$133 million stolen from French bank via exploited service provider
Attackers siphoned an estimated $133 million from Crédit Mutuel Arkéa by using the bank's own account to wire money to other banks, from where it was possibly converted into cryptocurrency. The French cooperative banking group, which has €211.5 billion in total assets and more than 5.8 million customers, confirmed the attack days after blockchain investigator ZachXBT began tracking over $100 million in suspected stolen funds moving out of centralized exchange accounts. READ MORE...
Over 3 Million People Hit by Frontline Education Data Breach
Frontline Education has informed the Indiana Attorney General's Office that a data breach it suffered in August affected more than 3 million people. The K-12 school administration software provider puts the total number of affected individuals at 3,085,266. That is well over twice the figure from the company's earlier filings with several other states, which added up to roughly 1.3 million. READ MORE...
13.3 million people's medical data exposed, companies pay $300,000
The New York attorney general (AG) has reached a settlement over a medical data breach that affected 13.3 million people after basic security failures. Perry Johnson & Associates (PJ&A) and four related companies have agreed to pay $300,000 and implement extensive security reforms following a breach that exposed personal and medical information belonging to more than 13.3 million people. They face another $9.7 million in penalties if they fail to meet the settlement's terms. READ MORE...
Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk
Japanese electronics giant Iris Ohyama has taken down its online store after discovering that attackers may have accessed the personal information of 7.7 million customers, leaving shoppers unable to place orders. The retailer, which sells everything from home appliances and furniture to pet supplies, first disclosed the incident on October 29, a day after discovering a suspicious file on a third-party cloud service used by its Iris Plaza ecommerce operation. READ MORE...
Revolve Puts Data Breach Victim Count at 1.5 Million
Online fashion retailer Revolve has informed the Indiana Attorney General's Office that 1,515,073 individuals were impacted by the data breach it disclosed in October. The company revealed the incident on October 29 in a filing with the US Securities and Exchange Commission (SEC). It started sending notification letters to impacted customers around the same time. Revolve had not publicly shared a total. READ MORE...
Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. In these fraud schemes (also known as romance baiting or pig butchering scams), criminals lure targets through social media, dating sites, and messaging apps into fake investment schemes, stealing their money instead of investing the funds as promised. READ MORE...
Chainalysis says hackers stole credentials and tokens for all of its customers
Blockchain analysis firm Chainalysis said that hackers have obtained sensitive personal information-including names, usernames, password hashes, and live tokens-for all of its users following a breach of its network security. The accomplishment could be a major coup for the attackers. Both Chainalysis and public sources have revealed a long list of high-profile customers, including government agencies such as the FBI, US Immigration and Customs Enforcement agency, and the US Air Force. READ MORE...
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Hackers are using Artex and other agentic AI-based frameworks to scan public GitHub repositories for exposed credentials and API keys, according to a report Thursday from Microsoft Threat Intelligence. The credentials are then deployed in downstream attacks against targeted organizations. Starting Oct. 28, researchers found a single IP address using compromised but still-valid application credentials to sign into downstream tenants. READ MORE...
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Three men concocted an elaborate, yearslong scheme that defrauded companies of at least $129 million by using AI to impersonate executives and lawyers, tricking targeted victims into transferring large payments to criminal-controlled accounts, the Justice Department said Thursday. Jacob Soall, Sharon Hazan and Guy Sheetrit allegedly used AI to impersonate the voices and images of chief executive officers at companies and lawyers at major international law firms. READ MORE...
Nvidia hardware worth $11.4M vanished between Oakland and Texas
A shipment of Nvidia hardware valued at $11.4 million vanished in transport between Oakland and Texas over the summer, and more than two months later, police have announced no arrests or recovery of the cargo. As reported by The Mercury News, six pallets of unknown Nvidia equipment left Oakland on August 29 on a truck bound for Fort Worth, Texas. The hardware was reportedly picked up as scheduled by a truck bearing the logo of a food transportation company before vanishing off the grid. READ MORE...
- ...in 1914, actress and inventor Hedy Lamarr is born. She was both a Hollywood leading lady and also devised the radio technology now used in Wi-Fi, GPS, and cell phones.
- ...in 1934, astronomer, cosmologist, and author Carl Sagan is born. His 1980 television series "Cosmos" is among the most popular PBS documentaries of all time.
- ...in 1967, the first issue of "Rolling Stone" magazine is published.
- ...in 1985, 22-year-old Garry Kasparov defeats Anatoly Karpov to become the youngest World Chess Champion.
- ...in 1989, Communist East Germany opens checkpoints in the Berlin Wall to West Germany, leading to German reunification and the fall of communism in Eastern Europe.
