Breach

BMW Financial Services had data from 1,952 individuals across the U.S. compromised following a cyberattack against Texas-based fintech firm AIS in February, Cybernews reports.

An SQL injection exploit exposed the users and owner of CatWatchful stalkerware.

Threat actors behind the intrusion had leveraged breached client credentials to infiltrate C&M's systems and services, according to C&M Commercial Director Kamal Zogheib, who noted that an investigation into the incident alongside Brazil's central bank and the Sao Paulo state police is already underway.

Additional details regarding the possible political bent of the intrusion were not provided by a Columbia spokesperson, who noted an ongoing investigation into the attack's connection to the display of President Donald Trump's photo on multiple public monitors across the campus during the compromise.

While not confirmed, security pros say the attack resembles recent attacks on airlines and retailers by Scattered Spider.

Maryland-based benefits administration and payroll solutions provider Kelly Benefits has disclosed that a total of 553,660 individuals had their data compromised as a result of a cyberattack in December, which was initially reported to have affected only 32,234 people, according to BleepingComputer.

Missouri healthcare provider Esse Health had information from 263,601 people compromised following an April cyberattack that impacted its phone systems and electronic medical records, Security Affairs reports.

USA Today reports that nearly 103,000 individuals under Medicare were disclosed by the Centers for Medicare & Medicaid Services to potentially have had their information compromised following a "data incident" identified in early May.