Data Security

Cybernews reports that U.S. health provider Cherry Health had data from 185,000 patients compromised following a ransomware attack in December.

New guidelines addressing ethical concerns regarding the intelligence community's acquisition of Americans' commercially available information are set to be unveiled by the Office of the Director of National Intelligence, according to The Record, a news site by cybersecurity firm Recorded Future.

Mental health subscription platform Cerebral has been ordered by the Federal Trade Commission to pay more than $7 million to resolve charges alleging that it provided TIkTok, LinkedIn, Snapchat, and other third-party entities access to sensitive data of nearly 3.2 million users for advertising purposes, reports The Hacker News.

Major instant messaging and VoIP social platform Discord had over four billion messages from almost 620 million users stored across over 14,000 chat servers claimed to be gathered by internet data scraping site Spy.pet, The Register reports.

Organizations could have their sensitive information compromised through a high-severity vulnerability in Google Cloud, Azure, and Amazon Web Services command line interface tools dubbed "LeakyCLI", The Hacker News reports.

The ransomware group posted screenshots of alleged insurer and patient information Monday.

Security pros say the hospitality sector represents a new attack vector for the Daixin Team ransomware gang.

Mounting concerns regarding the operations of major data brokers in the U.S. have prompted House Energy and Commerce Committee Chair Cathy McMorris Rodger, R-Wash., and Senate Commerce, Science and Transportation Committee Chair Maria Cantwell, D-Wash., to introduce the American Privacy Rights Act that would regulate data collection, security, and sharing practices of such entities, CyberScoop reports.