Dissent Doe :cupofcoffee:

Blogger/journalist at databreaches.net and pogowasright.org. As a retired healthcare professional, breaches in the healthcare sector are my priority.

The header pic is Indy, a Siberian husky we rescued in 2016 after I read how nobody wanted her because she was so difficult. She is now living her best life and is a mushball with me.

Public Key

npub1rh9ks6jqam8nj4kccfk505f70erhhq0g0kcr6w32c5ywyqgltdpsmklmka

NIP-05 Address

PogoWasRight@infosec-exchange.mostr.pub

Profile Code

nprofile1qqspmjmgdfqwanee2mvvym286yl8u3mms858mvpa8g4v2z8zqy04kscpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dspugzsp

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1rh9ks6jqam8nj4kccfk505f70erhhq0g0kcr6w32c5ywyqgltdpsmklmka

Show more details

Last Notes

2026-04-03 23:51:32 UTC

I am a big fan of BakerHostetler's annual data security incident response reports because they are based on actual client experiences and data.
I just posted about their 2026 report, and commented on their healthcare sector data. As I had mentioned to @nprofile…d05j, healthcare breaches tend to get higher ransom demands and higher settlements. Take a look at the 2025 data -- the highest initial ransom demand for a health entity client was $98M.
I'd love to know who the victim was and what TA or group demanded that much.
That said, the highest ransom actually paid for a healthcare sector breach by one of their clients last year was $5M.
Big delta.
My post: https://databreaches.net/2026/04/03/bakerhostetlers-2026-report-findings-from-1250-clients-breach-experiences-in-2025/
#ransomware #healthsec #incidentresponse #statistics #phishing #ransom #malware #databreach #cybersecurity
@nprofile…ydzz @nprofile…k3pe

2026-03-23 14:23:56 UTC

Also NEW by me:
"If threat actors gave you a chance to redact the patient data they hacked before they leak it, would you take them up on the offer? Read about the Woundtech incident."
I've never encountered any threat actors spending so much time redacting patient data before they leak it -- and even giving their victim the opportunity to redact the hacked data tranche before the threat actors leak it.
Read more about this one at:
https://databreaches.net/2026/03/23/if-threat-actors-gave-you-a-chance-to-redact-the-patient-data-they-hacked-before-they-leak-it-would-you-take-them-up-on-the-offer-read-about-the-woundtech-incident/
#databreach #healthsec #woundtech #cybersecurity #redaction #incidentresponse #FulcrumSec
@nprofile…gvek @nprofile…ydzz @nprofile…apgm @nprofile…uvky @nprofile…k3pe

2026-03-19 12:18:45 UTC

Cyberattack leaves drivers with required breathalyzer test systems in 46 states unable to start their vehicles:
https://wgme.com/news/local/cyberattack-leaves-maine-drivers-with-breathalyzer-test-systems-unable-to-start-vehicles-oui-intoxalock
#intoxalock #cyberattack #DDoS

2026-02-02 12:31:16 UTC

And it's out!
Zack Whittaker and I have released our report on the pilot survey we conducted to increase awareness about threats security researchers and journalists who report on cybersecurity and cybercrime experience.
We are grateful to all those who responded to the survey and shared a bit of their experiences. Based on what we found in a pilot survey with a non-random sample, I really think we need to do a bigger study that can also do a deeper dive into some questions.
You can read the report in html or download the .pdf version:
html: https://databreaches.net/2026/02/02/under-pressure-exploring-the-effect-of-legal-and-criminal-threats-on-security-researchers-and-journalists/
pdf: https://databreaches.net/wp-content/uploads/security-researcher-journalist-threats-survey-2026.pdf
In conjunction with the release of the report, I've also added a new "Threats" category to DataBreaches.net.
You can also read some overview comments from Zack at
https://this.weekinsecurity.com/new-survey-reveals-how-security-researchers-and-journalists-experience-legal-and-criminal-threats/
My post explaining how this all started is at https://databreaches.net/2026/02/02/threats-results-of-a-pilot-survey-on-threats-and-a-new-category-on-databreaches-net/
#cybersecurity #securityresearch #legalthreats #threats #criminals #databreach #vulernabilities #malware #lawsuit #survey
@nprofile…gvek @nprofile…ydzz @nprofile…k3pe @nprofile…njza @nprofile…ss8w @nprofile…g4vn @nprofile…7z6t @nprofile…apgm

