Data Security

Security Affairs reports that Vietnam's Cyber Emergency Response Team has disclosed unauthorized access to the country's National Credit Information Center after it was claimed to have been compromised by the ShinyHunters hacking operation.

Email phishing, steganography, process hollowing and credential theft were observed in a recent attack.

The U.S. Social Security Administration has been urged by Senate Finance Committee Chair Mike Crapo, R-Idaho, to provide more details on the security of Americans' Social Security information after its former Chief Data Officer Chuck Borges alleged that such data had been uploaded by the Department of Government Efficiency on an unsecured cloud server, NextGov/FCW reports.

UK-based train operator London North Eastern Railway had certain passenger information stolen following an intrusion against a third-party supplier identified on Wednesday, according to Hackread.

Officials at Panama's Ministry of Economy and Finance have disclosed the potential compromise of one of its computers in a cyberattack claimed by the INC Ransom ransomware-as-a-service group last week, reports BleepingComputer.

SecurityWeek reports that Ohio-based mobile tool company Cornwell Quality Tools had information from 103,782 people compromised following a December data breach, which had been claimed by the Cactus ransomware operation earlier this year.

Minnesota-based fitness technology services provider Hello Gym had more than 1.6 million audio recordings of North American gym members leaked by a misconfigured database, reports Hackread.

Major Android and iOS generative artificial intelligence app developer Vyro AI had 116 GB of user logs from its ImagineArt, Chatly, and Chatbotx apps inadvertently exposed in real-time by an unprotected Elasticsearch server, Cybernews reports.