Data Security

While data exposed by Arkana Security was initially suspected to be from a new data breach, BleepingComputer discovered that the recently leaked files were the same as those previously identified in the Snowflake attacks.

Attackers who breached the state's CRIS using a compromised account, which has since been taken down, were able to exfiltrate data, including names, driver's license numbers, license plate numbers, car insurance policy numbers, and addresses, as well as details on crash-related injuries and incident narratives.

U.S. multinational industrial technology firm Sensata Technologies has disclosed that data from current and former employees, as well as their dependents, had been compromised following a ransomware attack in April.

The package uses Japanese Unicode characters, hex encoding, Base64 and more to hide its actions.

A new analysis by Frances data protection authority, CNIL, estimates that the GDPR has delivered significant cybersecurity benefits across the EU, preventing cyber-related losses of up to 1.4 billion since its 2018 implementation, Cybernews reports.

Pennsylvania-based law firm Carpenter, McCadden & Lane had information from over 7,900 individuals confirmed to have been pilfered following an April 2024 attack, reports Cybernews.

StateScoop reports that officials at the Illinois Department of Healthcare and Family Services disclosed the compromise of information from 933 individuals, 564 of which are state residents, following a February phishing attack.

Major app-building platform Passion.io had data from over 3.6 million creators and users inadvertently leaked by an exposed database, reports Hackread.