2025-10-13 19:56:09 UTC

NEW, by me, the one some of you have been asking about:
Months After Being Notified, a Software Vendor is Still Exposing Confidential and Sealed Court Records
https://databreaches.net/2025/10/13/months-after-being-notified-a-software-vendor-is-still-exposing-confidential-and-sealed-court-records/
I don't usually ask for boosts, but if you are in a position to help spread the word about this vendor and that its clients need to check their security, that would be great.
#dataleak, #incidentresponse, #infosecurity, #cybersecurity, #SoftwareUnlimitedCorp #FBI #CISA
@nprofile…5xd5 @nprofile…ptue @nprofile…c8kq @nprofile…a6pf @nprofile…5lc3 @nprofile…5k2y

2025-10-09 11:19:17 UTC

According to a new state auditor's report, nearly a third of Mississippi's state agencies fail cybersecurity requirements
Media coverage: https://vicksburgnews.com/shad-whites-office-finds-nearly-a-third-of-state-agencies-fail-cybersecurity-requirements/
Direct link to state report: https://www.osa.ms.gov/sites/default/files/osa/files/reports/252025%20Review%20of%20Mississippi%20Enterprise%20Security%20Program%20Compliance%20%28Cybersecurity%29.pdf
#Audit #cybersecurity #govsec #Mississippi #ComplianceTech

2025-10-04 20:08:41 UTC

NEW: Just days before its data might be leaked, Qantas Airways obtained a permanent injunction
https://databreaches.net/2025/10/04/just-days-before-its-data-might-be-leaked-qantas-airways-obtained-a-permanent-injunction/
#injunction #censorship #pressfreedom #Qantas #Salesforce #databreach

2025-10-03 23:16:05 UTC

OT: It's one thing for our government to lie to us -- repeatedly -- but to change an employee's out-of-office message to include blaming Democrats for the government's shutdown when that is not what the employee wrote or wants to write is the most authoritarian bullshit I've read today.
Hatch Act, common decency, call it what you will --- the people who ordered this and are implementing this should be sued or impeached or locked out of access to the servers at the very least.
https://www.wired.com/story/government-workers-say-their-out-of-office-replies-were-forcibly-changed-to-blame-democrats-for-shutdown/
#NoKings #FuckYouGOP #FuckYouTrump

2025-09-07 11:50:02 UTC

Burger King hacked, systems described as 'solid as a paper Whopper wrapper in the rain’ – hackers 'impressed by the commitment to terrible security practices,' also exploited other RBI brands like Tim Hortons and Popeyes:
"Ethical hackers BobDaHacker and BobTheShoplifter have detailed their claim that they uncovered “catastrophic” vulnerabilities in multiple platforms hosted by Restaurant Brands International (RBI). While RBI may not be a very familiar name, this lax security means that systems powering mega brands like Burger King, Tim Hortons, and Popeyes, with over 30,000 locations worldwide, and all were almost trivially easy to hack. “Their security was about as solid as a paper Whopper wrapper in the rain,” snarks the BobDaHacker blog, sharing the full technical exposé (the blog has since been taken down, but it's archived here)."
https://www.tomshardware.com/tech-industry/cyber-security/burger-king-hacked-digital-platform-as-solid-as-a-paper-whopper-wrapper-in-the-rain-easy-security-bypass-exploited-catastrophic-vulnerabilities-also-worked-on-other-rbi-brands-like-tim-hortons-and-popeyes
#infosec #cybersecurity

