Breach

Novartis Pharmaceuticals, Bayer, GlaxoSmithKline, and eight other major pharmaceutical firms have disclosed the compromise of their patients' information following a cyberattack against large U.S. pharmaceutical services provider Cencora, formerly known as AmericsourceBergen, in February, reports BleepingComputer.

Attackers used a default account to create hidden VMs and persist in MITRE’s VMware environment.

San Antonio-based primary healthcare provider CentroMed had personally identifiable information from nearly 400,000 patients compromised following a data breach late last month, reports Cybernews.

The Canadian drug retailer maintains it won’t pay a $25 million ransom, while LockBit allegedly said it would start releasing stolen data.

Intercontinental Exchange, the parent firm of the New York Stock Exchange, has been ordered by the U.S. Securities and Exchange Commission to pay $10 million following its failure to promptly report a data breach in 2021, which affected the NYSE and eight other subsidiaries, according to The Register.

TechCrunch reports that at least three U.S.-based Wyndham hotels were discovered by security researcher Eric Daigle to have had their check-in systems compromised with the consumer-grade spyware app pcTattletale, which is impacted by a vulnerability that exposed the screenshots it captured from the devices where it was installed.

U.S. mobile virtual network operator and the country's sole "Christian conservative wireless provider" Patriot Mobile had the personal information of its subscribers reportedly exposed following a data breach, according to TechCrunch.

BleepingComputer reports that Canadian pharmacy and retail chain London Drugs was admitted to have been breached by the LockBit ransomware group in an attack last month that resulted in the temporary closure of all its stores across Western Canada.