Medical device maker UFP Technologies warns of data stolen in cyberattack implemented isolation and remediation steps read more about Medical device maker UFP Technologies warns of data stolen in cyberattack

Medical device maker UFP Technologies warns of data stolen in cyberattack reconbee.com/medical-devi...

#medicaldevice #UFPtechnologies #datastolen #DataProtection #cyberattacks

16th January 2026 Cyber Update: Nissan Hit by Everest Ransomware, 900GB Data Stolen Japanese automaker Nissan is the latest victim of the Everest ransomware group, which claims to have stolen 900GB of sensitive data. The breach, announced January 10, threatens internal records, deale...

16th January 2026 Cyber Update: Nissan Hit by Everest Ransomware, 900GB Data Stolen
www.cybernewscentre.com/16th-january...

#Infosec #Security #Cybersecurity #CeptBiro #Nissan #EverestRansomware #DataStolen

MathWorks Confirms Ransomware Incident that Exposed Personal Data of Over 10,000 People   MathWorks, the company behind MATLAB and Simulink, has confirmed a ransomware attack that disrupted several of its online services and internal systems. The company said the disruption affected services customers use to sign in and manage software, and that it alerted federal law enforcement while investigating the incident.  According to state notifications filed with regulators, the attack resulted in the unauthorized access and theft of personal information for 10,476 people. These filings list the full count reported to state authorities.  What was taken and who is affected The company’s notices explain that the records exposed vary by person, but may include names, postal addresses, dates of birth, Social Security numbers, and in some cases non-U.S. national ID numbers. In short, the stolen files could contain information that makes victims vulnerable to identity theft.  MathWorks’ own statements and regulatory notices put the window of unauthorized access between April 17 and May 18, 2025. The company discovered the breach on May 18 and publicly linked the outage of several services to a ransomware incident in late May. MathWorks says forensic teams contained the threat and that investigators found no ongoing activity after May 18.  What is not yet known  MathWorks has not identified any named ransomware group in public statements, and so far there is no verified public evidence that the stolen data has been published or sold. The company continues to monitor the situation and has offered identity protection services for those notified.  What you can do  If you use MathWorks products, check your account notices and follow any enrollment instructions for identity protection. Monitor financial and credit accounts, set up fraud alerts if you see suspicious activity, and change passwords for affected services. If you receive unusual messages or requests for money or personal data, treat them with suspicion and report them to your bank or local authorities. • Keep an eye on financial activity: Regularly review your bank and credit card statements to spot unauthorized transactions quickly. • Consider credit monitoring or freezes: In countries where these services are available, they can help detect or prevent new accounts being opened in your name. • Reset passwords immediately: Update the password for your MathWorks account and avoid using the same password across multiple platforms. A password manager can help create and store strong, unique passwords. • Enable multi-factor authentication: Adding a second layer of verification makes it much harder for attackers to gain access, even if they have your login details. • Stay alert for phishing attempts: Be cautious of unexpected emails, calls, or texts asking for sensitive information. Attackers may use stolen personal details to make their messages appear more convincing.

MathWorks Confirms Ransomware Incident that Exposed Personal Data of Over 10,000 People #CyberFraud #DataStolen #MathWorks

#datacollaboration #datasharing #datasovereignity #datacommons
mola

#datastolen #surveillance #dataplatforms

no mola

A Helsinki parlarem de solucions, alternatives i polítiques de dades reals. Amb empoderament i control dels propietaris de les dades. Tots nosaltres. A #MyData2025.