2025-08-15 14:27:05 UTC

So as a quick update on the issue of two state courts that we know of exposing sealed records:
Last night, those of us still trying to figure out who was responsible figured it out -- it is a vendor (third-party) who is responsible for the exposed shares.
With the researcher's cooperation and input, I sent a detailed email last night to the only email address that vendor has on their website.
No reply was received, of course.
So I just called their main number... and started to tell them why I was calling, and they hung up on me.
😡
I just called back. They didn't answer the phone, so I left a VM on their administrative offices' extension.
If the firm doesn't call me back or lock down those shares today, expect me to say more here tomorrow.
It is now 1 month since people started trying to get these shares secured. None of us are paid to do this. And getting hung up on should get the company a #CID from the #FTC in a more perfect world -- to ask what their procedures and policies are for receiving a security alert from an external (third) party.
#infosec #cybersecurity #incidentresponse #dataleak #databreach

2025-08-13 11:33:29 UTC

Heads up, folks:
Michael Kan reports that National Public Data is back under new owners: https://www.pcmag.com/news/site-behind-major-ssn-leak-returns-with-detailed-data-on-millions-how-to
Here is the direct link to their opt-out page instructions:
https://nationalpublicdata.com/optout.html
I had opted out previously after their humongous #databreach last year. When I checked my name now, it did not find my profile, so if you opted out before, you may still be opted out, but better safe than sorry: check and opt-out if needed.
#NPD #NationalPublicData #OptOut #DataBroker #Privacy

2025-08-12 23:13:57 UTC

So yesterday, I emailed a state court system that appears to be linked to the exposed data I mentioned recently and that the host notified on or about July 28.
No reply was received.
Today, I sent a contact form message to the lawyer for a juvenile whose records were sealed. Sealed, except 11 of them were exposed to anyone who can access the data. I told him what was going on and suggested he contact the court and tell them to get the data secured.
No reply was received.
Today, I sent an email to the judge who ordered the juvenile's records sealed and I cc:d the district attorney. I gave them the juvenile's name, case number and that I could see all the sealed records. I urged them to have their IT or vendor call me and I could give them the IP address over the phone, etc.
No reply was received.
Dear Russia, China, and North Korea:
You do not need to hack our courts. They are leaking like sieves and do not respond when we try to tell them they need to secure the data.
Yours in total frustration,
/Dissent
#infosec #cybersecurity #incident_response #dataleak #databreach #WAKETHEFUCKUP

2025-08-10 11:58:35 UTC

NEW: Federal judiciary says it is boosting security after cyberattack; researcher finds new leaks
More of those frustrating leaks where, despite our best efforts, we have been unable to get the network shares locked down so far, even with the host's assistance.
This one involves two courts: one state and one federal, and yes, we saw some files that were supposed to be sealed or confidential.
https://databreaches.net/2025/08/10/federal-judiciary-says-it-is-boosting-security-after-cyberattack-researcher-finds-new-leaks/
#dataleak #infosec #cybersecurity #databreach #govsec

2025-08-08 22:59:26 UTC

"Breaking News:" The Scattered Spider kids seem to have opened their own channel on Telegram. Rude, crude, and leaking data already. Some of the redacted screenshots they have posted suggest that they may have had victims that we did not know about already.
#ScatteredSpider #ShinyHunters #SalesForce #AirFrance #Qantas #Gucci #databreach #extortion

2025-08-01 16:37:08 UTC

Belgium Bans Internet Archive’s ‘Open Library’ in Sweeping Site Blocking Order
"The Business Court in Brussels, Belgium, has issued an unprecedentedly broad site-blocking order that aims to restrict access to shadow libraries including Anna's Archive, Libgen, OceanofPDF, Z-Library, and the Internet Archive's Open Library. In addition to ISP blocks, the order also directs search engines, DNS resolvers, advertisers, domain name services, CDNs and hosting companies to take action."
Ernesto Van der Sar explains at https://torrentfreak.com/belgium-bans-internet-archives-open-library-in-sweeping-site-blocking-order/
#copyright #piracy #OpenLibrary #AaronSW
And raise your hand if this all reminds you how much Aaron Swartz is missed. 😭

