Breach

Major Peruvian financial services firm Interbank, formerly known as the International Bank of Peru, has disclosed having been impacted by a cyberattack that resulted in the compromise of certain clients' information after stolen data was exposed by the threat actor "kzoldyck" on various dark web forums.

Attacks by EmeraldWhale involved the utilization of the 'httpx' and 'Masscan' open-source tools to scan websites and determine exposure of the /.git/config file and environment files in Laravel apps.

Milan-based private investigations firm Equalize led by former top cop Carmine Gallo was reportedly behind the years-long hacking campaign, which was facilitated by bribes to police officers, remote access trojan compromise, and the breach of the Italian Interior Ministry computer system's maintenance personnel.

Immediate action has been taken to protect Free's information systems following the incident, which has not affected operations nor compromised customer credentials, communications content, and banking information, according to a spokesperson.

Investigation into the incident, which concluded in early September, revealed the breach of individuals' names, Social Security numbers, government IDs, health insurance details, financial account information, and medical treatment data, according to county officials.

Change Healthcare breach viewed as the largest healthcare breach in history.

Such disclosure of the attack to the Office of the Maine Attorney General comes more than a year after Henry Schein was breached twice by ALPHV/BlackCat, which initially admitted to have stolen 35 TB of files from the firm in Oct. 2023 before claiming another attack nearly a month later before eventually exposing some of the stolen data.