Breach

Over 700,000 Illinois residents had their data inadvertently leaked by the state Department of Human Services for four years as a result of a misconfiguration that was only addressed in September, reports The Record, a news site by cybersecurity firm Recorded Future.

The European Space Agency has disclosed plans to call for a criminal inquiry over the Scattered Lapsus$ Hunters hacking group's recent claims of having compromised 500 GB of sensitive data from its servers through a yet-to-be-remediated vulnerability in September, according to The Register.

Major hardware cryptocurrency wallet firm Ledger has confirmed that some of its customers had their data stolen following a cyberattack against third-party payment processor Global-e, reports CoinDesk.

Cognizant Technology Solutions has been accused of failing to properly secure sensitive healthcare data and waiting nearly a year to notify affected individuals in the multiple US class-action lawsuits filed following a data breach at its TriZetto Provider Solutions subsidiary, reports GBHackers News.

SecurityWeek reports that Massachusetts-based Covenant Health had data from 478,188 people stolen in a May data breach previously claimed by the Qilin ransomware gang.

New Zealand's Ministry of Health has been ordered by its minister Simeon Brown to immediately review the response to the sweeping data breach impacting patient information portal ManageMyHealth, which was threatened to have 400,000 exfiltrated files exposed should it refuse to pay the demanded ransom by Tuesday, reports Radio New Zealand.

Major New Zealand patient information portal ManageMyHealth had information from 108,000 to 126,000 individuals, or 6% to 7% of its userbase, compromised following a New Year's Eve data breach, reports 1News.