2025-07-23 13:55:31 UTC

@nprofile…2m4m has a post about how injunctions and superinjunctions are being used to protect entities but work against having an informed public, especially when it comes to cybersecurity.
The recent #Qantas injunction is a useful example of how an injunction won't solve the problem it is sought to allegedly solve, and it only leaves the public in the dark. If @nprofile…xh95 were to be sent the data from Qantas, he could not add it to his database for HaveIBeenPwned because he is Australian and HIBP is an Australian entity. So millions of Qantas customers will not be able to check to see if their information has shown up on the dark web as a result of the Qantas breach because of the injunction that was justified as being needed to protect them.
The topic of injunctions and superinjunctions is very near and dear to @nprofile…2m4m's heart -- and mine -- as we both got hit with a #superinjunction earlier this year.
His post:
Legal Silence: Injunctions Against the Press in Cybersecurity
https://www.suspectfile.com/legal-silence-injunctions-against-the-press-in-cybersecurity/
#injunction #superinjunction #cybersecurity #pressfreedom #chillingeffects #journalism #databreach

2025-07-18 14:06:13 UTC

Qantas obtained an injunction to prevent the publication of any of its stolen data.
This strikes me as an abuse of injunctions.
There was nothing particularly sensitive about the types of data in the Qantas breach. And criminals are going to laugh at any injunction and leak the data or sell it anyway if that's their plan, so what does the injunction really accomplish or who does it really help?
Censoring the press from reporting on data in fairly common types of breaches does not serve society well and strikes me as just a litigation defense strategy to limit potentially bad press.
https://databreaches.net/2025/07/18/qantas-obtains-injunction-to-prevent-hacked-datas-release/
#freepress #pressfreedom #journalism #censorship #databreach #transparency #incident response

2025-07-17 17:15:44 UTC

NEW: RansomedVC is back — and is still attacking its competitors:
https://databreaches.net/2025/07/17/ransomedvc-is-back-and-is-still-attacking-its-competitors/
RansomedVC has a history of leaking its competitors' data. Heck, they even leaked their own to get attention. Now they're back, and one of their first targets was the Medusa ransomware gang.
#databreach #ransomware #SnapAv #SnapOne #Medusa #RansomedVC
@nprofile…2m4m

2025-07-05 18:22:51 UTC

"An American Airlines passenger snooping on one of their seat neighbors forced the flight to return to San Juan after reporting a potential security concern based on an overseen text message.
Local news outlet Primera Hora reported that one passenger saw another receive a text message saying RIP (rest in peace) and interpreted it as a threat to the flight, according to Puerto Rico's Office of Explosives and Public Safety."
Source: USA Today: https://eu.usatoday.com/story/travel/airline-news/2025/07/03/american-airlines-text-message-bomb-threat/84461447007/
#RIP #shouldersurfing #security

2025-07-04 16:15:25 UTC

SK Telecom in South Korea had a bad data breach.... and boy, are they getting hit with all kinds of consequences for it, including:
-- a fine for late reporting ($22k USD);
-- an order to send notifications to all customers who were affected (23 million?!);
-- a judgment that they have to waive cancellation fees if dissatisfied customers canceled (and 660,000 canceled just last month alone); and
-- a criminal investigation has been launched into them for not preserving data properly for the regulator's investigation.
#databreach #SKTelecom #cybersecurity #malware

2025-07-02 13:26:19 UTC

#dogsofmastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/783/845/669/377/260/original/ae863d4914d88139.jpg

2025-06-30 23:38:59 UTC

#DogsofMastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/774/944/236/541/681/original/8ab9162e8ad05583.jpg

2025-06-30 11:34:05 UTC

When Cybernews published an article about a 16 billion credentials leak, some of us strongly criticized the article as irresponsible and misleading journalism. Although some people have tried to suggest that the Cybernews article had some value in highlighting infostealers, the article was so riddled with falsehoods and misleading statements that the confusion and misunderstandings it created outweighs any benefit one might try to ascribe to it.
To his credit, @nprofile…5au4 and a colleague have taken the time to analyze the datasets used in Cybernews‘ reporting and to fact-check their reporting with actual data and proof from their own research.
He has now written up their findings, in which they identified no less than five significant false claims by Cybernews. You can read his report here:
https://jltee.substack.com/p/fact-checking-claims-by-cybernews
#journalism #dataleak #databreach #infostealers

2025-06-27 00:59:58 UTC

- reply

@nprofile…5lc3
So sorry to read this. Donation made. I am wishing your family all the best.

