Breach

Major Spanish multinational telecommunications company Telefnica had 106 GB of data allegedly stolen from its systems in late May threatened to be exposed by Hellcat ransomware gang member "Rey," who has already leaked a 2.6 GB archive containing more than 20,000 files, BleepingComputer reports.

BMW Financial Services had data from 1,952 individuals across the U.S. compromised following a cyberattack against Texas-based fintech firm AIS in February, Cybernews reports.

An SQL injection exploit exposed the users and owner of CatWatchful stalkerware.

Threat actors behind the intrusion had leveraged breached client credentials to infiltrate C&M's systems and services, according to C&M Commercial Director Kamal Zogheib, who noted that an investigation into the incident alongside Brazil's central bank and the Sao Paulo state police is already underway.

Additional details regarding the possible political bent of the intrusion were not provided by a Columbia spokesperson, who noted an ongoing investigation into the attack's connection to the display of President Donald Trump's photo on multiple public monitors across the campus during the compromise.

While not confirmed, security pros say the attack resembles recent attacks on airlines and retailers by Scattered Spider.

Maryland-based benefits administration and payroll solutions provider Kelly Benefits has disclosed that a total of 553,660 individuals had their data compromised as a result of a cyberattack in December, which was initially reported to have affected only 32,234 people, according to BleepingComputer.

Missouri healthcare provider Esse Health had information from 263,601 people compromised following an April cyberattack that impacted its phone systems and electronic medical records, Security Affairs reports.