data breach

UK: Confidential patient data breached by ESNEFT staff

2 min read

Data Breach News

UK: Confidential patient data breached by ESNEFT staff

RiSec.n0tst3 18 February 2022

CASES of snooping on confidential patient data at the trust which runs Colchester Hospital are among the highest in the country, figures reveal. East Suffolk and North Essex Foundation Trust reported the country’s second-highest figure when it came to staff breaching patient privacy. The Daily Mail revealed today incidents involved nosey employees looking up medical records of friends, family, colleagues and neighbours. It said in total, 19 staff at the trust which also runs hospitals in Ipswich, Clacton and Harwich were disciplined between 2017 and 2018 for misuse of...

National Math and Science Databreach, more than 190,000 notified of data security incident

2 min read

National Math and Science Databreach, more than 190,000 notified of data security incident

RiSec.n0tst3 13 February 2022

According to their notification letter, on or about October 13, 2021, their AV software triggered an alert. Through the resulting investigation, NMSI determined that between September 23, 2021 and October 18, 2021, an unauthorized actor “may have had access to certain systems.” The National Math and Science Initiative (NMSI) in Texas describes itself as a non-profit organization whose mission is to improve U.S. student performance in the subjects of science, technology, engineering, and math. Although they claim there is no evidence of misuse, the information that could have been subject to...

Data of Puma Employees Stolen in Kronos Ransomware Attack

2 min read

Data of Puma Employees Stolen in Kronos Ransomware Attack

RiSec.n0tst3 8 February 2022

Data of 6,632 Puma employees was stolen in a December 2021 ransomware attack that hit HR management platform Ultimate Kronos Group (UKG). Identified on December 11, the attack targeted Kronos Private Cloud, a service on which UKG runs applications such as Banking Scheduling Solutions, Healthcare Extensions, UKG TeleStaff, and UKG Workforce Central. Kronos immediately launched an investigation into the attack and last month discovered that Puma was one of the customers impacted by the incident. “Regrettably, this letter is to inform you that we were recently the victim of a ransomware attack...

UK: Data breach at Greensward Academy

2 min read

UK: Data breach at Greensward Academy

RiSec.n0tst3 30 January 2022

Information such as free school meal status, address, deprivation status, exam dispensation and special educational needs of Year 11 children at Greeensward Academy in Hockley was accidentally leaked by a teacher. SENSITIVE information about pupils was leaked to parents and students following a data breach Data breach at Greensward Academy High School The information was made available to Year 11 pupils and their parents via Google Classroom when a mock examinations timetable was shared by the teacher who was unaware the document also contained sensitive information. “It’s just unacceptable...

California public office data breach

2 min read

California public office data breach

RiSec.n0tst3 25 January 2022

Some citizens’ personal information was available to view online A misconfigured database managed by a California public office has potentially exposed the sensitive medical information of citizens. County of Kings, in mid-California, announced that the security flaw in its public webserver made limited information on Covid-19 cases available on the internet. The incident was discovered on November 24, 2021, and involved records obtained by the County’s Public Health Department from the California Department of Public Health and County healthcare providers. An investigation determined that the misconfiguration resulted from an error made by a...

Red Cross hit by a Sophisticated Cyber Attack leading to Databreach

2 min read

Red Cross hit by a Sophisticated Cyber Attack leading to Databreach

RiSec.n0tst3 20 January 2022

A cyberattack on a Red Cross contactor resulted in the theft of personal data for more than 515,000 highly vulnerable people A cyberattack on a Red Cross contactor resulted in the theft of personal data for more than 515,000 highly vulnerable people… A cyberattack on a Red Cross contactor resulted in the theft of personal data for more than 515,000 highly vulnerable people seeking missing families. The infamous attack was disclosed by the International Committee of the Red Cross (ICRC), which confirmed that the data originated from at least...

Data Breach at Iowa Hospital, USA – Again

2 min read

Data Breach at Iowa Hospital, USA – Again

RiSec.n0tst3 21 November 2020

A data breach at an Iowa hospital has exposed the Social Security numbers and private medical information of more than 60,000 patients. Mercy Iowa City began notifying patients on November 13 of a data breach that occurred in spring 2020 after an employee’s email account was accessed by a threat actor. The hospital detected the breach on June 24 when the targeted account began sending out phishing emails and spam. An investigation revealed that the hacked account had been compromised between May 15 and June 24. Security experts brought in...

Faith App Pray.com Exposes Millions Through Cloud Misconfig

pray com the 1 app for prayer and amp faith

2 min read

Cybersecurity News

Faith App Pray.com Exposes Millions Through Cloud Misconfig

RiSec.Mitch 21 November 2020

A popular Christian faith app has unwittingly exposed the personal data of up to 10 million users dating back several years, after misconfiguring its cloud infrastructure, researchers have warned. Santa Monica-headquartered Pray.com claims to be the “#1 App for daily prayer and biblical audio content” and has been downloaded over a million times from the Play Store. Researchers at vpnMentor discovered four misconfigured AWS S3 buckets belonging to the company. Although it had made private around 80,000 files, it failed to replicate these security measures on its Cloudfront CDN,...