The Printing Provider Pivot: Concentration Risk Hits US Banks

Citizens Bank and Frost Bank customers had their data stolen through outsourced printing and tax fulfillment vendors. Everest ransomware is targeting the boring middle layer.

Read More

When the Breach Isn't at Your Bank: Third-Party Risk Hits Healthcare and Finance in the Same Week

A hospital email account, a fintech ransomware attack still sending notifications eight months later, and a Lapsus$ claim against a financial vendor. Third-party concentration risk landed in two sectors at once this week.

Read More

The LAPD Was Not Hacked. But 7.7 Terabytes of Its Data Leaked Anyway.

World Leaks didn't touch LAPD's network. They breached a third-party file-sharing app connected to the LA City Attorney's Office that apparently had no password protecting it. 337,000 files including Internal Affairs records and witness names are now in an extortion group's hands.

Read More

The Ransomware 'Negotiator' Was Running the Attack: DigitalMint's $75M Double Cross

Federal charges reveal DigitalMint's ransomware negotiators were allegedly running the attacks themselves. The second employee charged in the same operation. This wasn't a rogue employee. It was the business model.

Read More