Breach

Cybernews reports that South Korean multinational manufacturing and services conglomerate SK Group had over 1 TB of data allegedly compromised in an attack claimed by the Russia-linked Qilin ransomware-as-a-service group, also known as Agenda.

GrubHub had 70 million lines of data from almost 17 million accounts touted to have been compromised in an attack against the major U.S. online food delivery service in February, according to Cybernews.

Hackread reports that widely used e-commerce platform WooCommerce had more than 4.4 million user records including those from the National Institute of Standards and Technology, the New York City Department of Education, NVIDIA, and the University of Oklahoma purportedly stolen by the threat actor "Satanic" through a third-party breach.

Independent bureau of Treasury notified Congress that hack was a “major incident.”

The U.S. Treasury Department's Office of the Comptroller of the Currency had more than 150,000 emails disclosed by people close to the matter.

BleepingComputer reports that major U.S. food manufacturer WK Kellogg has disclosed having its data compromised in a December ransomware attack by the Clop ransomware operation that involved a pair of Cleo managed file transfer software zero-day vulnerabilities just after the firm was included in the ransomware gang's leak site.

Global car rental firm Europcar Mobility Group had its GitLab repositories allegedly breached by the threat actor "Europcar" late last month, purportedly resulting in the compromise of data from 50,000 to 200,000 customers and other sensitive information, BleepingComputer reports.