Such a demand from Rhysida, which has an Oct. 30 deadline, comes a week after Easterseals disclosed in a filing with the Office of the Maine Attorney General that 14,855 individuals had their information, including their full names, addresses, Social Security numbers, driver's licenses, passports, and medical and health details, exfiltrated as part of the April 1 attack.
Investigation into the incident conducted by a third party revealed that attackers may have accessed insurance practice files kept in a network location, said the insurer in breach notification letters.
Such an incident has stemmed from Internet Archive's failure to rotate its authentication tokens, as initially asserted by the hacker, according to a Zendesk spokesperson.
Infiltration of a laptop enabled attacker access to Transak's third-party know-your-customer vendor, facilitating the exposure of clients' names, birthdates, driver's license data, passports, and selfies, but not their financially sensitive details.
Also included in the data purportedly stolen from Country Inn & Suites were credit card information, billing details, internal emails, messages, incidents, and calendar details of previous and upcoming bookings.
Attackers leveraged a Nidec Precision employee's valid VPN account credentials to infiltrate the firm's server, enabling the exfiltration of more than 50,000 files, all of which remain unencrypted, including internal files, green procurement-related documents, communications from business partners, contracts, business documents, and labor safety and health policies.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.