Data breach
Search documents
US Health Dept Says UnitedHealth Hack Impacted 192.7 Million Consumers' Data
PYMNTS.com· 2025-08-15 01:59
Core Insights - The data breach at UnitedHealth Group's tech unit, Change Healthcare, affected approximately 192.7 million individuals, making it the largest data breach in the U.S. healthcare industry to date [1][3][4] Group 1: Data Breach Details - The initial estimate of individuals impacted was 190 million, which was later revised to 192.7 million [2] - The breach was caused by the "Blackcat" ransomware group, leading to significant disruptions in claims processing across the nation [3] - Vulnerable information included health insurance member IDs, patient diagnoses, treatment information, social security numbers, and billing codes [4] Group 2: Financial Impact - Following the breach, Change Healthcare had to process $14 billion in backlogged healthcare claims after a month of service restoration efforts [4] - The cyberattack was noted to potentially reduce UnitedHealth Group's profit by $1.6 billion in 2024 [6] Group 3: Security Vulnerabilities - The hackers accessed the system through a Citrix portal that lacked multi-factor authentication, allowing them to move laterally within the systems [5][6] - The breach was disclosed in February, with the attack occurring on February 12, when compromised credentials were used for remote access [5]
Allianz Data Breach Exposes Vulnerabilities Affecting Everyone
Forbes· 2025-08-10 18:50
Core Insights - Data breaches are increasingly common, with 5.5 billion user accounts compromised globally in the previous year, marking an 800% increase compared to 2024, and 2025 is projected to set a new record for breaches [2][3] Company-Specific Summary - Allianz Life experienced a data breach on July 16th due to a supply chain attack, where cybercriminals targeted a third-party company to access sensitive information [3] - The breach involved the personal information of Allianz Life's 1.4 million customers in the U.S., including names, addresses, birth dates, Social Security numbers, and insurance policy details [3][4] - The hacker impersonated an IT helpdesk employee to gain unauthorized access to Allianz's Salesforce CRM system, utilizing social engineering tactics [4][5] Industry-Wide Implications - Many companies rely on cloud services and external partners, which increases vulnerability to data breaches when employees are manipulated through social engineering [5] - Cybersecurity should not only focus on technical measures but also address human vulnerabilities through ongoing awareness programs and a zero trust policy [7] - Implementing dual-factor authentication and using AI tools to detect unusual behavior can enhance data protection [7] Personal Protection Measures - Individuals should limit the personal information shared with companies and consider freezing their credit to prevent identity theft [8][9] - Regular monitoring of credit reports is essential to detect signs of identity theft, with free weekly access now available from major credit reporting agencies [9] - Caution is advised against unsolicited communications regarding data breaches, as these can be tactics used by identity thieves [10]
DATA BREACH ALERT: Edelson Lechtzin LLP is Investigating Claims on Behalf of FinWise Bank Customers Whose Data May Have Been Compromised
GlobeNewswire News Room· 2025-07-30 20:34
Group 1 - FinWise Bank experienced a data security incident involving a former employee accessing sensitive data after their employment ended, with the breach occurring around May 31, 2024, and notification to affected individuals delayed for over 14 months [3][4]. - Compromised data includes personal information such as customers' full names, Dates of Birth, Social Security Numbers, and account numbers [4]. - Edelson Lechtzin LLP is investigating potential class action lawsuits for individuals whose sensitive personal data may have been compromised due to the FinWise data breach [5]. Group 2 - FinWise Bank is a Utah chartered bank that provides "embedded banking" services, assisting non-financial businesses, including fintechs, in offering financial products to consumers and businesses [2].