2025-06-25 22:04:20 UTC

"IntelBroker's" real identity is Kai West, a British national, according to court filings now revealed by the U.S. Attorney's Office for the Southern District of New York today.
U.S. is seeking his extradition from France, where he was arrested on February 5 and detained.
USAO press release: https://www.justice.gov/usao-sdny/pr/serial-hacker-intelbroker-charged-causing-25-million-damages-victims
Kai West Four-Count Indictment: https://www.justice.gov/usao-sdny/media/1404621/dl?inline
Kai West Complaint: https://www.justice.gov/usao-sdny/media/1404616/dl?inline
#databreach #intelbroker #arrest #indictment
Here's a pic of him from his 2023 license (from court filing):
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/746/264/539/978/436/original/12384624e45f0e3f.jpg

2025-06-25 10:54:15 UTC

- reply

@nprofile…5k2y First you get your fingers burned. Now you get stung.
Is the universe suggesting you stop reporting on cyber and start reporting on first aid or safety? Or maybe good reasons to increase life insurance?
Stay safe, fella!

2025-06-20 15:49:37 UTC

Aflac notifies SEC of breach suspected to be work of Scattered Spider:
https://databreaches.net/2025/06/20/aflac-notifies-sec-of-breach-suspected-to-be-work-of-scattered-spider/
They're the third U.S. insurer breach we know about this month.
#databreach #ScatteredSpider #cybersecurity #insurance

2025-06-20 13:33:46 UTC

As much as I generally detest claims that something should be a wake-up call, @nprofile…zgwf response to @nprofile…4jdp "16 billion" story really should be a wake-up call for any news outlets who repeat any claims of discovered leaks or breaches by Cybernews.
See https://www.bleepingcomputer.com/news/security/no-the-16-billion-credentials-leak-is-not-a-new-data-breach/
DataBreaches.net will no longer link to Cybernews unless there is some reliable source that confirms that their claims are accurate and that they are not just reporting on leaks that they haven't even seriously tried to get locked down before they report on it.
Comments:
https://databreaches.net/2025/06/20/no-the-16-billion-credentials-leak-is-not-a-new-data-breach-a-wake-up-call-about-fake-news/
#journalism #databreach #dataleak #infostealers #passwords #hype #clickbait #ethics
@nprofile…5lc3 @nprofile…5au4 @nprofile…v6nv @nprofile…cnmq @nprofile…p209

2025-06-17 22:01:46 UTC

Episource is notifying 5.4 million patients of a cyberattack in January:
https://databreaches.net/2025/06/17/episource-notifying-5-4-million-patients-of-cyberattack-in-january/
Some media call this a #ransomware attack, but Episource does not mention any encryption of data and is silent on that question or any mention of any ransom demand. I cannot find any gang who has claimed responsibility for this incident or that has added it to any leak site.
#healthsec #databreach #businessassociate

2025-06-16 22:40:27 UTC

- reply

@nprofile…3nsk Slow down, tiger. No one has even confirmed a breach yet. :)
@nprofile…zgwf @nprofile…5xd5 @nprofile…c8kq

2025-06-16 22:04:23 UTC

NEW by me:
Credit Control Corporation data allegedly from 9.1 million consumers listed for sale on forum:
In a chat with me on Telegram, the seller claims that an employee at CCC (knowingly) gave them access to the server.
CCC has not confirmed nor denied any breach at this point. I hope they respond to the inquiries sent.
Following their last data breach, CCC committed to implementing specific security improvements. It's not clear to me whether they were all made already or not.
https://databreaches.net/2025/06/16/credit-control-corporation-data-allegedly-from-9-1-million-consumers-listed-for-sale-on-forum/
@nprofile…zgwf @nprofile…5xd5 @nprofile…c8kq
#insider #hack #databreach

