Breach

Over a quarter million users of 419 Date – Chat & Flirt had their customer data exposed to the internet via a misconfigured Amazon Web Server.

Major Australian essential infrastructure services provider Ventia has disconnected some of its key systems to mitigate a cyberattack initially detected on July 8 but reassured the following day that operations have not been disrupted as it deals with the intrusion, according to The Record, a news site by cybersecurity firm Recorded Future.

American-Singaporean multinational gaming hardware firm Razer has confirmed that it began investigating a potentially massive data breach on its systems after being alerted by FalconFeedsio cybersecurity researchers on July 9, BleepingComputer reports.

Two of the bugs allow for unauthenticated access and modification privileges for MOVEit Transfer database content, while the third would allow an attacker to terminate instances of the application at will. A security bulletin from the company lists all three as critical or high severity.

U.S. nonprofit financial services firm for academics Teachers Insurance and Annuity Association of America was confirmed to be compromised in the widespread Cl0p ransomware attack involving the exploitation of a vulnerability in the MOVEit Transfer file transfer software by Connecticut-based Trinity College and Vermont-based Middlebury College, both of which reported data breaches as a result of the ransomware attack against TIAA, TechCrunch reports.