TechCrunch reports that Dish Network has disclosed that nearly 300,000 individuals had their personal information compromised following a ransomware attack in February.
No customer databases have been impacted but hundreds of thousands of employee-related records, including information from former employees, employees' family members, and other individuals, have been accessed and stolen in the incident, according to a data breach notice filed by Dish with the Maine Attorney General's Office. Such breach notification, which was Dish's first update regarding the incident since confirming data exfiltration in March, also noted that driver's license numbers and other identification details have also been compromised, but said that exfiltrated data has been confirmed to be deleted by its attackers. No comments or confirmation have been given by Dish spokesperson Edward Wietecha regarding the kinds of data compromised in the incident. Wietecha also refused to comment on whether Dish had paid the ransom demanded by its attackers.
Officials at the City of Augusta, Georgia, have been noted by Mayor Garnett Johnson to have not communicated with the BlackByte ransomware operation that took credit for a cyberattack against the city that commenced on May 21, according to The Record, a news site by cybersecurity firm Recorded Future.
Attacks exploiting a zero-day in the MOVEit Transfer file transfer app to compromise various servers and facilitate data exfiltration efforts have been admitted by the Clop ransomware operation, also known as Lace Tempest, TA505, and FIN11, after the intrusions have been attributed to the group by Microsoft, reports BleepingComputer.
University of Waterloo in Canada has disclosed that its on-campus Microsoft Exchange servers have been impacted by an averted ransomware attack on May 30, according to The Record, a news site by cybersecurity firm Recorded Future.