Hackers leak thousands of photos and IDs from users in Tea app data breach
NBC News· 2025-07-30 03:00
Data Breach Overview - Tea app, marketed as a safe dating app for women, experienced a massive data breach [1] - Approximately 72,000 images, including 13,000 verification selfies and government IDs, were leaked online [1] - The breach also compromised some private direct messages, leading to the function being disabled [1] - The app had over 4 million users and surged to the number one spot in the Apple App Store prior to the breach [2] Security Vulnerabilities - The Tea app failed to adequately encrypt or protect user data [1] - Legacy content was not migrated to the new fortified system, creating a vulnerability [1] - An unauthorized actor accessed the identifier link where data was stored before February 24th, 2024 [1] User Impact and Concerns - Users are concerned about their personal information being exposed, including addresses [3][4] - The breach affects users who signed up before February 2024 [5] - Users have lost trust in the app due to the data breach [4] Remediation and Recommendations - Tea app has engaged third-party cybersecurity experts to secure their systems [5] - Impacted users are advised to freeze their credit [6] - Users should lock down information from data brokerage sites, either individually or through a removal tool [6][7] - Users should use long, random, unique passwords and change them frequently [7]
Allianz Life says ‘majority' of customers' personal data stolen in cyberattack
TechCrunch· 2025-07-26 13:40
Core Points - Allianz Life confirmed a data breach in mid-July, where hackers stole personal information of the majority of its customers, financial professionals, and employees [1][2] - The breach occurred on July 16, 2025, through a third-party cloud-based CRM system, utilizing social engineering techniques [2][3] - Allianz Life has approximately 1.4 million customers, while its parent company Allianz has over 125 million customers globally [3] Company Response - Allianz Life disclosed the breach in a legally required filing with Maine's attorney general but did not specify the number of affected customers [3] - The company has notified the FBI and stated there is no evidence of other compromised systems within its network [3][4] - Allianz Life plans to begin notifying affected individuals around August 1 [6] Industry Context - Allianz Life is part of a recent wave of data breaches affecting the insurance industry, with other companies like Aflac also targeted [5] - Security researchers have linked these intrusions to a hacking group known as Scattered Spider, which employs social engineering techniques [5][6] - Prior to targeting the insurance sector, Scattered Spider had previously attacked the U.K. retail industry and other sectors [6]
X @The Economist
The Economist· 2025-07-18 06:00
Data Breach & Responsibility - A data breach revelation, gagging order, and a stampede to duck responsibility are highlighted [1] - Britain is being reminded that the cover-up, not the sin itself, causes the trouble [1] Legal & Ethical Implications - The situation underscores the importance of transparency and accountability following a data breach [1]
X @The Economist
The Economist· 2025-07-17 15:20
Super-injunctions had only ever been used to protect celebrities and businesses from embarrassment. Deploying one after a data breach, keeping difficult ethical and policy decisions from the British public, sets a terrible precedent https://t.co/Q3OsKPtcY3 ...
Ahold Delhaize USA Services, LLC Data Breach Alert Issued By Wolf Haldenstein
GlobeNewswire News Room· 2025-07-16 20:40
Group 1 - Ahold Delhaize USA Services, LLC experienced a data breach in November 2024, affecting the personal information of employees and former employees [2] - The stolen personal information includes names, Social Security numbers, driver's license numbers, passport numbers, dates of birth, medical information, health insurance information, and bank account information [2] - Wolf Haldenstein Adler Freeman & Herz LLP is investigating claims on behalf of those impacted by the data breach [1][4] Group 2 - Ahold Delhaize is notifying affected individuals about the potential compromise of their personal information, which may be available for sale on the dark web [3] - Wolf Haldenstein has a strong reputation in consumer rights litigation and has been appointed to major positions in complex consolidated litigation [5]
Zuckerberg Faces Meta Shareholder Data Scandal Trial
Bloomberg Technology· 2025-07-16 18:12
Legal & Governance - Shareholders are holding Meta executives and board members financially accountable for negligence and lack of oversight in the Cambridge Analytica scandal [2][4] - The trial in Delaware marks the first time a CEO and board members are facing court in a case of this nature, potentially setting a precedent for corporate governance [6] - Mark Zuckerberg is shifting from settling legal disputes to actively pursuing legal wins to set precedents [9] Financial & Investment - Meta is expected to spend hundreds of billions of dollars in a race to beat out the competition, likely in the AI and data center space [12] - Meta is projected to spend up to $72 billion in capital expenditures this year, primarily on data centers [13] - Meta is investing heavily in talent, with pay packages reaching $200 million [13] Strategic Direction - Mark Zuckerberg is adopting a no-apologies stance and is focused on dominating the tech space through legal and political victories [10][11] - Meta is considering Saudi Arabia for data center expansion due to the need for capital, space, and energy [12]