Breach

Operations of the firm's client delivery services have not been interrupted by the incident, which has not yet been claimed by any ransomware gang, noted Tata Technologies in a notification filed with India's national stock exchange.

After leveraging a zero-day within a third-party app to compromise a BeyondTrust AWS account asset, attackers proceeded to exploit the asset to secure an infrastructure API key that was then utilized to control another AWS account for managing Remote Support infrastructure, according to BeyondTrust's investigation.

TechCrunch reports that New Jersey-based assistive technology firm AngelSense was disclosed by cybersecurity firm UpGuard to have had its users' personally identifiable information and precise location details exposed online as a result of an unsecured server.

The settlement, which was reached on Jan. 21, is pending approval by a Las Vegas federal court with a ruling expected on June 18.

The breach occurred when attackers exploited a stolen account credential to access PowerSchool’s customer support portal and proceed to steal vast amounts of sensitive data.

The UK-based multinational company, which serves the energy, security, aerospace, and defense sectors, is now working with cybersecurity experts to assess the impact of the incident.

Exposed by the database were customers' full names, birthdates, ages, genders, marital status, account IDs, occupations, phone numbers, physical addresses, premium amounts and annuities, and policy types, as well as employees' names, email addresses, MLGA/RGA names and emails, and years in service, according to SafetyDetectives researchers.

Such data compromise may have been achieved through an intrusion against a third-party supplier, which did not have any access to billing or financial details, according to TalkTalk Head of External Communications Liz Holloway, who did not name the supplier and noted that the incident could not be confirmed until the external vendor's investigation is finalized.