Information compromised in the breach has been obtained from a system that had been inactive for nearly two years, noted DemandScience in an email sent to an individual who inquired the firm after seeing his data in the leak.
Both Moucka, also known as waif, catist, judische, and cllyels, and Binns, also known as j_irdev1337 and irdev, have not only obtained 50 billion sensitive call and text records from a major telecommunications firm believed to be AT&T but also extorted nearly $2.5 million worth of cryptocurrency from at least three of their victims between November 2023 and early October.
Such a figure represents a significant increase from the nearly 97,000 and almost 27,000 individuals reported by Form I-9 Compliance to have been affected by the data breach, which was identified in April and publicly disclosed in May, in earlier filings with the Maine AGO.
Alright, so we dove deep into some pretty wild stuff this week. We started off talking about zip files inside zip files. This is a variation of old-school zip file tricks, and the latest method described here is still causing headaches for antivirus software. Then we geeked out about infrared signals and the Flipper Zero, which brought back memorie...
Included in the data exfiltrated from Thompson Coburn's systems were individuals' names, birthdates, Social Security numbers, medical record and patient account numbers, treatment or prescription details, clinical information, medical provider details, and health insurance information, said the law firm in a disclosure to the Department of Health and Human Services.
Infiltration of Forth's systems resulted in the compromise of names, birthdates, Social Security numbers, and addresses, said the firm in its filing with the Office of the Maine Attorney General, which also noted its immediate action to remediate the incident.
Such a disclosure comes after Satanic admitted to having stolen a database from Hot Topic, Torrid, and Box Lunch containing 350 million user records following a breach, which is believed by Hudson Rock to have been conducted through an information-stealing malware attack against Hot Topic's data unification service.
Such malware compromise, which was only identified in late September, has impacted login information, names, phone numbers, emails, shipping and billing addresses, and payment card details with CVV codes and expiration dates belonging to individuals who had visited the SelectBlinds website's check-out page.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
