posts
In February 2024, a threat actor compromised a single employee's account at Change Healthcare, triggering the largest healthcare data breach in U.S. history — affecting roughly 100 million people. The entry point? An account that lacked multi-factor authentication entirely. UnitedHealth Group CEO Andrew Witty confirmed this during congressional
In February 2022, a teenage hacker tricked a T-Mobile employee into performing a SIM swap, then used that hijacked phone number to intercept SMS verification codes and breach Lapsus$ targets including Nvidia and Microsoft. The attack wasn't sophisticated. It didn't require zero-day exploits. The threat actor
In February 2024, a threat actor compromised a single employee's SMS-based multi-factor authentication at a major financial services firm. The method? A SIM swap that took under ten minutes. The attacker intercepted the one-time passcode, drained customer accounts, and left the company facing regulatory action. This wasn'
