The Breach News

Coupang, South Korea’s E-Commerce Giant, Investigates Major Data Breach

Artificial Intelligence & Machine Learning, Cybercrime, Fraud Management & Cybercrime Chinese Developer Linked to Coupang Data Breach Investigation Mathew J. Schwartz (euroinfosec) • December 2, 2025 Image: Shutterstock South Korea’s leading e-commerce platform, Coupang, has reported a substantial data breach that potentially exposed the personal data of 33.7 million customers—a…

Read MoreCoupang, South Korea’s E-Commerce Giant, Investigates Major Data Breach

AT&T Customers Impacted by 2024 Data Breach May Be Eligible for Up to $7,500 Compensation

AT&T Reaches Settlement in Major Data Breach Case In a significant development for consumers, AT&T has announced the finalization of its settlement related to a series of data breaches that affected its customers. This settlement, which totals up to $177 million, will provide affected individuals with compensation ranging from $100…

Read MoreAT&T Customers Impacted by 2024 Data Breach May Be Eligible for Up to $7,500 Compensation

Cybersecurity Agencies Alert Ubiquiti EdgeRouter Users to APT28’s MooBot Threat

In a recent advisory, cybersecurity and intelligence agencies from the United States and allied nations have alerted users of Ubiquiti EdgeRouters to strengthen their security measures. This advisory follows the disruption of a botnet named MooBot, which consisted of compromised routers and was dismantled by law enforcement during an operation…

Read MoreCybersecurity Agencies Alert Ubiquiti EdgeRouter Users to APT28’s MooBot Threat

Researchers Uncover Raindrop: Fourth Malware Tied to SolarWinds Attack

Cybersecurity analysts have recently identified a new malware strain dubbed “Raindrop” as part of the SolarWinds supply chain attack, a significant breach that was uncovered late last year. This fourth strain adds to the existing suite of malicious tools, including Sunspot, Sunburst (also referred to as Solorigate), and Teardrop, all…

Read MoreResearchers Uncover Raindrop: Fourth Malware Tied to SolarWinds Attack

British Airways Fined £183 Million for GDPR Violation Due to 2018 Data Breach

The Information Commissioner’s Office (ICO) of the UK has levied a groundbreaking fine of £183 million against British Airways for insufficient data protection in a substantial security breach that compromised the personal information of approximately half a million customers. This incident, which unfolded last year, involved unauthorized access to sensitive…

Read MoreBritish Airways Fined £183 Million for GDPR Violation Due to 2018 Data Breach

‘Cybersecurity Incident’ Triggers FDA Recall of Baxter Respiratory Equipment

Endpoint Security, Governance & Risk Management, Internet of Things Security Hackers Could Manipulate Settings of At-Home Life 2000 Ventilation System Marianne Kolbasuk McGee (HealthInfoSec) • December 1, 2025 The FDA has issued a “permanent recall” alert regarding Baxter’s Life 2000 ventilation system, attributed to a cyber vulnerability that endangers patient…

Read More‘Cybersecurity Incident’ Triggers FDA Recall of Baxter Respiratory Equipment

Chinese Hackers Leveraging Ivanti VPN Vulnerabilities to Distribute New Malware

Recent investigations have uncovered two distinct cyber espionage groups allegedly linked to China: UNC5325 and UNC3886, both exploiting vulnerabilities in Ivanti Connect Secure VPN appliances. UNC5325 is reported to have utilized the critical vulnerability tracked as CVE-2024-21893, distributing various malware strains, including LITTLELAMB.WOOLTEA and PITDOG, among others. According to Mandiant,…

Read MoreChinese Hackers Leveraging Ivanti VPN Vulnerabilities to Distribute New Malware

Hackers Unintentionally Reveal Stolen Business Passwords Online

A major phishing campaign has recently been identified, targeting businesses worldwide and successfully circumventing Microsoft Office 365’s Advanced Threat Protection (ATP). This offensive has reportedly led to the credentials of over a thousand corporate employees being compromised, with origins traced back to August of the previous year. According to a…

Read MoreHackers Unintentionally Reveal Stolen Business Passwords Online

Marriott Hit with $123 Million GDPR Penalty Due to Starwood Data Breach

Marriott International Faces £99 Million GDPR Fine Following 2014 Data Breach Following a record £183 million fine recently imposed on British Airways, the UK’s Information Commissioner’s Office (ICO) is now targeting Marriott International, the world’s largest hotel chain, with a proposed £99 million ($123 million) penalty. This action arises from…

Read MoreMarriott Hit with $123 Million GDPR Penalty Due to Starwood Data Breach