New Hacking Tool Lets Ransomware Groups Disable Security Systems   Cybersecurity experts have discovered a new malicious tool designed to shut down computer security programs, allowing hackers to attack systems without being detected. The tool, which appears to be an updated version of an older program called EDRKillShifter, is being used by at least eight separate ransomware gangs. According to researchers at Sophos, the groups using it include RansomHub, Blacksuit, Medusa, Qilin, Dragonforce, Crytox, Lynx, and INC. These criminal gangs use such programs to disable antivirus and Endpoint Detection and Response (EDR) systems software meant to detect and stop cyberattacks. Once these protections are switched off, hackers can install ransomware, steal data, move through the network, and lock down devices. How the Tool Works The new tool is heavily disguised to make it difficult for security software to spot. It starts by running a scrambled code that “unlocks” itself while running, then hides inside legitimate applications to avoid suspicion. Next, it looks for a specific type of computer file called a driver. This driver is usually digitally signed, meaning it appears to be safe software from a trusted company but in this case, the signature is stolen or outdated. If the driver matches a name hidden in the tool’s code, the hackers load it into the computer’s operating system. This technique is called a “Bring Your Own Vulnerable Driver” (BYOVD) attack. By using a driver with security weaknesses, the hackers gain deep control of the system, including the ability to shut down security tools. The driver pretends to be a legitimate file, sometimes even mimicking trusted products like the CrowdStrike Falcon Sensor Driver. Once active, it terminates the processes and services of security products from well-known vendors such as Microsoft Defender, Kaspersky, Symantec, Trend Micro, SentinelOne, McAfee, F-Secure, and others. Shared Development, Not Leaks Sophos notes that while the tool appears in attacks by many different groups, it is not a case of one stolen copy being passed around. Instead, it seems to be part of a shared development project, with each group using a slightly different version — changing driver names, targeted software, or technical details. All versions use the same “HeartCrypt” method to hide their code, suggesting close cooperation among the groups. A Common Criminal Practice This is not the first time such tools have been shared in the ransomware world. In the past, programs like AuKill and AvNeutralizer have been sold or distributed to multiple criminal gangs, allowing them to disable security tools before launching attacks. The discovery of this new tool is a reminder that ransomware operators are constantly improving their methods and working together to overcome defenses. Security experts stress the need for updated protections and awareness to defend against such coordinated threats.

New Hacking Tool Lets Ransomware Groups Disable Security Systems #BYOVDAttack #CyberCrime #DataStolen

UK Retailer Co-op Confirms 6.5 Million Members' Data Stolen in Massive Cyberattacks Co-op has confirmed that all 6.5 million members of the UK retail cooperative had their personal data compromised during a sophisticated cyberattack.

UK Retailer Co-op Confirms 6.5 Million Members’ Data Stolen in Massive Cyberattacks
cybersecuritynews.com/co-op-confir...

#Infosec #Security #Cybersecurity #CeptBiro #UKRetailer #Coop #DataStolen #MassiveCyberattacks

IdeaLab confirms data stolen in ransomware attack last year threat actors had obtained unauthorized access read more about IdeaLab confirms data stolen in ransomware attack last year

IdeaLab confirms data stolen in ransomware attack last year reconbee.com/idealab-conf...

#IdeaLab #datastolen #databreach #ransomwareattack #ransomware #cyberattack #DataProtection #cybersecurity

Zoomcar Data Breach Exposes Personal Information of 8.4 Million Users   Zoomcar, a well-known car-sharing platform, recently reported that a cyberattack exposed the personal details of approximately 8.4 million users. The information that was accessed includes users’ names, phone numbers, and vehicle registration details. The company, based in Bengaluru, India, disclosed this security incident in a filing with the U.S. Securities and Exchange Commission (SEC). According to the filing, Zoomcar discovered the issue on June 9 after some of its employees received direct messages from an unknown individual who claimed to have broken into the company’s systems and gained access to its data. In response, Zoomcar quickly launched its incident response plan — a set of steps companies take to control damage and secure their systems after a cyberattack. The company explained that, so far, there is no sign that financial information, unencrypted passwords, or highly sensitive personal identifiers were stolen in this breach. Zoomcar has since introduced additional security measures to strengthen its internal systems and cloud services. These steps include improved system monitoring and a careful review of user access controls to prevent future attacks. However, the company did not give detailed explanations of these new protections. The company also confirmed that it is working with independent cybersecurity experts to investigate the incident further. Relevant law enforcement agencies and regulatory authorities have been notified and are now involved in the case. At this point, Zoomcar has not provided any public updates on whether it has directly informed the affected users or if it has managed to identify the hacker responsible. As of now, the company says this breach has not affected its day-to-day business operations. Zoomcar, founded in 2013, is a platform that allows users to rent cars by the hour, day, week, or month. It currently operates in 99 cities with a fleet of over 25,000 cars and has built a user base of more than 10 million people. Apart from India, the company also runs services in Egypt, Indonesia, and Vietnam. Earlier this year, Zoomcar reported that it had seen a 19% increase in car rentals compared to the previous year, totaling over 103,000 bookings. The company also noted a significant improvement in its contribution profit, which rose by over 500% to $1.28 million. However, despite these gains, the company’s net loss still stood at $7.9 million. Cyberattacks like this highlight the importance of strong cybersecurity practices and continuous monitoring, especially for companies that handle large amounts of personal user information. It also raises questions about how quickly companies notify customers after discovering such breaches. For now, Zoomcar says it is taking the situation seriously and is fully cooperating with all ongoing investigations.

