Data Security

Reuters reports that major Chinese state-run telecommunications firms China Telecom, China Mobile, and China Unicom have been subpoenaed by the House Committee on China lawmakers to respond to queries concerning the security of Americans' data collected by their U.S. cloud and internet businesses following recent attacks by Volt Typhoon and other Chinese state-backed threat operations against U.S. telcos and other critical infrastructure.

Widely used workplace time tracking and productivity monitoring software WorkComposer had over 21 million screenshots of employee devices unintentionally leaked by an unprotected Amazon S3 bucket, Cybernews reports.

Kelly Benefits, a Maryland-based benefits administration and payroll solutions provider, has confirmed that almost 264,000 individuals served by its customers Amergis, CareFirst, Beam Benefits, Intercon Truck of Baltimore, Beltway Companies, The Guardian Life Insurance Company of America, Transforming Lives, and Publications Circulation Fulfilment had their data compromised following a cyberattack in December, SecurityWeek reports.

Major health insurance provider Blue Shield of California has disclosed having sensitive data from 4.7 million individuals inadvertently shared with Google Ads for nearly three years, according to The Record, a news site by cybersecurity firm Recorded Future.

Officials at Baltimore City Public Schools have confirmed that over 1,150 students, as well as current and former employees, contractors, and volunteers, had their information stolen following a ransomware attack in February, according to The Record, a news site by cybersecurity firm Recorded Future.

Leading South Korean telecommunications provider SK Telecom had some of its customers' USIM details leaked following the compromise of its systems, according to The Korea Times.

Major Canadian e-commerce platform Shopify can face legal action in California over its collection of buyers' personal information following a San Francisco appeals court decision, according to Reuters.

SiliconAngle reports that Cy4Data Labs, a California-based data protection startup, has obtained $10 million from its initial funding round, which will be allocated toward bolstering sales and marketing for its Cy4Secure data security solution that allows in-use data encryption and protection.