Hacked London NHS hospitals data allegedly published online

Cyber-attack earlier this month led to cancellation of almost 1,600 operations and outpatient appointments

Data from a ransomware attack has allegedly been published online weeks after the attack halted operations and tests in major London hospitals, NHS England has said.

A Russian group is believed to have carried out the cyber-attack on Synnovis, a private pathology firm that analyses blood tests for Guy’s and St Thomas’ NHS foundation trust (GSTT) and King’s College trust, on 3 June, forcing hospitals in the capital to cancel almost 1,600 operations and outpatient appointments.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/A5GKhbM
via IFTTT

US bans sales of Kaspersky antivirus software over Russia ties

Washington says Moscow’s influence over company poses significant risk, as Kaspersky argues its activities do not threaten US security

Joe Biden’s administration has banned Russia-based cybersecurity firm Kaspersky from providing its popular antivirus products in the US over national security concerns.

“Kaspersky will generally no longer be able to, among other activities, sell its software within the United States or provide updates to software already in use,” said a commerce department statement. The announcement came after a lengthy investigation found Kaspersky’s “continued operations in the United States presented a national security risk due to the Russian government’s offensive cyber capabilities and capacity to influence or direct Kaspersky’s operations”.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/TH08PLK
via IFTTT

Who are Qilin, the cybercriminals thought behind the London hospitals hack?

Russian-speaking ransomware gang lets hackers use its tools in exchange for cut of proceeds

Russian-speaking ransomware criminal gang Qilin is thought to be behind the cyber-attack on NHS medical services provider Synnovis, that halted tests and operations at hospital trusts to a halt and impacted GPs across London.

Although the location of the group is unknown, if it is based in Russia, it will be difficult for British law enforcement to directly target it. The Russian state has long had a ban on extraditing criminals overseas, and since it launched a full-scale invasion of Ukraine, it has largely ended all cooperation on cybersecurity matters so long as the hackers focus their attacks on foreign targets.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/7zmoWUj
via IFTTT

Live Nation investigating data breach of its US Ticketmaster unit

Cybercrime group ShinyHunters said it had stolen data of 500m customers of concert promoter’s ticketing arm

Live Nation Entertainment said it is investigating a data breach at its Ticketmaster unit that it discovered on 20 May, the latest in a string of high-profile corporate hacks in the past year.

In a filing with the US Securities and Exchange Commission, Live Nation said it had found “unauthorised activity” in a third-party cloud database that mainly contained Ticketmaster data, and was working with forensic investigators.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/H4vGKkQ
via IFTTT

Ticketek customer details exposed in cyber security breach

Clare O’Neil says incident was “affecting many Australians” but appears restricted to the release of names, dates of birth and email addresses

Ticketek has been hit by a “cyber incident” with personal information of Australian customers stolen from a third-party global cloud-based platform.

The cybersecurity minister, Clare O’Neil, said late on Friday night the breach was “affecting many Australians” but appeared restricted to the release of names, dates of birth and email addresses.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/d5RErf0
via IFTTT

Ticketmaster yet to confirm if data breach has occurred or if customers in Australia impacted

The notorious ShinyHunters collective is claiming hack of personal details of 560 million global customers

Ticketmaster is yet to confirm whether it has experienced a major data breach or if Australians are impacted, after a notorious hacker collective claimed it had the personal details of millions of the ticketing giant’s global customers for sale.

The collective, ShinyHunters, claimed on Wednesday on the dark web it had the personal details of 560 million Ticketmaster customers for a one time sale of US$500,000. It also demanded a ransom for the data to not be released.

Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup

Continue reading…

from Data and computer security | The Guardian https://ift.tt/W0UbFRl
via IFTTT

AFL players call for overhaul of data protection as concerns include drug test results

  • AFLPA want to protect medical records and performance data
  • Port Adelaide players’ personal information was leaked last year

A fear of illicit drug test results and psychologist session notes being leaked onto the dark web is helping drive a call from AFL players to improve data collection and storage in the sport.

The leaking of Port Adelaide players’ personal information following a data breach late last year has awoken the industry to the risk of hackers, and the AFL Players Association (AFLPA) issued an urgent plea on Tuesday for an improvement in collection and storage practices.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/kSTzlwi
via IFTTT

MoD contractor hacked by China failed to report breach for months

Exclusive: Defence ministry was told in recent days that staff details accessed but sources say SSCL knew in February

The IT company targeted in a Chinese hack that accessed the data of hundreds of thousands of Ministry of Defence staff failed to report the breach for months, the Guardian can reveal.

The UK defence secretary, Grant Shapps, told MPs on Tuesday that Shared Services Connected Ltd (SSCL) had been breached by a malign actor and “state involvement” could not be ruled out.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/LYu7EwJ
via IFTTT

UK military personnel’s data hacked in MoD payroll breach

Defence secretary to address MPs after names and bank details of armed forces members targeted by unnamed attacker

The Ministry of Defence has suffered a significant data breach and the personal information of UK military personnel has been hacked.

A third-party payroll system used by the MoD, which includes names and bank details of current and past members of the armed forces, was targeted in the attack. A very small number of addresses may also have been accessed.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/Uz8XPNW
via IFTTT

No more 12345: devices with weak passwords to be banned in UK

Makers of phones, TVs and smart doorbells legally required to protect devices against access by cybercriminals

Tech that comes with weak passwords such as “admin” or “12345” will be banned in the UK under new laws dictating that all smart devices must meet minimum security standards.

Measures to protect consumers from hacking and cyber-attacks come into effect on Monday, the Department for Science, Innovation and Technology said.

Continue reading…

from Data and computer security | The Guardian https://ift.tt/6QJLK4l
via IFTTT