← Feed

Posts

• View post

  Plot twist! Silent Ransom Group agreed to be interviewed about the Luna Moth Files. And the first thing they told me is, "We are open to do an interview, however, SRG was never leaked. We have never been hacked or had a data breach. We have come across false articles claiming that we were hacked and that our chat logs were published." I'll have a fuller write-up later, but this was not what I was expecting when I prepared interview questions. 🤔 #databreach #SilentRansomGroup #...

• View post

  EXCLUSIVE: More details of my chat with Silent Ransom Group yesterday about their denial that the Luna Moth Files are fake: https://databreaches.net/2026/10/09/silent-ransom-group-claims-luna-moth-files-are-fake-the-data-suggest-otherwise/ #databreach #SRG #silentransomgroup @campuscodi @nytimes @zackwhittaker @reuters

• View post

  The FBI has arrested a third person allegedly linked to ShinyHunters -- this time, it's a Canadian in Pennsylvania who was allegedly involved in the FBI Jobs incident. If you're keeping score, that's three arrests since September, two of which are allegedly linked to the FBI Jobs incident. The third arrest occurred before that attack. https://www.cbsnews.com/news/fbi-shinyhunters-arrest-jobs-website-hack/?ftag=CNM-00-10aab7e&linkId=1018860676 https://www.nytimes.com/2026/...

• View post

  RE: https://infosec.exchange/@PogoWasRight/117412318085250446 The man has been identified by @briankrebs as Edward Dubrovsky (court filings name him as Edward Dobrovsky). He was the founder of Cypfer and now is with CyberSteward. He was the author of a book, Cyber Extortion Strategic Response, that was just published a few weeks ago. The docket in his case is not yet public, but the case was moved to the Eastern District of Texas after his arrest in Pennsylvania.  As I speculated el...

• View post

  NEW, by me: The Luna Moth Files Weren’t Hacked. Here’s How They Leaked. https://databreaches.net/2026/10/11/the-luna-moth-files-werent-hacked-heres-how-they-leaked/ tldr; Someone misconfigured a MongoDB with their rocket.chat messages @campuscodi @carlypage @zackwhittaker @jgreig #dataleak #cybersecurity #databreach #SilentRansomGroup #LunaMothFiles

• View post

  AFP is reporting a cyberattack that resulted in refrigeration and freezer systems of major supermarket chains in France all defrosting and in some cases, causing fires. This sounds like a really serious -- and financially costly -- incident. And if it can happen there, it can happen here. Here's the link to the AFP reporting: https://www.afp.com/en/french-supermarket-chains-say-cyberattack-forced-refrigerator-shutdown #databreach #foodsupply #supermarkets #cyberattack #cybersecurit...

• View post

  RE: https://infosec.exchange/@flyingpenguin/117428896116311233 Really helpful coverage and explainer -- thanks!

• View post

  See also @GossiTheDog' s thread on the Danfoss fridge attack: https://cyberplace.social/@GossiTheDog/117429502412235079

• View post

  NY Attorney General Letitia James and CT Attorney General William Tong announced a settlement with Boston Children’s Health Physicians and XTIUM over a 2024 data breach. The monetary part of the settlement was $2.7 million. It also requires the companies to: Maintain a comprehensive information security program designed to protect customers’ private information;Develop and maintain a data inventory of private information and ensure the information is protected; Maintain reasonable authenticat...

• View post

  The Norwegian data protection authority issued its biggest fine ever ($9,758,476.80 USD). "– We issued such a high fine in this case because the breaches we identified were very serious. Thousands of users in Norway have been subjected to unlawful sharing of their sensitive data, says Line Coll, Director General of the Norwegian Data Protection Authority. Xandr acted as an intermediary that relayed the personal data of Grindr users in Norway, including data revealing sexual orientation,...

• View post

  US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/ All I kept thinking as I read this was that I wish they had data by sector because I have no idea what, if anything, this means for the K-12 subsector. #cybersecurity @douglevin @funnymonkey

• View post

  Two businesses have suffered devastating breaches this week (well, three, if you count the screwup that brought all my sites down and lost data): Vibe coding platform Zeabur collapses after back-to-back breaches expose 3.2M records: https://cybernews.com/news/zeabur-cloud-provider-shutdown-two-breaches-3-million-records/ Bengaluru-based eMudhra will exit the global website authentication certificate business after a security flaw left eight intermediate certification authority certificates v...

• View post

  Cognitive Behavior Therapy Center in Chesapeake's billing service (Express Billing Systems) was hit in August by an unnamed TA -- who reportedly also started attempting to extort patients directly when the target didn't pay them: https://www.wavy.com/news/crime/data-of-over-a-thousand-chesapeake-therapy-patients-breached-following-ransomware-attack/ #HealthSec #HIPAA #BusinessAssociate #Extortion #ThirdPartyVendor

• View post

  RE: https://infosec.exchange/@douglevin/117488147893643667 I would like to know which court has ordered Navigate360 to reveal information. They have been so terrible in incident response that a court had to order them to disclose essential info to its clients and those affected? And while they have been the epitome of inadequate security and poor incident response, Crime Stoppers has been no better. They blew off my questions by saying the incident was mostly in their rear view mirror, but did...

• View post

  RE: https://cyberplace.social/@GossiTheDog/117313751385768529 I emailed Elsevier to ask whether there was any risk to any patient/healthcare data at all. They sent me a statement: "On September 21, Elsevier identified that visitors to select platforms were being redirected to a third-party page. Our cybersecurity team responded immediately, resolving the issue and restoring normal service. Our investigation indicates that this was a narrowly scoped, limited-duration event involving the t...

