Major Incidents or Breaches

  • Instagram has denied reports of a data breach after claims surfaced that data from over 17 million accounts was leaked online. The company stated that a bug enabling mass password reset email requests was identified and fixed, but asserts that no user passwords or sensitive data were exposed via a breach.
  • The University of Hawaii Cancer Center confirmed that hackers accessed patient data. The institution did not immediately notify affected individuals and has withheld details regarding the specific research project compromised and any ransom payments made to regain access.

Regulatory or Policy Developments

  • The California Privacy Protection Agency has taken enforcement action against Datamasters, a marketing firm that sold the health and personal data of millions of users without registering as a data broker. California has now banned data brokers from reselling health data, tightening regulatory controls over the handling and sale of sensitive personal information.

Trends, Tools, or Tactics of Interest

  • YARA-X version 1.11.0 has been released, introducing new hash function warnings to enhance detection capabilities for malware analysts and threat hunters.