Hacker News with Generative AI: Data Breaches

Amazon confirms employee data breach after vendor hack (bleepingcomputer.com)
Amazon confirmed a data breach involving employee information after data allegedly stolen during the May 2023 MOVEit attacks was leaked on a hacking forum.
Hackers are stealing tickets from Ticketmaster customers' accounts (businessinsider.com)
Hackers are breaking into some Ticketmaster users' accounts and transferring tickets to themselves.
Hacking 700M Electronic Arts accounts (battleda.sh)
How the British Airways' breach kickstarted today's web security challenge (baways.com)
It happened between August 21 and September 5 2018. During those 16 days, a sophisticated cyberattack hit the British Airways website and app. It exposed the personal data of roughly 300,000 to 500,000 customers.
Columbus says ransomware gang stole personal data of 500k Ohio residents (techcrunch.com)
The City of Columbus, Ohio’s state capital, has confirmed that hackers stole the personal data of 500,000 residents during a July ransomware attack.
Public sector cyber break-ins: Our money, our lives, our right to know (theregister.com)
At the start of September, Transport for London was hit by a major cyber attack.
Almost 7000 Government data breaches over last ten years (rte.ie)
There have been 6,885 data breaches across Government departments over the last ten years.
UnitedHealth says Change Healthcare hack affects 100M – largest US health breach (techcrunch.com)
More than 100 million individuals had their private health information stolen during the ransomware attack on Change Healthcare in February, a cyberattack that caused months of unprecedented outages and widespread disruption across the U.S. healthcare sector.
UnitedHealth Ransomware Attack Exposed 100M People (pcmag.com)
Data on over 100 million people was exposed because of the ransomware attack on UnitedHealth subsidiary Change Healthcare earlier this year, according to a document from the US Department of Health and Human Services' Office for Civil Rights.
UnitedHealth says data of 100M stolen in Change Healthcare hack (bleepingcomputer.com)
UnitedHealth has confirmed for the first time that over 100 million people had their personal information and healthcare data stolen in the Change Healthcare ransomware attack, marking this as the largest healthcare data breach in recent years.
Change Healthcare hack affects over 100M, largest-ever US healthcare data breach (techcrunch.com)
More than 100 million individuals had their private health information stolen during the ransomware attack on Change Healthcare in February, a cyberattack that caused months of unprecedented outages and widespread disruption across the U.S. healthcare sector.
Internet Archive breached again through stolen access tokens (bleepingcomputer.com)
The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens.
Redbox left PII on decommissioned machines (digipres.club)
Cisco investigates breach after stolen data for sale on hacking forum (bleepingcomputer.com)
Cisco has confirmed to BleepingComputer that it is investigating recent claims that it suffered a breach after a threat actor began selling allegedly stolen data on a hacking forum.
Billions of Gmail users at risk from sophisticated new AI hack (tomsguide.com)
Casio confirms customer data stolen in a ransomware attack (bleepingcomputer.com)
Casio now confirms it suffered a ransomware attack earlier this month, warning that the personal and confidential data of employees, job candidates, and some customers was also stolen.
National Public Data files bankruptcy, admits 'millions' affected (theregister.com)
The Florida business behind data brokerage National Public Data has filed for bankruptcy, admitting "hundreds of millions" of people were potentially affected in one of the largest information leaks of the year.
Fidelity says data breach exposed personal data of 77,000 customers (techcrunch.com)
Fidelity Investments, one of the world’s largest asset managers, has confirmed that over 77,000 customers had personal information compromised during an August data breach, including Social Security numbers and driver’s licenses.
Chinese hack of US ISPs shows Apple is right about backdoors for law enforcement (9to5mac.com)
It was revealed this weekend that Chinese hackers managed to access systems run by three of the largest internet service providers (ISPs) in the US.
Internet Archive hacked, data breach impacts 31M users (bleepingcomputer.com)
Internet Archive's "The Wayback Machine" has suffered a data breach after a threat actor compromised the website and stole a user authentication database containing 31 million unique records.
Internet Archive: Security breach alert (theverge.com)
MoneyGram confirms hack: customer data have leaked (mashable.com)
On Monday, MoneyGram confirmed that it had been targeted in an cyberattack, resulting in an unauthorized party gaining access to their company's internal systems.
Salt Typhoon hacked US broadband providers and breached wiretap systems (securityaffairs.com)
MoneyGram says hacker stole customers' personal information and transaction data (techcrunch.com)
U.S. money transfer giant MoneyGram has confirmed that hackers stole its customers’ personal information and transaction data during a cyberattack last month.
Chinese Cyberattack Is a Disaster of Unimaginable Proportions (hotair.com)
Using a security loophole that allows the US government access to anybody's electronic traffic, Chinese hackers gained access to an unknown quantity (perhaps all) of internet traffic on American networks. In an exclusive report in Saturday's Wall Street Journal the secret breach was revealed.
Data breach leaks SSNs of over 230k Comcast customers (theverge.com)
A data breach has exposed the names, addresses, social security numbers, and birthdates of more than 237,700 Comcast customers.
A quarter million Comcast subscribers had their data stolen from debt collector (theregister.com)
Comcast says data on 237,703 of its customers was in fact stolen in a cyberattack on a debt collector it was using, contrary to previous assurances it was given that it was unaffected by that intrusion.
Big names among thousands infected by payment-card-stealing CosmicSting crooks (theregister.com)
Ray-Ban, National Geographic, Whirlpool, and Segway are among thousands of brands whose web stores were reportedly compromised by criminals exploiting the CosmicSting flaw in hope of stealing shoppers' payment card info as they order stuff online.
Always have a comma in your password, if part of a leak it will break the CSV (toot.cafe)
T-Mobile pays $16M fine for three years' worth of data breaches (arstechnica.com)
T-Mobile has agreed to pay a $15.75 million fine and improve its security in a settlement over a series of data breaches over three years that affected tens of millions of customers.