Breach

Major U.S. telecommunications firms AT&T, Verizon, and Lumen Technologies have been urged by House Energy and Commerce Committee leaders to provide more information on their response to Chinese state-backed threat operation Salt Typhoon's successful infiltration of their networks for wiretap warrant request compromise.

Such an intrusion was claimed to have resulted in the exfiltration of troves of data, with Underground exposing confidential, financial, and legal documents, employees' personal and payroll data, non-disclosure agreements, patent and project information, and incident reports purportedly stolen from Casio's systems on its extortion portal.

Fidelity maintains that there’s no indication of a ransomware incident – and that no funds were stolen.

Such breaches, which were pinned on the dismal security measures of Marriott and subsidiary Starwood Hotels & Resorts, resulted in the exfiltration of individuals' email addresses, birthdates, and other personal details, as well as their passport information, loyalty numbers, and payment card numbers.

Included in the 6.4 GB SQL database were Internet Archive members' email addresses, usernames, Bcrypt-hashed passwords and password change timestamps, as well as other internal details as recent as September 28, when the attack was believed to have taken place.

While the incident was downplayed by Dr. Web to not have prompted the compromise of any user data, DumpForums hackers said that they were able to steal the company's client/user database, as well as other information stored in its GitLab and corporate email servers, as well as their Jenkins, Confluence, Mantis, and RocketChat instances.

Infiltration of CreditRiskMonitor's systems between July 9 and July 17 enabled the theft of employees' and independent contractors' personally identifiable information.

Investigation into whether the incident has resulted in the exposure of sensitive data is already being conducted alongside a third-party agency, noted Casio, which did not provide further details regarding the nature of the attack or the identity of its perpetrators.