Privacy

More than 1.2 million individuals had their data compromised following a data breach at U.S. health-focused home meal delivery service PurFoods in January, which was only identified the following month, reports The Record, a news site by cybersecurity firm Recorded Future.

While security teams can start with patching, here’s a multi-pronged approach to protecting PII in web apps.

Rhysida ransomware group claims to have stolen a database that contains 500,000 Social Security numbers, corporate documents, and patient records.

Major risk and financial advisory firm Kroll has confirmed that certain files with personal data belonging to the bankruptcy credit claimants of BlockFi, FTX, and Genesis Global Holdco have been compromised following a successful SIM swapping attack against one of its employees, reports BleepingComputer.

Ransomware attack hits Ohio history organization Nearly 7,600 individuals had their sensitive data exposed following a ransomware attack against the Ohio History Connection, a nonprofit managing the state's museums and historical sites, as well as the state archives, last month, according to The Record, a news site by cybersecurity firm Recorded Future.

French unemployment registration and financial aid agency Pole emploi had data from an estimated 10 million individuals compromised in a data breach related to the widespread MOVEit hack conducted by the Cl0p ransomware gang, with the agency only overshadowed by U.S. government contractor Maximus in terms of total victim toll, BleepingComputer reports.

BBC reports that an investigation into a suspected data breach has been launched by the UK's Metropolitan Police following a compromise of its supplier's systems, which contained the police force's data, including names, ranks, vetting levels, photos, and pay figures.

Significant human rights concerns have been raised by various organizations regarding the United Nations' cybercrime treaty, including its potential to increase government surveillance powers and repression, amid final negotiation sessions for the treaty, reports The Record, a news site by cybersecurity firm Recorded Future.