Breach

Users of the MyAtriumHealth patient portal, formerly MyCarolinas, between January 2015 and July 2019 may have had their names, home and email addresses, phone numbers, treatment or provider details, IPs, and browser cookies exposed to Meta, Google, and other third-party vendors.

Information allegedly exfiltrated by 8Base included invoices, receipts, personal and confidential data, accounting documents, employment contracts, confidential agreements, certificates, and other sensitive details.

Termite — which has already compromised seven victims, two of which are in the U.S. — was regarded by Cyble researchers to be a Babuk ransomware rebrand due to significant similarities between both strains' ransomware binaries.

There’s bipartisan support for a tougher stance on China’s attacks on U.S. telecoms, including issuing stiff fines.

The major USAID contractor says unauthorized access continued up to 25 days after the intrusion was first detected.

Most of the exposed employee records belonged to Bank of America, followed by U.S. multinational conglomerate Koch, Finnish multinational telecommunications firm Nokia, and global real estate and investment management services provider JLL, a report from Atlas Privacy showed.

Here are four lessons learned – and four takeaways from the Finastra breach.