Nissan has confirmed that the North American data breach exposed the sensitive personal information of over 53,000 employees, contrary to its previous assessment that had ruled out PII.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Officials from the United States and United Kingdom have issued another formal warning about the perceived Chinese cyber threat to international stability and social norms, calling the issue an "epoch-defining challenge" even as Beijing continues to deny that anything at all is happening.
Banco Santander, a Spanish multinational bank, has suffered a third-party data breach after a threat actor accessed a database managed by an external vendor.
Australian electronic prescriptions provider MediSecure has suffered a large-scale ransomware attack that exposed customers’ sensitive information.
DeFi protocols had a bad day as Sonne Finance took the bulk of the loss, with about $20 million stolen via an exploitable bug. Cyber attacks also hit two other providers.
ICE has been charged with causing nine of its subsidiaries in total, the NYSE included, to fall afoul of breach reporting requirements as they were not provided the information by their parent company in a timely enough manner.
WebTPA Employer Services has notified the U.S. Department of Health and Human Services (HHS) of a massive data breach that leaked the personal information of over 2.4 million health insurance plan members.
The U.S. Environmental Protection Agency (EPA) has issued an enforcement alert to ensure community water systems (CWSs) comply with the Safe Drinking Water Act (SDWA) to prevent disruptive cyber attacks, including those by nation-state actors.
U.S. pharmaceutical giant Cencora has disclosed that the February 2024 data breach leaked sensitive patient data, including diagnoses and medications. At least 15 pharmaceutical companies have informed over 500,000 individuals that their information was leaked.
560 million Ticketmaster customers have had personal information and possibly payment card data exposed as part of a 1.3 TB theft by the ShinyHunters hacking group. The data breach appeared on the underground hacking forum BreachForums and was put up for ransom for half a million dollars.










