Les derniers gros vols de données (18 janvier 2024)

Voici les incidents majeurs concernant des pertes ou des vols de données découverts la semaine passée.

Vous retrouvez ci-dessous les liens directs vers les articles les plus intéressants. Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !

Les actus sélectionnées cette semaine

Massive data breach hits India’s SPARSH pension portal
In a significant security lapse, the SPARSH portal, a central platform managing pension processes for Indian defense personnel, including the Army, Navy, Air Force, and civilian staff, has encountered a massive data breach.

International law firm Orrick suffers extensive data breach affecting thousands
San Francisco-based law firm Orrick, Herrington & Sutcliffe reported a significant cyberattack in March 2023, compromising the sensitive health information and personal details of over 637,000 individuals affected by various security incidents.

Fidelity National Financial says hackers stole data on 1.3 million customers | TechCrunch
The November cyberattack knocked the real estate servicing giant offline for a week, freezing the company’s operations.

Framework says hackers accessed customer data after phishing attack on accounting partner | TechCrunch
Repairable laptop maker Framework says hackers accessed customer data after phishing an employee at its accounting service provider.

Human Error and Insiders Expose Millions in UK Law Firm Data Breaches
Millions in the UK have had their data compromised because of cyber incidents involving law firms, a recent analysis of IOC data has found

Texas School Safety Software Data Leak Endangers Student Safety
The data leak occurred due to a misconfigured database at Raptor Technologies, a Texas-based school safety software provider.

Iranian Crypto Exchange Misstep Exposes User Details
Iranian citizens’ personal details were left visible online due to a misconfigured storage system.

Framework discloses data breach after accountant gets phished
Framework Computer disclosed a data breach exposing the personal information of an undisclosed number of customers after Keating Consulting Group, its accounting service provider, fell victim to a phishing attack.

Fallon Ambulance announces data breach affecting over 900,000 patients
Fallon Ambulance, a medical transportation company based in Boston, is being investigated for a data breach including patient and employee data.

FTC blocks data broker from selling information
The FTC has prohibited X-Mode Social and Outlogic from selling or sharing sensitive data to settle allegations regarding precise location data.

Alabama law firm issues data breach notification
An Alabama-based law firm announced that the company experienced a data breach affecting client information, including insurance information.