Breach

Infiltration of an internal secure file platform between Oct. 31 and Nov. 8 enabled the threat actor to pilfer a limited number of individuals' names and financial account details, said Finastra in its notification letter given to the Massachusetts Office of Consumer Affairs and Business Regulation.

Insight Partners disclosed immediately acting to contain and remediate the breach of some of its systems upon its discovery on Jan. 16, adding that an investigation has revealed no evidence suggesting persistent access to the impacted systems while dismissing the occurrence of further disruptions as a result of the incident.

Aside from impacting printed publication distribution, such an intrusion — which was not acknowledged as a ransomware attack — also interrupted billing, collections, and vendor payments, while temporarily limiting online operations, according to Lee Enterprises' filing with the Securities and Exchange Commission.

Major Lithuanian food manufacturer UAB Vičiūnų grupė had numerous of its websites breached and infected with malicious code that could facilitate system data exfiltration from and further payload deployment on website visitors' computers.

Infiltration of Zacks' active directory as domain admin enabled the theft of source code belonging to the company's primary website and 16 others, according to the threat actor, who has been peddling the exfiltrated account information, including full names, usernames, physical and email addresses, and phone numbers, for a small amount of cryptocurrency.

Such an intrusion was claimed to have resulted in the erasure of user accounts and the locking of administrative accounts, with Tooda hackers alleging the release of Doxbin admins' personal information and a blacklist of individuals who had paid for the data to be removed from the site while threatening to expose a user database with almost 136,000 username and email pairs.

Despite confirming that its China-based subsidiary Unimicron Technology (Shenzhen) Corp., had been disrupted by a ransomware intrusion on Jan. 30, Unimicron did not disclose being subjected to a data breach as it noted an ongoing investigation into the incident.

Included in the exposed data were discussions regarding development and technical topics, as well as files uploaded to OmniGPT, such as office projects, market analysis reports, university assignments, police verification assignments, and others that were found to contain credentials and billing details, according to Gloomer.