Workflow
Data breach
icon
Search documents
X @U.S. Securities and Exchange Commission
Data Breach Response - In the event of a data breach or identity theft compromising personal financial information, immediate action is necessary to protect accounts [1] Security Measures - Individuals should take immediate steps to safeguard their accounts if personal financial information is compromised [1]
Workday Discloses Data Breach Involving Third-Party CRM Platform
PYMNTS.com· 2025-08-18 17:23
Core Insights - Workday experienced a data breach where fraudsters accessed information from its third-party CRM platform, specifically targeting employees through social engineering tactics [1][2] - The accessed data included business contact information such as names, email addresses, and phone numbers, which could be exploited for further scams [3] - Workday has implemented additional safeguards to prevent similar incidents in the future and clarified that it will not request secure details via phone [3] Industry Context - Data breaches often stem from vulnerabilities in third-party service providers rather than the companies themselves, highlighting a significant risk in the digital supply chain [4] - Verizon's 2025 Data Breach Investigations Report indicated that the proportion of data breaches involving third parties rose to 30% in the year ending October 31, up from 15% the previous year [5] - The increasing frequency and severity of breaches linked to third-party vendors have become a widespread issue, posing serious risks to enterprises [6]
US Health Dept Says UnitedHealth Hack Impacted 192.7 Million Consumers' Data
PYMNTS.com· 2025-08-15 01:59
Core Insights - The data breach at UnitedHealth Group's tech unit, Change Healthcare, affected approximately 192.7 million individuals, making it the largest data breach in the U.S. healthcare industry to date [1][3][4] Group 1: Data Breach Details - The initial estimate of individuals impacted was 190 million, which was later revised to 192.7 million [2] - The breach was caused by the "Blackcat" ransomware group, leading to significant disruptions in claims processing across the nation [3] - Vulnerable information included health insurance member IDs, patient diagnoses, treatment information, social security numbers, and billing codes [4] Group 2: Financial Impact - Following the breach, Change Healthcare had to process $14 billion in backlogged healthcare claims after a month of service restoration efforts [4] - The cyberattack was noted to potentially reduce UnitedHealth Group's profit by $1.6 billion in 2024 [6] Group 3: Security Vulnerabilities - The hackers accessed the system through a Citrix portal that lacked multi-factor authentication, allowing them to move laterally within the systems [5][6] - The breach was disclosed in February, with the attack occurring on February 12, when compromised credentials were used for remote access [5]
Allianz Data Breach Exposes Vulnerabilities Affecting Everyone
Forbes· 2025-08-10 18:50
Core Insights - Data breaches are increasingly common, with 5.5 billion user accounts compromised globally in the previous year, marking an 800% increase compared to 2024, and 2025 is projected to set a new record for breaches [2][3] Company-Specific Summary - Allianz Life experienced a data breach on July 16th due to a supply chain attack, where cybercriminals targeted a third-party company to access sensitive information [3] - The breach involved the personal information of Allianz Life's 1.4 million customers in the U.S., including names, addresses, birth dates, Social Security numbers, and insurance policy details [3][4] - The hacker impersonated an IT helpdesk employee to gain unauthorized access to Allianz's Salesforce CRM system, utilizing social engineering tactics [4][5] Industry-Wide Implications - Many companies rely on cloud services and external partners, which increases vulnerability to data breaches when employees are manipulated through social engineering [5] - Cybersecurity should not only focus on technical measures but also address human vulnerabilities through ongoing awareness programs and a zero trust policy [7] - Implementing dual-factor authentication and using AI tools to detect unusual behavior can enhance data protection [7] Personal Protection Measures - Individuals should limit the personal information shared with companies and consider freezing their credit to prevent identity theft [8][9] - Regular monitoring of credit reports is essential to detect signs of identity theft, with free weekly access now available from major credit reporting agencies [9] - Caution is advised against unsolicited communications regarding data breaches, as these can be tactics used by identity thieves [10]
DATA BREACH ALERT: Edelson Lechtzin LLP is Investigating Claims on Behalf of FinWise Bank Customers Whose Data May Have Been Compromised
GlobeNewswire News Room· 2025-07-30 20:34
Group 1 - FinWise Bank experienced a data security incident involving a former employee accessing sensitive data after their employment ended, with the breach occurring around May 31, 2024, and notification to affected individuals delayed for over 14 months [3][4]. - Compromised data includes personal information such as customers' full names, Dates of Birth, Social Security Numbers, and account numbers [4]. - Edelson Lechtzin LLP is investigating potential class action lawsuits for individuals whose sensitive personal data may have been compromised due to the FinWise data breach [5]. Group 2 - FinWise Bank is a Utah chartered bank that provides "embedded banking" services, assisting non-financial businesses, including fintechs, in offering financial products to consumers and businesses [2].
Hackers leak thousands of photos and IDs from users in Tea app data breach
NBC News· 2025-07-30 03:00
Download Tea. You can literally look up so many things. It was marketed as an app for women to talk safely and anonymously about the men they're dating. Just download the tea app, type in his name, and you can literally see if he has red flags or green flags. Now, it's a nationwide security nightmare. What are we doing about the T app leak? Like, this is not okay. The T app announcing a massive data breach to their systems last week. Roughly 72,000 images, including 13,000 verification selfies and images of ...
X @Forbes
Forbes· 2025-07-28 19:19
Security Breach - Tea app, a platform for anonymous dating disclosures, experienced a data breach [1] - The breach exposed details related to issues such as infidelity [1]
Allianz Life says ‘majority' of customers' personal data stolen in cyberattack
TechCrunch· 2025-07-26 13:40
Core Points - Allianz Life confirmed a data breach in mid-July, where hackers stole personal information of the majority of its customers, financial professionals, and employees [1][2] - The breach occurred on July 16, 2025, through a third-party cloud-based CRM system, utilizing social engineering techniques [2][3] - Allianz Life has approximately 1.4 million customers, while its parent company Allianz has over 125 million customers globally [3] Company Response - Allianz Life disclosed the breach in a legally required filing with Maine's attorney general but did not specify the number of affected customers [3] - The company has notified the FBI and stated there is no evidence of other compromised systems within its network [3][4] - Allianz Life plans to begin notifying affected individuals around August 1 [6] Industry Context - Allianz Life is part of a recent wave of data breaches affecting the insurance industry, with other companies like Aflac also targeted [5] - Security researchers have linked these intrusions to a hacking group known as Scattered Spider, which employs social engineering techniques [5][6] - Prior to targeting the insurance sector, Scattered Spider had previously attacked the U.K. retail industry and other sectors [6]
X @The Economist
The Economist· 2025-07-18 06:00
Data Breach & Responsibility - A data breach revelation, gagging order, and a stampede to duck responsibility are highlighted [1] - Britain is being reminded that the cover-up, not the sin itself, causes the trouble [1] Legal & Ethical Implications - The situation underscores the importance of transparency and accountability following a data breach [1]
X @The Economist
The Economist· 2025-07-17 15:20
Super-injunctions had only ever been used to protect celebrities and businesses from embarrassment. Deploying one after a data breach, keeping difficult ethical and policy decisions from the British public, sets a terrible precedent https://t.co/Q3OsKPtcY3 ...