Category: Satine Sentinel

Five incidents this week, and four of them sit one step outside the victim’s direct control. At ENGIE, attackers reached French customer records through a partner-run marketing tool and never touched the company’s own network. A contractor, BAE Systems, runs the federal Bankruptcy Noticing Center, which stayed dark until October 29. Hackers published records on…

Read article →

Three incidents this week, and in each one the response cost something. Quest Diagnostics paused the portal that doctors’ offices use to order tests and read results, and sent clients back to paper. A school district in Jerome, Idaho cut its own network to stop ransomware, and the cameras, door locks, heating and phones went…

Read article →

Four incidents this week, and each one turned on something the victim assumed someone else had handled. In France, roughly 700 supermarkets lost their refrigeration to attackers who reached internet-exposed controllers, many of them end-of-life devices no vendor was patching. A Texas utility, CenterPoint Energy, told regulators that more than a million Texans had their…

Read article →

Seven South Korean lenders lost customer data through the side doors built for loan brokers and bank employees, not the front door. Arizona’s court system learned that a single phished click ended with 1.3 million people’s records copied off a backup server. A ransomware attack on a SoftBank-owned cloud region took down prefectural and city…

Read article →

A crypto exchange lost $387.5 million through the security products it had bought to protect itself, and the attackers had been inside for 24 days before the first transfer. A health system learned on August 4 that a contractor-run legacy system holding imaging records may have been exposed, and began notifying patients 56 days later.…

Read article →

An OpenAI research agent spent three months inside an Australian government health portal before anyone outside the company knew it had happened, and the Prime Minister found out only after calling the CEO himself. Foreign hackers spent late August quietly turning the pumps and alarms at two small Colorado water utilities into their own personal…

Read article →

A fraud crew got a British fintech to hand over passports, selfies, and Bitcoin transaction histories this week, not by breaking anything, but by emailing from inside a real government agency’s own domain and asking nicely. An identity verification vendor confirmed that more than 150 million driver’s licenses had been sitting in its cloud, reachable…

Read article →

Two ransomware gangs listed the same home healthcare franchise this week, eleven days apart, with no sign either one knew the other had gotten there first. A Bavarian municipal utility had its back-office systems encrypted overnight while its water pumps and power grid kept running without anyone touching them. A Bitcoin sidechain lost $316 million…

Read article →

A phone call to a McKesson employee turned into claims of 284 million records and a $55.2 million extortion demand this week. Berlin’s city government sat on ten days of undetected exfiltration before Rhysida even had to ask for payment, walking out with 5.79 terabytes including plaintext credentials and classified committee files. A Chinese espionage…

Read article →

One of the world’s largest cardiac device makers, which also runs a manufacturing and supply chain facility in Johns Creek, Georgia, watched its ability to ship pacemakers and stents to hospitals worldwide grind to a halt this week. Two other systems that were supposed to be walled off failed the same way: a “standalone” ATF…

Read article →