2025-06-11 10:48:38 UTC

Help, please:
If anyone has a copy of the ransom note sent to PowerSchool in December 2024 or PowerSchool clients in May 2025, please email me a copy or upload it to me on Signal. I want to see not only the body, but the full header and signature.
PowerSchool has not been transparent about the extortion aspects of the incident and has not responded to inquiries.
To reach me on Signal, my number is +1 516-776-7756. Email: breaches@databreaches[.]net
#databreach #extortion #ransom #PowerSchool
@nprofile…wz7x @nprofile…c4cm @nprofile…l8lp

2025-06-03 17:00:54 UTC

- reply

@nprofile…5k2y OK, is this where you write a post with a headline that has "wake up call for..." in it?
J/K... wishing you a speedy and full recovery.

2025-05-28 23:22:07 UTC

Nova Scotia Power has repeatedly said that data from the ransomware attack it suffered has been published on the dark web. Yet not one media outlet or anyone I know has reported finding any data from this anywhere, and no ransomware group that I track has claimed responsibility for this incident.
Does anyone know where these data have allegedly been published? If so, please contact me privately.
#ransomware #databreach

2025-05-25 12:19:03 UTC

You may know this already, but in case you didn't: Threat actors have leaked some data from 2 more K-12 public school districts this week:
Some personal info on students at Coweta County School System was leaked by Nitrogen as proof of claims. I googled the parent information and found an exact match for name, address, and phone number.
Data from Kalamazoo Public School District was leaked by InterLock. InterLock claimed to have acquired 1,420 GB of data consisting of 724,477 Files and 82,820 Folders. It looks like they leaked it all but I didn't attempt to validate any data.
@nprofile…wz7x @nprofile…c4cm
#EduSec #cybersecurity #ransomware #databreach

2025-05-20 21:31:31 UTC

Massachusetts hacker to plead guilty to PowerSchool data breach:
https://www.investing.com/news/stock-market-news/massachusetts-hacker-to-plead-guilty-to-powerschool-data-breach-4055643
Related:
DOJ Press release: https://www.justice.gov/usao-ma/pr/worcester-college-student-plead-guilty-cyber-extortions
USA v. Matthew D. Lane - Information: https://www.justice.gov/usao-ma/media/1400921/dl
USA v. Matthew D. Lane - Plea Agreement:
https://www.justice.gov/usao-ma/media/1400926/dl
#databreach #PowerSchool #EduSec #cybersecurity
@nprofile…wz7x @nprofile…c4cm @nprofile…7nut @nprofile…l8lp

2025-04-25 15:01:57 UTC

Holy sh*t...
FBI arrests judge in escalation of Trump immigration enforcement effort:
https://www.cnbc.com/2025/04/25/fbi-arrest-judge-hannah-dugan-milwaukee.html
#obstruction

2025-04-17 12:12:05 UTC

Former Trump Official Targeted With Government Probe Vows to Fight: https://www.wsj.com/politics/policy/chris-krebs-trump-cybersecurity-executive-action-31cb99cb
Good for Chris Krebs and all those who do not buckle to this administration's bullshit investigations and abuse of power.
And shame on the DOJ for allowing itself to be weaponized. They should be reminded hourly that their oath was to the Constitution, not to a malignant narcissist or anyone trying to use them for political revenge.

2025-04-12 14:46:27 UTC

Google Hit With Lawsuit Over Data Collection on School Kids
https://news.bloomberglaw.com/litigation/google-hit-with-privacy-suit-over-data-collection-on-school-kids
Nor for nothing, but this is the same issue some parents in Toronto and I tried to raise against Google years ago -- and Google told me that their relationship was with their clients -- the schools -- and the schools consented. It was up to the schools, they claimed, to seek parental consent.
@nprofile…wz7x @nprofile…c4cm @nprofile…l8lp
#Google #WorkspaceForEducation #EdTech #consent #privacy #dataprotection #k12

