Cyber Incident Response // Cyber Security // Cyber Crime // Cyber Terrorism // Cyber Defense
I haven't recovered from writing about the Clop ransomware crew's Oracle EBS campaign against Madison Square Garden and 100-plus other organisations — the one where Clop stole 131,070 sets of SSNs and MSG took seven months to tell anyone — and now the week hands me this. LexisNexis. The company that sells risk intelligence and … Continue reading LexisNexis Breach: Risk Intelligence Giant Loses 2GB of Data
I haven't even finished my third coffee this week and I'm already writing about a data breach so stupid it physically hurts. Not "sophisticated nation-state intrusion" stupid. Not "supply chain zero-day" stupid. I mean "the password was literally Lexis1234" stupid. A company trusted by federal judges, DOJ attorneys, and U.S. SEC staff was running a … Continue reading LexisNexis AWS Breach: ‘Lexis1234’ Opens the Door to Gov Data