Data Extortion Cases Show How Attackers Steal and Weaponize Sensitive Information

Summary

The article reviews extortion incidents involving Vastaamo, Salesforce-connected data, Jaguar Land Rover and Oracle E-Business Suite, then outlines steps organizations can take to contain breaches, investigate exposure and notify affected parties.

Key points

Vastaamo patients were extorted after attackers accessed psychotherapy records; exposed material included patient transcripts and private therapy notes. The article says the breach resulted from inadequate security and unencrypted, non-anonymized data.
The article describes Scattered Lapsus$ Hunters using vishing to access Salesforce-related data and later demanding payment from affected companies. Data from six companies was ultimately leaked, including records belonging to Qantas and Vietnam Airlines.
Jaguar Land Rover disclosed a cyberattack that halted production and caused a three-week shutdown. Scattered Lapsus$ Hunters claimed responsibility, but JLR did not disclose how the information was compromised.
Clop emailed executives at organizations including Logitech, Harvard, Envoy Air, the UK National Health Service and The Washington Post, claiming it had stolen Oracle E-Business Suite data and threatening to sell or publish it.
Recommended response steps include containing the breach, investigating its cause and scope, securing systems, reviewing access and credentials, assessing affected data, and notifying appropriate parties and law enforcement.

Article Details

Topic: Data theft extortion incidents, including the Vastaamo breach, Salesforce-related data theft, the Jaguar Land Rover cyberattack, and the Oracle E-Business Suite extortion campaign.