AI training vendor iLearningEngines discloses cyberattack in wake of SEC probe

The company said an attacker stole data, misdirected a $250,000 wire payment and deleted emails.

By Matt Kapko • Nov. 19, 2024

Schneider Electric investigating cyber intrusion after threat actor gains access to platform

The French multinational company has been a previous target of ransomware groups.

By David Jones • Nov. 5, 2024

Explore the Trendline➔

Securing the cloud

A host of new technologies and a spate of incidents at top providers means businesses have even more cloud security conundrums to consider. 

By Cybersecurity Dive staff

Change Healthcare data breach officially affects 100M people

The breach is the largest ever reported to a portal managed by federal regulators.

By Emily Olsen • Oct. 25, 2024

Where organizations invest after a data breach

Asking customers to foot the bill for data breach remediation will not prevent future data breaches or address the issues that cause costs to increase.

By Sue Poremba • Oct. 14, 2024

FTC settles yearslong investigation into Marriott’s ‘security failures’

The settlement caps a pattern of major data breaches at Marriott and its subsidiary Starwood Hotels and Resorts Worldwide over the last decade.

By Matt Kapko • Oct. 10, 2024

FCC reaches $31.5M settlement with T-Mobile over rash of data breaches

The company agreed to a major change in board-level governance and will make a series of upgrades to boost its cyber resilience.

By David Jones • Oct. 1, 2024

Dark web exposure is ‘highly correlated’ with cyberattack risk

Organizations that are mentioned in dark web market listings are more than twice as likely to experience an attack, Marsh McLennan found.

By Alexei Alexis • Sept. 24, 2024

Suffolk County ransomware attack linked to lack of planning, ignored warnings

A special report blames county officials for ignoring FBI warnings during the 2022 attack and an overall failure of IT and security leadership.

By David Jones • Sept. 18, 2024

AT&T settles a 2023 data breach for $13M. Recent incidents are much worse.

Telecom cybersecurity remains a challenge with widespread impacts. AT&T is not alone in experiencing a pattern of extensive breaches exposing customer data.

By Matt Kapko • Sept. 18, 2024

Valid accounts remain top access point for critical infrastructure attacks, officials say

CISA attributed 2 in 5 successful intrusions to valid account abuse last year, but that is down from 2022.

By Matt Kapko • Sept. 17, 2024

MOVEit victims are still coming forward. This time it’s Wisconsin Medicare.

The delayed notifications underscore the difficulty organizations confront in discovering breaches and attributing compromises to a root cause or source.

By Matt Kapko • Sept. 9, 2024

CISA officials credit Microsoft security log expansion for improved threat visibility

CISA officials say they plan to hold Microsoft accountable to ensure the company lives up to its commitments.

By David Jones • Aug. 27, 2024

SEC settles cyber case with Equiniti Trust as oversight questions linger

The firm, formerly known as American Stock Transfer, will pay $850,000 to settle civil fraud charges involving the theft of $6.6 million in client funds.

By David Jones • Aug. 26, 2024

Progress Software says SEC declines to pursue action related to MOVEit exploitation spree

The decision comes just weeks after a federal court dismissed most of the SEC’s civil fraud case against SolarWinds.

By David Jones • Aug. 8, 2024

Global data breach costs reach all-time high of $4.9M, IBM says

U.S. organizations led the world with the highest average data breach cost, a dubious distinction it has earned for the 14th straight year.

By Matt Kapko • July 30, 2024

UnitedHealth’s cyberattack response costs to surpass $2.3B this year

The healthcare giant’s new estimate is roughly $1 billion higher than previous forecasts as the cyberattack on subsidiary Change Healthcare continues to hamper its profit outlook.

By Rebecca Pifer • July 17, 2024

Weak credentials behind nearly half of all cloud-based attacks, research finds

Credential mismanagement was the top initial access vector for cloud environment attacks during the first half of 2024, a Google Cloud report found.

By Matt Kapko • July 17, 2024

AutoNation warns CDK cyberattack will dent quarterly earnings

The major North American car dealership estimates the attack will lead to a $1.50 per-share earnings impact.

By David Jones • July 15, 2024

TeamViewer’s IT network breached through compromised employee credentials

The remote access software provider said the impact of the attack from Midnight Blizzard was limited to its internal network and customer environments were not affected.

By David Jones • July 1, 2024

Microsoft alerts additional customers of state-linked threat group attacks

The company told customers the Midnight Blizzard attacks disclosed in January were more widespread than previously known.

By David Jones • June 28, 2024

Santander warns US employees bank account info stolen in third-party database hack

The bank in May confirmed a major breach involving customer data in multiple countries.

By David Jones • June 20, 2024

Clorox to restart ERP upgrade as it looks past August cyberattack

With the company out of recovery mode, teams are looking to advance on digital transformation projects. 

By Lindsey Wilkinson • June 11, 2024

Frontier Communications says cyberattack snagged data from 751,000 people

The breach notifications come almost two months after the company initially disclosed the April attack.

By David Jones • June 7, 2024

Pressure mounts on Snowflake and its customers as attacks spread

More businesses are likely impacted by an attacker’s access to multiple Snowflake customer databases.

By Matt Kapko • June 6, 2024

Snowflake customers caught in identity-based attack spree

Cyber authorities and researchers warn many major companies could be compromised by the targeted attacks against Snowflake customer environments.

By Matt Kapko • June 3, 2024