Breach

Attackers with unauthorized VPN access were able to infiltrate Park'N Fly's network between July 11 and July 13, enabling the theft of individuals' names, mailing and email addresses, and Canadian Automobile Association and Aeroplan numbers.

Infiltration of Connexure's network resulted in the exfiltration of individuals' full names, birthdates, Social Security numbers, and insurance claim details, said the firm in newly issued data breach notifications.

After obtaining access to Patelco's network on May 23, attackers were able to infiltrate its databases on June 29, enabling the exfiltration of personal information, including full names, birthdates, Social Security numbers, email addresses, and driver's license numbers.

Included in the data purportedly exfiltrated from AMD were communications from various sources, including "amdsso[.]okta[.]com," "idmprod[.]xilinx[.]com," which feature user credentials, descriptions, and case numbers, as well as assignment groups and internal resolutions, a posting on BreachForums showed.

Nearly $4.78 million had been stolen by threat actors that compromised Equiniti via email chain hijacking in 2022, nearly $1 million of which has been recovered, while another intrusion in April 2023 that involved the exfiltration of certain Equiniti Trust account holders' Social Security numbers led to the theft of nearly $1.9 million.

Attackers who infiltrated Arden Claims Service's systems around Oct. 3, 2023, were able to exfiltrate individuals' names and other personally identifiable information, according to the notification letter provided to Vermont and Maine regulators.

Aside from modifying the account's bio to include a rug pull reference, the acquisition of $700,000 worth of Solana cryptocurrency, and the flag of India, threat actors also published posts with the caption "a McDonald's experiment on Soluna" and a cryptocurrency address.