Breach

Michigan's Wayne County, which is the state's largest, had many of its government offices disrupted and all of its government sites taken down following a cyberattack against certain internal systems this week.

Disruptive and destructive cyberattacks around the world are expected to reach 211 by the end of the year, which would be 105% higher than in 2020.

Infiltration of Malama's systems between May 4 and May 7 has enabled the exfiltration of individuals' medical treatment data, Social Security numbers, financial account numbers with CVV numbers and expiry dates, bank names, passport numbers, routing numbers, and certain biometric details, according to the clinic.

Half will be allocated by T-Mobile toward cybersecurity improvements, with the telecommunications firm pledging to strengthen its cybersecurity posture by implementing data minimization, inventory, and disposal processes, critical network asset tracking, multi-factor authentication, and a modern zero-trust architecture.

Infiltration of Patelco's systems on May 23 enabled the exfiltration of individuals' names, birthdates, Social Security numbers, driver's license numbers, and/or email addresses although the stolen information varied among impacted individuals, according to a breach notice from Patelco.

Threat actors leveraged the zero-day to infiltrate three of Rackspace's internal monitoring web servers with the ScienceLogic app and the third-party utility, facilitating access to customers' account names and numbers, usernames, Rackspace internally generated device IDs, device names and IP addresses, and AES256 encrypted Rackspace internal device agent credentials.

Midsize accounting firm takes nearly a year to notify customers of a breach.

Check Point Research researchers discovered that installation of the fake WalletConnect app triggers a wallet connection request and the stealthy activation of the MS Drainer toolkit, which then conducts token and NFT scanning and exfiltration without being detected by targets.