2025-04-06 14:57:54 UTC

In the middle of the night, there were numerous attempts to get Facebook accounts created for randomly generated usernames for my domain. The emails all provided different confirmation code numbers and different fake Chinese-sounding names.
It didn't work. And I am not happy that Facebook didn't catch that it was rapid-fire emailing me numerous requests to confirm accounts.
#phishing #Facebook
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/291/589/702/545/459/original/cf5cfced80e283a0.jpg

2025-04-05 23:46:22 UTC

And here's another reminder of the insider threat if you don't investigate your employees' or consultants' backgrounds and claimed credentials carefully enough. @nprofile…5k2y has the story and how a number of criminal cases may now be appealed or overturned:
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe:
https://krebsonsecurity.com/2025/04/cyber-forensic-expert-in-2000-cases-faces-fbi-probe/
#insiderthreat #fraud

2025-04-05 22:56:44 UTC

Today's reminder of the insider threat involves a pharmacist in Maryland who over a period of 8 years or more, used keyloggers and installed spyware on about 400 computers at the University of Maryland Medical System so he could spy on female co-workers in private moments at work (such as changing clothes, breastfeeding their babies), and in their homes. He was reportedly fired in October 2024, and was able to get another job in another healthcare facility in Maryland because there has been no criminal charges filed against him yet and UMMC apparently didn't alert his new employer.
If Maryland law is like my state's laws, the hospital may be barred legally from revealing what happened if asked for a recommendation by the new employer,. And it seems the Maryland state pharmacy board can't just suspend a license unless there's been a conviction, so the failure to have criminal charges filed already seems to have put more potential victims at risk.
Unsurprisingly, a potential class action lawsuit has already been filed against UMMS with six plaintiffs so far. There are estimates that there are more than 80 victims of the now-former employee.
Some of the media coverage on the case: https://thedailyrecord.com/2025/04/04/six-women-sue-umms-claiming-staffer-spied-on-them-after-security-breach/
#InsiderThreat #keylogger #workplace #privacy #infosec

2025-03-30 11:21:35 UTC

A little ray of sunshine:
The Journal Times, part of Lee Enterprises, had been seriously impacted by the #ransomware attack by Qilin in February. Today, they announced that they are back to full strength: https://journaltimes.com/opinion/column/article_856d2fed-473b-4683-bbf4-61e8fd157830.html
Sincere congrats to them after what was almost two months of intensive and dedicated efforts to fully recover.
#journalism #freepress

2025-03-19 14:31:47 UTC

Somewhat OT, but may be of interest/relevance to a number of folks:
" In a landmark opinion over the copyrightability of works created by artificial intelligence, a D.C. Circuit panel ruled on Tuesday that human authorship is required for copyright protection.
As AI technology quickly advances and intertwines with human creations, the unanimous opinion lays down the first precedential marker over who or what is the author of work created solely by artificial intelligence under copyright law."
https://www.courthousenews.com/dc-circuit-rules-ai-generated-work-ineligible-for-copyright/
Direct link to opinion:
https://www.courthousenews.com/wp-content/uploads/2025/03/thaler-v-perlmutter-dc-circuit-opinion.pdf
#copyright #AI #ArtificialIntelligence

2025-03-16 11:09:31 UTC

Trump's attack on the media continues.
"In an executive order signed on Friday, President Donald Trump outlined seven federal agencies to be reduced in size, including the United States Agency for Global Media, which oversees Voice of America. The reduction was made to agencies Trump saw as "unnecessary," the order states.
"President Trump is delivering on his promise to make our government more efficient," White House Press Secretary Karoline Leavitt told USA TODAY on Saturday. "American taxpayers should not be funding anti-American propaganda in the name of journalism."
https://www.usatoday.com/story/news/politics/2025/03/15/trump-executive-order-voice-of-america/82443203007/
#press #media #journalism #VOA

2025-03-13 23:28:22 UTC

- reply

@nprofile…r0kn That is a great photo!

