PrivacySignal
Analysis ← Front page
Breach

Personal information of over 23,500 Simba customers leaked in data breach

DataBreaches.net · · International · Data Breaches

Singaporean telco Simba confirmed a data breach affecting 23,549 customers, exposing names, identity card numbers, dates of birth, mobile numbers, and email addresses. The company disclosed the incident in a statement issued on September 25.

Why this matters: Identity card numbers are not like passwords. You cannot reset them. When a telco loses that kind of data, the people affected carry the risk long after the company moves on. Over 23,000 customers handed Simba their details just to sign up for phone service. That is not an unusual ask. But it means the exposure here is not a minor inconvenience. It is the kind of information that makes identity fraud and targeted scams much easier to pull off.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy
Read the original at DataBreaches.net → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
BleepingComputer · · International

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

AU: Hacker claims to have sold stolen exams to students — but marked them for identification purposes?

Aimee Edwards reports: Victoria’s Year 12 exams have been thrown into turmoil after the state’s curriculum and assessment authority website was hacked. A bizarre message appeared on the Victorian Curriculum and Assessment Authority (VCAA) website on Wednesday evening, with the hacker mocking the authority’s security and claiming to have obtained and distributed this year’s exam papers....

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
BleepingComputer · · International

Notion says Fireworks breach exposed customer AI chat transcripts

Notion disclosed that a breach at Fireworks AI, a third-party provider powering Notion's AI features, exposed chat transcripts from a limited number of customer workspaces. The incident originated outside Notion's own infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
Microsoft Threat Intelligence · · International

The global socket: how threat actors are weaponizing GSocket for stealthy C2

Threat actors are deploying GSocket on compromised Linux servers to keep encrypted remote access after the original vulnerability is patched. Learn how to detect, investigate, and remediate this activity. The post The global socket: how threat actors are weaponizing GSocket for stealthy C2 appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
Krebs on Security · · International

Who Runs the Ransomware Group Qilin?

The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade that all point to a 36-year-old man living in St. Petersburg, Russia.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →