mastouille.fr est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Mastouille est une instance Mastodon durable, ouverte, et hébergée en France.

Administré par :

Statistiques du serveur :

689
comptes actifs

#databreach

26 messages19 participants3 messages aujourd’hui

NEW by me: Australian national known as “DR32” sentenced in U.S. federal court

databreaches.net/2025/05/17/au

His sentence seemed shockingly light to me, given his level of activity and some of the bold attacks he allegedly conducted that were not charged in the federal case.

I am not a conspiracy theorist type, but so much of the docket in this case was restricted or sealed. I'm wondering if some of the stories I had heard about DR32 were true, and the government doesn't want those other incidents becoming known for reasons of homeland security or international relations.

@campuscodi @lawrenceabrams @zackwhittaker

🚨 Cyberattack alert! Hackers struck Nova Scotia Power in March 2025, stealing sensitive customer data including names, SSNs, and even some bank info. 🛡️ No evidence of abuse yet, but affected customers get 2 years of free credit monitoring. Stay vigilant against phishing! 🔒 #CyberSecurity #DataBreach #NovaScotiaPower #InfoSec #IdentityTheft #newz

Read more: techradar.com/pro/security/hac

TechRadar pro · Hackers steal customer data in Nova Scotia Power cyberattackPar Sead Fadilpašić

🔓 Valve responds to Steam data leak claims, says no passwords or personal data was compromised

"New evidence confirms that a leaked sample contains real-time 2FA SMS logs routed via Twilio. The data includes message contents, delivery status, metadata, and routing costs, suggesting backend access to a vendor dashboard or API, not Steam directly."

gosugamers.net/entertainment/n

A hooded person in front of the computer in the dark web, with the Steam Logo in the middle.
www.gosugamers.netValve responds to Steam data leak claims, says no passwords or personal data was compromised | GosuGamersReports of a massive Steam data breach sparked alarm over the weekend, but Valve says there’s less to worry about than first feared.

Coinbase reports data breach caused by support agents bribed to steal customer info

Coinbase discovered that cybercriminals bribed support contractors in India to steal sensitive customer information affecting approximately 1 million users (1% of their customer base), demanding a $20 million ransom and using the data for social engineering attacks that tricked some customers into transferring funds to attackers. Coinbase refused the pay the ransom, offers a $20 million reward for information leading to arrests, and commits to reimbursing affected customers.

**We all like to consider our colleagues good people, and we don't want to insult them by assuming they can do something bad. But this is an example why controls against malicious insiders are important.**
#cybersecurity #infosec #incident #databreach
beyondmachines.net/event_detai

BeyondMachinesCoinbase reports data breach caused by support agents bribed to steal customer infoCoinbase discovered that cybercriminals bribed support contractors in India to steal sensitive customer information affecting approximately 1 million users (1% of their customer base), demanding a $20 million ransom and using the data for social engineering attacks that tricked some customers into transferring funds to attackers. Coinbase refused the pay the ransom, offers a $20 million reward for information leading to arrests, and commits to reimbursing affected customers.

Coinbase data breach exposes customer info and government IDs

According to Coinbase, the attackers obtained this customer data with the help of contractors or support staff outside the U.S. who were paid to access internal systems. Coinbase fired the insiders after they were detected while accessing systems without authorization, but not before they exfiltrated information from those devices.

bleepingcomputer.com/news/secu

Don't procrastinate if you were affected:

Citizens whose SSN was compromised in the MOVEit breach at the National Student Clearinghouse (NSC) have until May 26, 2025, to file a claim to be part of the $9.95 million class action settlement.

Eligible individuals are those whose Social Security number was included in the files affected by the MOVEit security incident between May 28 and May 31, 2023. See more details and access the claim form at the official settlement website: nscsettlement.com/