-
Jul 3, 2024 | 
safetydetectives.com | Todd Faulk
A relatively new cybercriminal group called BlackSuit appears responsible for hacking into software supplied by CDK Group, which car dealerships use to process car sales and other transactions. The ransomware attack on June 19 disrupted operations at 15,000 car dealerships across the US, forcing many to fill out financing applications manually and delaying the final sale of potentially thousands of cars.
-
Jun 25, 2024 | 
safetydetectives.com | Todd Faulk
A cybersecurity research firm has discovered that Chinese intelligence dramatically increased its cyberattacks against Taiwanese targets in the months before and after the Taiwanese presidential election in January. Insikt Group said it uncovered nearly 100 cyberattacks against Taiwanese government, academic, commercial, and think tank organizations between November 2023 and April 2024.
-
Jun 20, 2024 | 
safetydetectives.com | Todd Faulk
US government agencies have been slow to implement recommended cybersecurity measures, which is increasing the risk to national security, critical infrastructure, the US economy, and US citizens’ personal information. This is according to a sweeping report issued by the watchdog Government Accountability Office (GAO) in June. Federal agencies have failed to implement approximately one-third of the 1,600 cybersecurity recommendations that the GAO has made since 2010.
-
Jun 14, 2024 | 
safetydetectives.com | Todd Faulk
The director of a US watchdog agency, the Consumer Financial Protection Bureau (CFPB), has urged the US Congress to do more to protect consumers’ financial data, citing some companies’ reported plans to monetize their customers’ transaction information. Director Rohit Chopra made the statement while testifying before the House Financial Services Committee on June 12.
-
Jun 12, 2024 | 
safetydetectives.com | Todd Faulk
On June 3, clients of Christie’s filed a class-action lawsuit against the art world’s most expensive auction house for a data breach in which their personally identifiable information (PII) was stolen and put up for sale on the dark web in May.
-
Jun 11, 2024 | 
safetydetectives.com | Todd Faulk
The financial services company LendingTree has confirmed that its subsidiary, QuoteWizard, may have been affected by the recent breaches of customer databases hosted on the Snowflake platform. On June 7, a spokesman for LendingTree said, “We take these matters seriously, and immediately after hearing from [Snowflake] launched an internal investigation. That investigation is ongoing.
-
Jun 6, 2024 | 
safetydetectives.com | Todd Faulk
Singaporean authorities have arrested Wang YunHe, the accused administrator of the world’s largest criminal botnet — a network of 19 million infected computers in 200 countries used to carry out cybercrimes. The US Federal Bureau of Investigation (FBI) announced in late May that it, in cooperation with other countries, had taken down the botnet, which included more than 600,000 compromised IP addresses in the US.
-
Jun 4, 2024 | 
safetydetectives.com | Todd Faulk
On May 31, LiveNation, the parent company of Ticketmaster, filed a report with the US Security and Exchange Commission (SEC) acknowledging that its customer databases had been breached. On May 28, cybercriminal group ShinyHunters claimed to have stolen the personal data and order information of 560 million Ticketmaster customers and was demanding a ransom of $500,000 for the database.
-
May 31, 2024 | 
safetydetectives.com | Todd Faulk
On May 29, Australian authorities announced they were investigating a claim by cybercriminal group ShinyHunters that it had stolen personal data and order information from Ticketmaster customers. ShinyHunters reportedly has demanded $500,000 from the world’s largest seller of event tickets to avoid selling the customer information database to someone else. Ticketmaster has not confirmed whether the claim is genuine or that customer data has indeed been compromised.
-
May 29, 2024 | 
safetydetectives.com | Todd Faulk
On May 23, Singaporean authorities fined an educational software company $74,000 for a weak password that enabled the breach of its customers’ data. More than 500,000 people, including 300,000 children, saw sensitive personal data, including cellphone numbers, national ID numbers, and bank account numbers, fall into the hands of a hacker in 2022.
