DataBreaches.Net

Weill Cornell Medicine discloses an insider data breach

Dissent — Fri, 20 Mar 2026 22:06:00 +0000

On February 23, HHS received a breach submission from Weill Cornell Medicine in New York. The submission reported that 516 patients were affected by an incident involving Unauthorized Access/Disclosure of data in Electronic Medical Records (EMR). DataBreaches emailed the hospital to request an explanation and received the following statement from a spokesperson: After thorough investigation,...

Source

Cyber OpSec Fail: Beast Gang Exposes Ransomware Server

Dissent — Fri, 20 Mar 2026 18:30:36 +0000

Robert Lemos writes: An open server hosted on a German cloud provider’s systems has been discovered, containing the entire toolset of a member of the Beast ransomware group. The find exposes the tactics, techniques, and procedures of the threat actor, but also reveals that Beast shares many of those TTPs with other ransomware gangs. According...

Source

Strengthening Cybersecurity in Canada’s Municipal Sector: A Verified Analysis

Dissent — Fri, 20 Mar 2026 18:15:32 +0000

From the Nonprofit Tech Support: When the City of Hamilton suffered a ransomware attack on February 25, 2024, it marked a sobering milestone in Canadian municipal cybersecurity. The attack crippled roughly 80% of Hamilton’s network, impacting services from business licensing to the fire department’s records. Attackers demanded an $18.5 million ransom, which the city refused...

Source

Jaguar Land Rover’s cyber bailout sets worrying precedent, watchdog warns

Dissent — Fri, 20 Mar 2026 17:20:39 +0000

Carly Page reports: The UK’s cyber watchdog has warned that the government’s £1.5 billion bailout of Jaguar Land Rover (JLR) risks setting a troubling precedent for how Britain handles major cyber crises. Speaking at an event marking the Cyber Monitoring Centre’s (CMC) first operational year, Ciaran Martin, chair of the CMC’s technical committee and a distinguished fellow...

Source

Global cybercrime crackdown: over 373,000 dark web sites shut down

Dissent — Fri, 20 Mar 2026 12:58:11 +0000

From Europol, some impressive results: On 9 March 2026, a global operation led by German authorities and supported by Europol was launched against one of the largest networks of fraudulent platforms in the dark web. The investigation began in mid-2021 against the dark web platform “Alice with Violence CP”. During the investigation, authorities discovered that...

Source

University College of Dublin staff member due in court over accessing student data

Dissent — Fri, 20 Mar 2026 12:50:04 +0000

Paul Reynolds provides today’s reminder of the insider threat. This one involves a univeristy in Dublin, Ireland. A UCD staff member is due in court this morning charged in connection with unlawfully accessing student data at the college. The man, who is in his 50s, was arrested this morning following an investigation by the Garda...

Source

North Carolina tech worker found guilty of insider attack netting $2.5M ransom

Dissent — Fri, 20 Mar 2026 02:05:05 +0000

Matt Kapko reports: A 27-year-old North Carolina man was found guilty of six counts of extortion for a series of crimes he committed while working as a data analyst contractor for a D.C.-based international technology company, the Justice Department said Thursday. Cameron Nicholas Curry, also known as “Loot,” stole a trove of corporate data, including sensitive...

Source

Justice Department Disrupts Iranian Cyber Enabled Psychological Operations

Dissent — Thu, 19 Mar 2026 22:35:54 +0000

A Court-Authorized Domain Seizure Removes Four Websites Facilitating the Islamic Republic of Iran’s Ministry of Intelligence and Security’s Hacking Efforts Tied to Psychological Operations and Transnational Repression WASHINGTON – Today, the Justice Department announced the seizure of four domains as part of an ongoing effort to disrupt hacking and transnational repression schemes conducted by the Islamic Republic...

Source

UMMC continues investigating cyberattack and recovering from impact.

Dissent — Thu, 19 Mar 2026 15:53:22 +0000

In February, the University of Mississippi Medical Center (UMMC) announced it was closing dozens of its clinics statewide after a cyberattack disrupted multiple IT systems and cut off access to its Epic EMR platform, which contained patients’ medical records. The attack resulted in a nine-day service suspension, during which most outpatient clinics statewide were closed,...

Source

Russian hackers exploit Zimbra flaw in Ukrainian govt attacks

Dissent — Thu, 19 Mar 2026 15:12:09 +0000

Sergiu Gatlan reports: Hackers part of APT28, a state-backed threat group linked to Russia’s military intelligence service (GRU), are exploiting a Zimbra Collaboration Suite (ZCS) vulnerability in attacks targeting Ukrainian government entities. This high-severity security flaw (tracked as CVE-2025-66376 and patched in early November) stems from a stored cross-site scripting (XSS) that unauthenticated attackers can exploit to gain remote...

Source