Computer Security News and Insights
The Breach That Cost a 12-Person Company Everything In 2023, a small accounting firm in Sacramento lost access to every client file it had. A single employee clicked a link in a fake DocuSign email. Within four hours, ransomware had encrypted the entire network. The ransom demand was $250,000.
Your Home Computer Is a Bigger Target Than You Think In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with losses exceeding $12.5 billion — and a massive share of those victims were everyday people targeted through their personal machines. Not corporate networks. Not
A Hospital Goes Dark in 90 Seconds In 2024, Change Healthcare — one of the largest health payment processors in the United States — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted pharmacy operations, delayed patient care, and exposed the protected health information of roughly 100 million individuals. UnitedHealth
A Single Click Cost One Hospital Chain $100 Million In 2024, Change Healthcare — one of the largest health payment processors in the U.S. — got hit with a ransomware attack that disrupted pharmacy operations across the entire country. UnitedHealth Group, its parent company, reported costs exceeding $870 million related to
The 2024 Verizon Data Breach Investigations Report found that stolen credentials were involved in 77% of attacks against web applications. Let me restate that: more than three out of four web app breaches started with a compromised password. Despite billions spent on perimeter defenses, password security best practices remain the
The Call That Almost Fooled a Google Engineer In 2024, a Google engineer received a phone call from someone claiming to be Google support. The caller ID showed a legitimate Google number. The voice was professional, calm, and eerily convincing. It was AI-generated. The FBI warns Gmail users of sophisticated
In 2024, the average cost of a data breach hit $4.88 million globally, according to IBM's Cost of a Data Breach Report. That number didn't drop in 2025. And from what I've seen in the first half of 2026, it's still
A Fake Invoice Cost One Company $121 Million In 2019, a Lithuanian national named Evaldas Rimasauskas pleaded guilty to orchestrating a phishing scheme that stole over $121 million from Google and Facebook. His weapon wasn't malware. It wasn't a zero-day exploit. It was email — and an
The Breach That Started With a Single Phone In 2022, Uber suffered a devastating breach after a threat actor targeted an employee's mobile device with repeated multi-factor authentication push requests. The attacker combined social engineering with MFA fatigue, and one tap on a phone screen gave them access
In 2023, a single reused password led to the MGM Resorts breach that cost the company over $100 million in damages. The threat actor didn't exploit a zero-day vulnerability or write custom malware. They called the help desk, social-engineered their way in, and leveraged weak credentials to move
