Late last week, officials for one of the largest IT service providers in the world, Fujitsu, announced that they had identified an infection on their internal systems which led to the theft of a significant amount of customer data. As the investigation continues, staff are working to determine how many customers have been affected by this incident and any vulnerabilities in their system that allowed the infection to occur and persist for longer enough to allow data exfiltration.
Scottish NHS trust confirms cybersecurity incident
Over the weekend, officials for the Scottish NHS trust, Dumfries and Galloway have revealed that they have been an ongoing victim of cyberattacks, which have resulted in an exfiltration of patient healthcare data. It is believed that a ransomware group is behind this incident, though there has not been any confirmation of a demanded ransom nor a specific group claiming responsibility. NHS officials are warning patients to be mindful of any unusual activity.
83,000 individuals compromised in Nations Direct Mortgage breach
Following a data breach in December of 2023, nearly 83,000 clients of Nations Direct Mortgage have begun receiving notifications that their sensitive data may have been compromised. Though the mortgage firm has stated that they do not believe any data was stolen or used nefariously, they are now facing a class action lawsuit based around this breach, as they have become the latest in a long string of mortgage lenders/servicers who have failed to properly protect client data.
International Monetary Fund suffers BEC attack
Nearly a month after the investigation began, it was revealed that the International Monetary Fund had fallen victim to a network intrusion due to 11 internal email accounts being compromised. The incident was first identified on February 16th and promptly remediated, though the investigation is still ongoing to determine if any systems or confidential resources were illicitly accessed.
France Travail compromises 43 million individuals
In the past week, officials for the French employment agency, France Travail, have identified a significant data breach that may affect 43 million individuals who have registered with the agency over the last 20 years. Not long after the incident, French authorities announced that they have arrested 3 individuals who are suspected of being behind this breach and are now being charged with multiple count of fraudulent access, data extraction, and money laundering.