Data Security

All FBI devices leveraging the agency's AT&T public safety service were noted by a document and officials close to the matter to have been impacted by the incident, which was previously reported to have compromised nearly 109 million customers' call detail records from 2022.

Included in the exposed firewall data are IP addresses, passwords, and configuration files, said Belsen Group in its post on the hacking forum.

All demographic information belonging to students and teachers dating back to a school district with almost 9,000 pupils' initial installation of PowerSchool have also been accessed as a result of the hack, according to a source close to the matter, who noted PowerSchool's lack of multi-factor authentication and other standard security defenses.

Investigation into the incident is still underway, said a University of Oklahoma spokesperson, who also noted the implementation of additional network security measures.

Investigation into the incident revealed that Avery's website had been compromised with a credit card skimmer that enabled the exfiltration of individuals' names, billing and shipping addresses, phone numbers, email addresses, payment card details, and purchase amounts inputted in the website between July 18 and December 9.

Aside from leaking stolen data by Saturday, Clop also warned of revealing additional companies affected by the attacks on Tuesday, indicating that the toll of the Cleo compromise — which Clop claims to include Blue Yonder, Hertz, Chicago Public Schools, Western Alliance Bank, and Nissin Foods — may have been higher than initially reported.

Attackers who trespassed on MIG's computer environment may have compromised individuals' full names and financial details, said the major Southeastern U.S. mortgage lending firm in a breach notice on its website that did not specify the nature of the intrusion and the number of customers affected by the incident.

Infiltration of Telefónica's Jira platform through infostealer theft of credentials belonging to over a dozen of the firm's employees was followed by the targeting of employees with admin privileges and the eventual exfiltration of a list with 24,000 Telefónica employee names and emails, 5,000 internal files, and half a million internal Jira issue summaries.