John Z Black

ShinyHunters Popped a Telehealth Giant Through Its Help Desk

John Z Black Apr 4, 2026

Incidents & Breaches #shinyhunters #hims-hers #zendesk #okta #healthcare #telehealth #sso #social-engineering

Two employees tricked out of their Okta creds. Millions of telehealth support tickets stolen. And Hims says no medical records were exposed. Sure.

Read More

Crunchyroll Got Breached. Their Systems Were Never Touched.

John Z Black Mar 29, 2026

Incidents & Breaches #crunchyroll #data-breach #okta #third-party-risk #supply-chain #zendesk #consumer #identity-chain

6.8 million Crunchyroll users had their data stolen through a three-hop attack chain that went from a vendor's infected laptop through Okta into Crunchyroll's customer service platform, without ever touching Crunchyroll's own systems.

Read More