Privacy

Major instant messaging and VoIP social platform Discord had over four billion messages from almost 620 million users stored across over 14,000 chat servers claimed to be gathered by internet data scraping site Spy.pet, The Register reports.

A social-engineering attack against one of the company’s telephony suppliers led to the breach.

Mounting concerns regarding the operations of major data brokers in the U.S. have prompted House Energy and Commerce Committee Chair Cathy McMorris Rodger, R-Wash., and Senate Commerce, Science and Transportation Committee Chair Maria Cantwell, D-Wash., to introduce the American Privacy Rights Act that would regulate data collection, security, and sharing practices of such entities, CyberScoop reports.

Hackread reports that Miami-based geospatial intelligence company Space-Eyes was claimed to have been compromised by IntelBroker, which purportedly resulted in the exfiltration of the firm's sensitive data, including confidential U.S. national security information.

The streaming service enables 2FA on all accounts following its second credential-stuffing attack this year.

Major Canadian retail chain Giant Tiger had a database containing information from more than 2.8 million customers exposed by a threat actor who claimed responsibility for targeting the discount store chain last month, BleepingComputer reports.

Ninety-six percent of U.S. non-federal acute care hospital websites shared users' information with third-party organizations and data brokers, while only 56% of the 71% of sites with privacy policies explicitly disclosed sharing of user information with third parties, reports The Register.