2025-03-13 20:12:53 UTC

Breach notifications needed to be made faster in 2024. Instead, they were made more slowly.
Some findings from #Bluesight 2025 Breach Barometer report plus additional observations and my frustration with #HHSOCR for not enforcing the notification requirements in #HIPAA and #HITECH.
https://databreaches.net/2025/03/13/breach-notifications-needed-to-be-made-faster-in-2024-instead-they-were-made-more-slowly/
#databreach

2025-03-06 21:19:06 UTC

Thanks to everyone in the fediverse who has favorited, boosted, and reached out to me supportively over the injunction and takedown order that I wouldn't comply with (overview: https://infosec.exchange/@PogoWasRight/114110520940142405)
Special thanks to @nprofile…5xd5 for reporting about it all on #TechCrunch:
https://techcrunch.com/2025/03/06/hacked-health-firm-hcrg-demanded-journalist-take-down-data-breach-reporting-citing-uk-court-order/
#databreach #HCRG #ransomware #incident_response #injunction

2025-03-05 15:26:08 UTC

Here's my post on the court injunction my site got hit with:
HCRG Care's lawyers claimed an injunction issued in a "private" hearing required us to remove two posts. We didn't comply.
HCRG Care was represented by the Pinsent Masons law firm in the UK in this matter. The injunction was issued by the High Court of Justice, King's Bench Division, Media and Communications List by the Honorable Mr. Justice Soole.
Pinsent Mason's attempt to get my web host to remove my posts also failed.
As always, I feel blessed to have the legal support of Covington and Burling's Kurt Wimmer Pro Media Freedom Initiative, which has represented my site pro bono for the last 16 years.
Read about the letter, the injunction, and why the High Court's over-reaching injunction endangers UK journalists and doesn't serve the public well.
https://databreaches.net/2025/03/05/hcrg-cares-lawyers-claimed-an-injunction-issued-in-a-private-hearing-required-us-to-remove-two-posts-we-didnt-comply/
Oh, and I'm not the only one ignoring the injunction. Medusa also got served with the injunction via tox chat, they tell me. And like other injunctions they have received, they are ignoring it. So what has HCRG really accomplished?
#databreach #ransomware #Medusa #transparency #censorship #pressfreedom #injunction #FirstAmendment
@nprofile…5xd5 @nprofile…c8kq @nprofile…zgwf @nprofile…8rys
@nprofile…2m4m @lawfare @nprofile…x3tn

2025-03-04 20:32:09 UTC

Last Friday I received a letter from a U.K. law firm with an attached injunction. The law firm claimed I must remove two posts about their client.
That is not going to happen. I am not under the jurisdiction of the U.K. or the High Court of Justice. My lawyer informed them of that yesterday.
But DataBreaches.net might disappear tomorrow because the U.K. law firm sent the injunction to my domain registrar who, innocently believing them, informed me they will suspend my site if I don't remove the posts within 24 hours. I have replied to them but have not heard back.
So...
If my site is gone tomorrow, I will let you know where you can read a lot more about the injunction and how the injunction poses a serious risk of censorship in the U.K.
If my site is still online tomorrow, I will still let you know here where you can read about the over-reaching injunction obtained in a private hearing where no one represented journalists whose reporting was being censored.
#censorship #injunction #pressfreedom
#AssociatedPress #RCFP #databreach #ransomware #journalism
@nprofile…x3tn @nprofile…c8kq @nprofile…5xd5 @nprofile…zqsg @nprofile…405a @nprofile…8rys @nprofile…2m4m @nprofile…et2y

2025-02-25 13:05:27 UTC

I don't know if this is a first or not, but it sure struck me as unusual:
RansomHub sends a letter to the editor. Really.
https://databreaches.net/2025/02/25/ransomhub-sends-a-letter-to-the-editor-really/
#ransomware #databreach
@nprofile…zgwf @nprofile…c8kq @nprofile…ptue

2023-09-03 14:09:54 UTC

Pizza Hut Australia customer data hacked; ShinyHunters claims to have more than 1 million customers' information:
https://www.databreaches.net/pizza-hut-australia-customer-data-hacked-shinyhunters-claims-to-have-more-than-1-million-customers-information/
#databreach #ransom #extortion #infosec #cybersecurity
@npub1e2e…krxe @npub1a3j…zlqf