The LeadSecurity3 days ago

IDScan sued over alleged data breach affecting 153 million drivers

Lawsuits target identity-verification firm IDScan after hackers allegedly exfiltrated 153 million driver's licences, spotlighting supply-chain risk for organisations that outsource document-based KYC.

By BleepingComputerContinue reading

Security

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Trezor's fulfilment partner ShipMonk exposed 67K customers' personal data that was supposed to have been deleted — highlighting the gap between contractual data-deletion promises and actual vendor practice.

THN (Feedburner)2d

Security

Your Employee’s Password Appeared in an Infostealer Log. Now What?

When corporate credentials surface in infostealer logs, the real danger lies in stolen session tokens that bypass MFA — defenders must triage for active session validity, not just reset passwords.

BleepingComputer4d

Security

US and Canadian court data exposed in Thomson Reuters breach

A Thomson Reuters court records platform breach exposed sealed judicial data across 12+ US jurisdictions and Canada — enterprises using the provider should reassess third-party data-aggregation risk.

The Record4d

The Security Desk

All filed stories from the security desk this week.

Security11 stories