PrivacySignal
Breach

Nearly 750k had financial info, SSNs leaked in South Carolina loan company breach

The Record · · International · Data Breaches

A data breach at a South Carolina loan company exposed the financial information and Social Security numbers of nearly 750,000 people. The incident affected both borrowers and people who had only inquired about a loan through a third-party channel.

Why this matters: Social Security numbers are not like passwords. You cannot change them. Once they are out, they are out, and the damage can follow someone for years through fraud, identity theft, and credit problems they did not cause. What makes this worse is the reach. You do not have to have taken a loan. Just asking about one through a third party was enough to put your data at risk. That is a lot of people who had no idea they were trusting this company with anything.

Who should care: Cybersecurity · Privacy officers · Administrators

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Breach
BleepingComputer · · International

Microsoft says threat actors are ahead in the early AI race

Microsoft has assessed that cyberthreat actors are currently extracting more advantage from AI than the security teams trying to stop them, using the technology to find vulnerabilities faster, build malware, and move more efficiently after a breach.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy

#breach#ai-governance#ai#security Read original →
Breach
DataBreaches.net · · International

Teenagers suspected of leading KillSec ransom group arrested during international operation

DataBreaches has reported on a group known as KillSec for almost two years. This time, we get to report on their arrest. The European Union Agency for Criminal Justice Cooperation issued this press release today: An international group of authorities from nine countries, coordinated by Eurojust and Europol, has successfully shut down a ransomware group... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

‘A treasure trove of information:’ Cybersecurity specialist says sensitive McMinnville records exposed online

A cybersecurity specialist discovered that sensitive city records from McMinnville, Oregon were exposed on the dark web and accessible in just a few clicks. The researcher described the breach as unusually easy to access, suggesting the exposed data was broad in scope.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
BleepingComputer · · International

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

An international law enforcement operation called Operation KillSwitch dismantled the KillSec ransomware group, seizing its data leak site and servers and making three arrests. Investigators identified a 16-year-old as the group's alleged administrator.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#security Read original →