Zoomcar Data Breach Exposes Personal Information of 8.4 Million Users #DataBreach #DataStolen #India

UK Legal Aid Agency confirms applicant data stolen in data breach revealed earlier this month that it had experienced a security breach read more about UK Legal Aid Agency confirms applicant data stolen in data breach

UK Legal Aid Agency confirms applicant data stolen in data breach reconbee.com/uk-legal-aid...

#unitedkingdom #UK #legalaidagency #databreach #datastolen #cyberattack #datasecurity #dataprotection

Well...Russia owns us now people. How much you want to bet everything in the Treasury has been transferred
#whistleblower #doge #russia #corruption #datastolen

youtu.be/gqEOCenGJHw?...

Govtech giant Conduent confirms client data stolen in January cyberattack customer information in a new FORM-8K filing read more about Govtech giant Conduent confirms client data stolen in January cyberattack

Govtech giant Conduent confirms client data stolen in January cyberattack reconbee.com/govtech-gian...

#Govtech #conduent #datastolen #DataSecurity #DataBreach #cyberattack

Bullshit…wouldn’t be surprised if it was stolen by ChatGPT #DATASTOLEN

Oracle customers confirm data stolen in alleged cloud breach is valid ethers with a new file holding the malicious payload read more about Oracle customers confirm data stolen in alleged cloud breach is valid

Oracle customers confirm data stolen in alleged cloud breach is valid reconbee.com/oracle-custo...

#oracle #OracleHack #datastolen #cloudbreach #OracleCloud #cyberattacks

OneBlood confirms personal data stolen in July ransomware attack donor data was stolen during a ransomware attack last summer read more about OneBlood confirms personal data stolen in July ransomware attack

OneBlood confirms personal data stolen in July ransomware attack reconbee.com/oneblood-con...

#OneBlood #confirms #datastolen #ransomware #ransomwareattack #cyberattack

Electric Motor Giant Nidec Confirms Data Stolen in Ransomware Attack Electric motor manufacturer Nidec confirms business and internal documents were stolen in a ransomware attack.

Electric Motor Giant Nidec Confirms Data Stolen in Ransomware Attack
www.securityweek.com/electric-mot...
#Infosec #Security #Cybersecurity #CeptBiro #ElectricMotor #Nidec #DataStolen #RansomwareAttack

A probe reveals a massive data breach at Pakistan's National Database Registration Authority (NADRA). Over 2 million individuals' personal information was compromised between 2019 and 2023.

#HurriyatPakistan #islamabad #news #Pakistan #PakistanNews #datastolen #data

Pharmaceutical giant Cencora says data was stolen in a cyberattack Pharmaceutical giant Cencora says they suffered a cyberattack where threat actors stole data from corporate IT systems.

Pharmaceutical giant Cencora says data was stolen in a cyberattack
www.bleepingcomputer.com/news/securit...
#Infosec #Security #Cybersecurity #CeptBiro #Cencora #DataStolen #Cyberattack