Latest coverage for Breach

Also: Iberian Blackout, Delta Faces Lawsuit Linked to CrowdStrike OutageEvery week, ISMG rounds up cybersecurity incidents and breaches around the world. This week: Mirai Botnet Exploits Flaws in GeoVision, the Iberian blackout under investigation, dueling cybersecurity advisories from India and Pakistan, Delta must face a lawsuit linked to CrowdStrike outage.

Union Health System Among Many Cerner Legacy Data Clients Affected by BreachAn Indiana health system is among the first healthcare organizations notifying regulators and thousands of people affected by the Oracle hack in January. Attackers compromised legacy patient data hosted by Cerner servers that were set to migrate to Oracle's cloud environment.

Not Just Ransomware But Verbal Disclosure of Personal Data Common, Watchdog FindsTwo decades after California Senate Bill 1386 introduced the world to data breach notifications, organizations have collectively battened down their cybersecurity hatches and fixed the problem once and for all. Of course, I'm joking, with the results of recent data breach root cause report in hand.

Breach Tally Keeps Growing Since Firm Filed Initial Breach Reports Last MonthThe count of individuals affected by a hack discovered in December 2024 by Maryland-based Kelly & Associates Insurance Group continues to climb with a new total of 413,032 - up by nearly 150,000 since the company updated its breach disclosure last month. The list of clients affected has also grown.

AllegisCyber Capital's Bob Ackerman Examines Machine-Speed Defense RequirementsTraditional security analysts can no longer keep pace as attackers use AI to compress breach timelines from months to mere hours, fundamentally altering the cybersecurity landscape, said Bob Ackerman, founder and managing director at AllegisCyber Capital.

Maine-Based Firm Already Facing Several Proposed Class Action Lawsuits in BreachA Maine-based software supplier to medication infusion centers is notifying more than 118,000 individuals that their information was potentially stolen in a hack discovered in February. The firm is already facing at least five proposed federal class action lawsuits involving the data theft.

Fortinet Uncovers Long-Term Cyberespionage in RegionAn Iranian state-sponsored threat group conducted a years-long cyberespionage campaign targeting a Middle East critical infrastructure provider, with its operational technology network a key target. The attackers focused reconnaissance activity and credential theft on the OT network.

SolarWinds CISO Tim Brown's Case Shows Personal, Legal and Health Risks for CISOsCISOs face tremendous stress in dealing with regulatory scrutiny and legal exposure in the wake of a data breach. SolarWinds CISO Tim Brown shares the personal and professional impact of Securities and Exchange Commission charges against him after the 2020 SolarWinds supply chain attack.