Breach

California's Tahoma County may have had its employees', service recipients', and affiliates' personally identifiable information compromised following a data breach of systems belonging to its Department of Social Services, which was identified on April 9 but was found to have occurred from Nov. 18, 2021 to April 9, 2022, according to SecurityWeek.

The legal and regulatory challenges facing SolarWinds – the IT management company that was at the heart of a 2020 software supply chain attack that compromised at least 9 federal agencies and 100 private companies – have changed substantially over the past week as old threats have diminished and new ones have emerged.

Singapore ministerial summit not significantly affected by Shangri-La breach ZDNET reports that foreign government delegates who joined a high-level Shangri-La Dialogue defense summit, including defense ministers from the U.S., Australia, and Japan, are unlikely to have significantly been impacted by a data breach across eight Shangri-La hotels in September.

This week’s healthcare data breach roundup has a number of vendor-related incidents, including further insights into the previously reported management company impacts on anesthesia practices.

Chile's Atacama Large Millimeter Array observatory, which is one of the largest astronomical observatories worldwide, has been impacted by a cyberattack late last month, which has not affected the observatory's scientific data and antennas but has resulted in restricted email service use and space observation suspensions, according to The Record, a news site by cybersecurity firm Recorded Future.

Cyberattack disrupts Maple Leaf Foods BleepingComputer reports that leading Canadian prepared meats and poultry food producer Maple Leaf Foods had its systems taken down and operations interrupted following a cyberattack over the weekend.

According to the terms of the settlements, Experian, one of the big-three credit reporting agencies, will bear a $13.67 million fine for security incidents in 2012 and 2015 while T-Mobile will pay $2.43 million for its part in the 2015 Experian breach. Both companies have agreed to take steps to improve their security measures.  

Continental ransomware attack claimed by LockBit BleepingComputer reports that the LockBit ransomware group has admitted to targeting German multinational automotive parts manufacturer Continental, from which it also stole certain data.