Breach

SecurityWeek reports that JPMorgan Chase has announced that information from 659 private equity fund investors had been stolen following a breach at law firm Fried, Frank, Harris, Shriver & Jacobson LLP.

The breach, which occurred between March 19 and June 1 of last year, impacted patients and current or former employees of CMH, an integrated healthcare system serving approximately 400,000 people and managing facilities like Central Maine Medical Center.

The attackers accessed basic identification details, contact information, national identity numbers, contract details, and payment information, including IBANs.

The breach allowed attackers to access customer names, email addresses, postal addresses, phone numbers, and dates of birth.

The University of Hawaii has disclosed an August ransomware intrusion that compromised Cancer Center study participants' personal data, including their Social Security numbers, only last month, which is way past the 20-day breach reporting deadline under state law, reports The Associated Press.

Australia-based rental car insurance firm Prosura had its internal IT systems compromised in a cyberattack identified on Saturday, prompting unauthorized customer data access and fraudulent email delivery, reports The Cyber Express.

Texas-based Gulshan Management Services, which operates more than 150 Handi Plus and Handi Stop gas stations and convenience stores across the U.S., had data from over 377,000 individuals pilfered following a September data breach, HackRead reports.

Over 700,000 Illinois residents had their data inadvertently leaked by the state Department of Human Services for four years as a result of a misconfiguration that was only addressed in September, reports The Record, a news site by cybersecurity firm Recorded Future.