Breach

Online gambling firm FanDuel had its customers' names and email addresses compromised during the MailChimp data breach this month, according to BleepingComputer.

The Los Angeles Unified School District has disclosed that files with contractors' Social Security numbers and other personal data were stolen by the Vice Society ransomware operation in an attack over the Labor Day weekend, reports BleepingComputer.

This week’s healthcare data breach roundup includes NextGen Health's information being posted to the dark web, as well as additional organizations informing patients their data was compromised via Pixel exposure.

While third-party risks persist, data privacy laws are stricter, so if companies monitor cybercriminal forums more stringently and adopt zero-trust principles, they can make some progress.

Researchers say security teams have to focus more on unprotected APIs from shadow IT.

PayPal has been impacted by a credential stuffing attack that resulted in the compromise of data from 35,000 customers, reports SiliconAngle.

Yum Brands, which owns KFC, Taco Bell, and Pizza Hut, had some of its IT systems compromised by a ransomware attack, resulting in the theft of company data, according to TechCrunch.

CRA Business Intelligence’s Third-Party Risk Survey found that in the wake of the SolarWinds incident and many other supply chain attacks, organizations are now focusing on third-party risk.