Breach

U.S. educational technology firm Illuminate Education has been ordered to pay a $5.1 million fine to resolve alleged security failings following a data breach four years ago that compromised information from students across 49 states, reports The Record, a news site by cybersecurity firm Recorded Future.

Oracle EBS zero-day hits major orgs; FIN11 threat group linked to data theft, extortion spree.

TechCrunch reports that the University of Pennsylvania has admitted to having its data stolen after initially dismissing hacking email notices sent to its alumni and other affiliates as fake last week.

Hyundai AutoEver America, the IT solutions supplier affiliate of Hyundai Motor Group, had individuals' personal details breached following a cyberattack against its IT environment earlier this year, according to BleepingComputer.

Switzerland-based international bank Habib Bank AG Zurich had over 2.5 TB of data purportedly stolen by the Qilin ransomware group, Cybernews reports.

SonicWall has attributed the cyberattack against MySonicWall accounts that exposed certain firewall backup files in September to a state-sponsored threat actor, according to Security Affairs.

Information from 1.5 million people has been exposed following an August cyberattack against Swedish work and HR management IT systems supplier Miljdata, which caters to almost 80% of municipalities across Sweden, according to BleepingComputer.

Cybernews reports that major Japanese media company Nikkei Inc. which owns leading financial newspapers The Nikkei and the Financial Times has confirmed having its network breached through a hacked employee's Slack account, resulting in the compromise of its business partners' sensitive data, as well as the chat histories of 17,368 people using the messaging platform.