• View post

  NEW by me: ShinyHunters escalates dispute with FBI; claims to have seized job applicants' site and acquired data First, they threatened Clop this week, and now the FBI. Some will disagree with me strongly, but I actually agree with ShinyHunters on some of their objections to a May 2026 FBI bulletin about them. That still doesn't excuse them hacking and extorting them, of course. https://databreaches.net/2026/09/22/shinyhunters-escalates-dispute-with-fbi-claims-to-have-seized-job-a...

• View post

  RE: https://infosec.exchange/@josephcox/117241483560892456 This may be the most horrifying and infuriating piece I've ever read about the dangers of ChatGPT. Great reporting, as always, by @josephcox and @404mediaco

• View post

  South Korea is cracking down on companies with major data breaches to push them to be more proactive. As seen in Korea JoongAng Daily: "Starting Friday, companies found to have leaked the personal data of 10 million or more people through intent or gross negligence can be fined up to 10 percent of their total revenue as part of a broader overhaul under the revised Personal Information Protection Act that is set to take effect the same day. Even if a leak hasn’t been confirmed, companies m...

• View post

  NEW, by me: Silent Ransom Group Hacked Greenberg Traurig; Who notifies the 126k Affected? GT says they notified a small number of affected clients. But more than 126,000 clients were affected. We dug into the data tranche, obtained exclusive details from the threat actors, and asked Yelisey Bohuslavskiy for his thoughts on the group and attempts to prevent their attacks. https://databreaches.net/2026/09/14/silent-ransom-group-hacked-greenberg-traurig-who-notifies-the-126k-affected/ #databr...

• View post

  #DogsofMastodon Seen on FB:

• View post

  NEW by me: Navigate360 may soon release a public notice about its horrific breach, but will any individuals be notified? https://databreaches.net/2026/09/17/navigate360-may-soon-release-a-public-notice-about-its-horrific-breach-but-will-any-individuals-be-notified/ @douglevin #databreach #infosec #cybersecurity #incidentresponse #notification #Navigate360 #P3GlobalIntel

• View post

  NEW by me: The U.S. military leaked more than 93,000 tips via insecure P3 Global Intel. Has anyone been notified? I had reported on the school-related tips in the Navigate360 breach, and then the Crime Stoppers tips. In this post, I looked at the tips to the U.S. military. https://databreaches.net/2026/09/18/the-u-s-military-leaked-more-than-93000-tips-via-insecure-p3-global-intel-has-anyone-been-notified/ #Navigate360 #P3GlobalIntel #databreach #cybersecurity #incidentresponse @douglevin

• View post

  What's going on with ShinyHunters? First they accuse Clop of stealing their zero-day for Oracle, then they start hitting medical sector, then they deface and threaten Clop, and now we learn they ratted out TeamPCP? Something's very different.

• View post

  RE: https://mastodon.social/@brianhonan/117275280843738578 Ooh. Interesting thought, thanks. Have you come across situations in which insurers denied coverage for regulator fines but paid other incident response costs from data breaches?

• View post

  I'm always curious to see what cyber insurers are doing on coverage for different scenarios. The Revolut incident reportedly has some insurers re-thinking. Matthew Sellers reports: "Most social engineering endorsements are triggered by a transfer of funds, not a transfer of data. A scam where nothing is paid out but a large volume of identity and biometric data leaves the building can fall between a crime policy, built for financial loss, and a data breach policy, often built around u...

• View post

  One of the dozens of new #ransomware groups this year is a group calling itself #Orova. Since early May, they appear to have dozens of victims in about half a dozen countries. Three of the listings are U.S. medical entities, so, of course, I reached out to them to find out more. My new report: Cardiology Associates of Port Huron remains silent although they were allegedly hacked and had patient data stolen in June. https://databreaches.net/2026/08/06/cardiology-associates-of-port-huron-re...

• View post

  New York State Department of Financial Services announced on August 5 that Order Express, Inc., a licensed money transmitter, will pay a $250,000 penalty for violations of DFS’s cybersecurity regulation (23 NYCRR Part 500). Order Express suffered a ransomware attack in 2022, which they reported appropriately. But then the DFS's investigation revealed that the entity did not have adequate cybersecurity risk assessment or plan. Read more at: https://www.dfs.ny.gov/reports_and_publications/...

• View post

  The city manager of the City of Coweta is refusing to even contact unnamed threat actors and says the city will not pay any ransom in response to a recent ransomware attack. Why? Because the city manager was with another city that was attacked; even though that city paid the ransom, it was reinfected two weeks later. So now she is very anti-paying. Read more at KTUL: https://ktul.com/news/local/city-of-coweta-refuses-to-pay-ransom-after-system-wide-cyberattack-08-08-2026 And as I previousl...

• View post

  RE: https://infosec.exchange/@chum1ng0/117044228483502361 You weren't alone, @chum1ng0@infosec.exchange . Their misclassification reportedly affected thousands of blogs: https://cybersecuritynews.com/google-blogger-locked-legitimate-websites/ But this is a good time for you to think about backups and alternatives. :)

• View post

  More than a dozen Republican attorneys general are calling on #OpenAI to preserve records on its models’ recent breach of #HuggingFace, suggesting the #AI firm may have violated state or federal laws in the incident. Press release: https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-leads-coalition-demanding-transparency-from-openai-after-ai-breach-and Direct link to full letter: https://www.iowaattorneygeneral.gov/media/cms/08_5392C9E17791C.pdf