Breach

Investigation by the FCC revealed that AT&T had failed to dispose of customer data shared with the unnamed firm it enlisted for billing and marketing efforts dating back to 2017 and 2018 even though several evaluations from 2016 to 2020 purported the vendor's compliance with data deletion policies.

Attackers were able to compromise 23andMe over five months beginning April 2023, enabling access to 5.5 million DNA Relatives profiles and details from 1.4 million users of the Family Tree feature, said the company in a disclosure in October.

Attackers may have obtained certain Port data in mid-to-late August before proceeding with encrypting such information, resulting in the outages of its baggage, ticketing, Wi-Fi, and reserved parking services, as well as check-in kiosks, passenger display boards, the flySEA app, and the Port of Seattle website, said officials.

Aside from noting that a potential compromise of publicly available voter registration details would not affect the process or results of the upcoming election, both the FBI and CISA emphasized that there has been no indication of any intrusion that would impact electoral integrity.

Infiltration of TfL's internal systems on September 1 resulted in the exfiltration of some customers' names and contact information, as well as refund data belonging to nearly 5,000 Oyster cardholders.

Major cybersecurity firm Fortinet has disclosed having information from fewer than 0.3% of its customers compromised following a cyberattack against its Microsoft Azure SharePoint server by the threat actor Fortibitch, which claimed to have stolen and exposed 440 GB of data.

After initially publishing data purportedly from Kadokawa in late June — which the firm confirmed to include internal corporate information and business partner details — BlackSuit was discovered by cybersecurity researcher HackManac to have updated its darknet site with additional stolen data on Tuesday.

Over 5.2 million files, or 6.6 TB of data, from ICBC London have been allegedly exfiltrated by Hunters International, which has threatened to expose all the stolen data on Friday should the bank refuse to fulfill its demands.