Breach

More than 5.4 million Twitter users ranging from companies and celebrities to random users had their contact details compromised in a Twitter data breach stemming from the exploitation of an already addressed vulnerability, with the threat actor dubbed 'devil' selling the stolen data for $30,000, BleepingComputer reports.

Major digital security firm Entrust which has identity management and authentication services used by various U.S. government agencies has confirmed being hit by a cyberattack last month, resulting in the theft of corporate data, according to BleepingComputer.

The Associated Press reports that T-Mobile has agreed to settle a class action lawsuit pertaining to a data breach last year by paying $350 million to nearly 80 million U.S. customers whose data, including names and Social Security numbers, had been stolen in the attack.

An April cyberattack and subsequent monthlong network outage led to at least $100 million in “unfavorable impact,” and a reduction in admissions and further business disruptions.

More than 69 million members of the virtual pet website Neopets had their personal information compromised following a data breach, reports BleepingComputer.

Magecart campaigns recently struck the online point-of-sale and ordering platforms MenuDrive, Harbortouch and InTouchPOS, affecting more than 300 restaurants.

Despite 85% of financial organization respondents to a survey by passwordless company Hypr saying they experienced a breach in the last year, 9 in 10 insisted their existing authentication approach was secure.

While financial services firm LendingTree has refuted involvement with a data breach that compromised 200,000 loan applications, it has confirmed the exposure of data from more than 70,000 customers as a result of a separate data breach in February, according to The Record, a news site by cybersecurity firm Recorded Future.