Computer Security News and Insights
The Breach That Didn't Have to Cost $350 Million When Equifax disclosed its 2017 breach affecting 147 million people, the eventual settlement topped $700 million. But here's what most people forget: the vulnerability that attackers exploited had a patch available months before the breach. Equifax didn&
The Email That Cost One Company $121 Million In 2019, a Lithuanian national named Evaldas Rimasauskas pleaded guilty to stealing over $121 million from Google and Facebook using nothing more than fake invoices and spoofed email addresses. No zero-day exploits. No sophisticated malware. Just phishing emails that looked like they
In February 2024, Change Healthcare suffered a ransomware attack that disrupted pharmacy operations across the entire United States for weeks. UnitedHealth Group eventually disclosed the breach may have affected up to 100 million individuals. If you still think the word "cyber" is just a vague buzzword tossed around
A Single Spoofed Email Cost This Company $47 Million In 2024, the SEC disclosed that Ubiquiti Networks lost $46.7 million after attackers used a spoof of executive email accounts to trick the finance department into wiring funds to overseas accounts. The employees thought they were following orders from the
Most Organizations Read CISA's Advice — Then Ignore the Hard Parts In 2023, the City of Dallas got hit with Royal ransomware. Services went down. Police dispatch systems broke. Recovery took weeks and cost millions. The attack vector? The kind of basic intrusion that CISA cybersecurity guidelines have warned
A Single Spreadsheet Cost One Hospital $3 Million In 2023, a healthcare employee uploaded patient records to an unauthorized cloud spreadsheet tool to "make things easier" for her team. Nobody in IT knew about it. No encryption, no access controls, no audit trail. When that tool suffered a
In 2023, the FBI's Internet Crime Complaint Center (IC3) reported over $12.5 billion in losses from internet crime — a record high driven largely by organized criminal groups running coordinated fraud operations. These aren't lone hackers in basements. They're structured teams with defined roles,
That Google Alert in Your Inbox Might Be Real — Or It Might Be the Attack Itself Last year, the FBI's IC3 received over 298,000 complaints related to phishing and personal data breaches — and a massive share of those started with a single email that looked exactly like
In 2023, a single phishing email cost MGM Resorts an estimated $100 million. The threat actor didn't exploit a zero-day vulnerability or deploy exotic malware. They called the help desk, impersonated an employee found on LinkedIn, and got a password reset. That's it. If you'
A $4.88 Million Problem That Starts With One Email In 2024, the average cost of a data breach hit $4.88 million globally, according to IBM's Cost of a Data Breach Report. The number one initial attack vector? Phishing. Not sophisticated zero-day exploits. Not nation-state hackers tunneling
