have obtained 85.2 million records from Dailymotion, one of the largest video platforms on the Web. The compromised data consists of email addresses, usernames, and some passwords.
Read the full article on CSO Online
The US Navy has admitted to a data breach that exposed personal and sensitive information of 130,000 current and former sailors. According to a US Navy statement, the organization was initially made aware of the breach at the end of October by Hewlett Packard Enterprise Services. HPE said that a company laptop being used by an “employee supporting a Navy contract” was compromised. Sensitive information – including names and Social Security Numbers (SSNs) of 134,386 sailors – was accessed by “unknown individuals.”
Read the full article on InfoSecurity Magazine
Three men have been arrested in connection with a data breach at UK operator Three which resulted in the illegal interception of mobile devices heading for customers.
Full article via InfoSecurity Magazine