The stolen passwords are for a MoD portal specifically designed to be used safely from home via member personal devices, but it appears the Russian hackers have been targeting the devices themselves and intercepting the credentials.
Senior Correspondent at CPO Magazine
Scott Ikeda is a technology futurist and writer for more than 15 years. He travels extensively throughout Asia and writes about the impact of technology on the communities he visits. Over the last 5 years, Scott has grown increasingly focused on the future landscape of big data, surveillance, cybersecurity and the right to privacy.
The FTC placed collection bans on Mobilewalla Inc. and Gravy Analytics, both US-based data brokers that process huge amounts of information. Mobilewalla has tracking profiles on over 1.6 billion devices across more than 35 countries.
A ransomware attack on supply chain software firm Blue Yonder in turn hit a number of big names in food and retail with business disruptions, Starbucks and Walgreens among them. The software is widely used by a range of Fortune 500 companies.
In addition to the $25.4 million antitrust fine, the CCI has ordered Meta to cease this element of cross-app user data sharing for five years. The order wraps up a probe that began in March 2021.
Bunnings tested out facial recognition technology in 63 of its New South Wales locations between November 6, 2018 and November 30, 2021, in what they said was a bid to deter a rash of crime. The national privacy laws regard facial data as highly sensitive biometric information.
Finastra, a fintech service provider for 45 of the 50 largest banks in the world, has sent out data breach notifications to customers tied to postings on criminal underground outlet BreachForums that offered a total of 400 GB of zipped data.
A recent confirmed T-Mobile hack has been attributed to Salt Typhoon, the Chinese cyber espionage team that also breached Verizon and AT&T earlier in the year. That means the hackers were able to penetrate all three of the country's major mobile carriers in 2024.
A February data breach involving 122 million records of marketing data has been confirmed to have come from B2B data broker DemandScience.
Amazon has confirmed that it was impacted by the MOVEit third party breach that took place in 2023, and that a large amount of employee data was included with a massive trove that was offered for sale on a hacking forum.
The US tech companies oppose what they call an "undue expansion of government access," but also a requirement that they seek permission before being allowed to send local data overseas. The proposed data protection law also has vague and expansive terms here.
