Svoboda Cybersecurity Brief May 25, 2025
May 25, 2025bulletproof VPN - stay anonymous
Silent Ransom Group (SRG) Targets Law Firms with Social Engineering Attacks
The FBI warns that Silent Ransom Group (SRG), also known as Luna Moth or Chatty Spider, is actively targeting US-based law firms using IT-themed social engineering calls and callback phishing emails. The group aims to gain remote access to steal sensitive data for extortion, leveraging the high-value nature of legal industry data.
Source: DataBreaches.net
Chord Specialty Dental Partners Faces Consolidated Lawsuits Over 173K-Record Breach
Seven class-action lawsuits against Chord Specialty Dental Partners have been consolidated after a September 2024 breach exposed 173,430 patients’ data, including SSNs, medical records, and financial details. Plaintiffs allege violations of HIPAA and FTC Act due to inadequate cybersecurity and delayed breach notifications.
Source: DataBreaches.net
BC Health Authority Sued Over 2009 Breach After Dark Web Data Sale
A class-action lawsuit alleges Interior Health Authority (IH) failed to protect employee data stolen in a 2009 breach, which resurfaced on the dark web. The breach exposed SINs, birthdates, and contact details of employees, with some victims reporting identity theft as late as 2022.
Source: DataBreaches.net
York County Warns Residents of Potential Data Breach via Vendor
York County, PA, alerted residents to a potential breach involving a vendor employee who retained civil court data (including SSNs and medical info) after leaving the company. The county found no evidence of misuse but referred the incident to law enforcement.
Source: DataBreaches.net
Share this brief: https://svo.bz/Hvt4