Data Security

Major U.S. luxury jewelry maker Tiffany & Co. disclosed that more than 2,500 of its customers had their data stolen following a cyberattack against its systems in May, Cybernews reports.

The U.S. Social Security Administration has refuted accusations by its former Chief Data Officer Chuck Borges claiming that its Numerical Identification System database had been copied by Department of Government Efficiency officials on an unsecured cloud server, Ars Technica reports.

Intrusions exploiting stolen Salesloft Drift OAuth tokens were claimed by the ShinyHunters hacking operation, also known as UNC6040, to have resulted in the theft of more than 1.5 billion Salesforce records from 760 organizations, according to BleepingComputer.

Leading South Korean telecommunications provider SK Telecom has repudiated the legitimacy of 100 GB of data purportedly stolen from its systems by the Scattered Lapsus$ Hunters threat group, Yonhap News Agency reports.

Almost 45,000 Texas residents who sought state natural disaster relief over the past decade were confirmed by the state General Land Office to have had their personal details compromised following a cyberattack exploiting a Texas Integrated Grant Reporting system misconfiguration over the summer, StateScoop reports.

SecurityWeek reports that U.S. payment solutions firm American First Finance had data from 689,000 individuals stolen following an insider breach at Utah-based fintech and banking services provider FinWise Bank in May 2024.

Major French multinational luxury cosmetics manufacturer Clarins Group had information from more than 600,000 customers in the U.S., Canada, and France purportedly exfiltrated by the Everest ransomware gang, reports Cybernews.

BBC reports that millions of Gucci, Balenciaga, and Alexander McQueen customers around the world may have had their data compromised following a cyberattack against parent firm Kering claimed by the ShinyHunters hacking operation, also known as UNC6040.