Breach

Security Affairs reports that major Brazilian recruitment and selection service platform CIEE One was discovered by Resecurity to have had 248,725 records belonging to businesses and trainees exfiltrated and later exposed by the financially motivated underground data broker "888".

California-based technology startup incubator IdeaLab has confirmed the theft of data belonging to current and former employees, support service contractors, and their dependents following a Hunters International ransomware attack in October, reports BleepingComputer.

Officials at Virginia's Gloucester County reported that 3,527 current and former employees had their personal data exfiltrated following an April ransomware attack claimed by the BlackSuit ransomware operation, according to The Record, a news site by cybersecurity firm Recorded Future.

Major Spanish multinational telecommunications company Telefnica had 106 GB of data allegedly stolen from its systems in late May threatened to be exposed by Hellcat ransomware gang member "Rey," who has already leaked a 2.6 GB archive containing more than 20,000 files, BleepingComputer reports.

BMW Financial Services had data from 1,952 individuals across the U.S. compromised following a cyberattack against Texas-based fintech firm AIS in February, Cybernews reports.

An SQL injection exploit exposed the users and owner of CatWatchful stalkerware.

Threat actors behind the intrusion had leveraged breached client credentials to infiltrate C&M's systems and services, according to C&M Commercial Director Kamal Zogheib, who noted that an investigation into the incident alongside Brazil's central bank and the Sao Paulo state police is already underway.