Privacy

Nearly 500,000 Department of Veterans Affairs employees had their COVID-19 vaccination status data breached last year due to inadequate data protection measures at the VA, FedScoop reports.

Novel DuckLogs malware-as-a-service detailed More than 6,000 victims have been compromised by the new DuckLogs malware-as-a-service operation, whose platform is being leveraged by over 2,000 cybercriminals, according to BleepingComputer.

Facebook credentials belonging to more than 300,000 users across 71 countries have been compromised by the Android threat campaign dubbed "Schoolyard Bully Trojan," reports The Hacker News.

After reports detailing the scraping of hospital data by Meta Pixel tools and other tracking tech and several breach notices, OCR blasts the likely privacy violations and reminds providers of HIPAA requirements.

Reuters reports that Medibank, the largest health insurer in Australia, has disclosed further leaks of medical records stolen from a massive cyberattack in October, amid media reports that attackers announced in a blog post that leaks of data from nearly 10 million of the insurer's current and former clients have been completed.

Over 2.2M pediatric patients impacted by Connexin Software breach More than 2.2 million patients across almost 120 pediatric physician practices and practice groups in the U.S. may have had their data compromised by a breach at pediatric health IT vendor Connexin Software in August, according to HealthITSecurity.

Virginia's Southampton County has disclosed being impacted by a ransomware attack in September that may have compromised personal data, SecurityWeek reports.