August reports reveal thousands of consumers may have been affected by summer data breaches

Summer data breaches overview: 

• Who: The Centers for Medicare and Medicaid Services, Kroll LLC, Discord.io, the City of Dallas and the Health Employees Association of British Columbia disclosed data breaches over the summer. 
• Why: The data breaches are believed to have been caused by a SIM swapping attack, ransomware and a website vulnerability, among other things.
• Where: The data breaches affected consumers nationwide and in British Columbia.

Data breaches that occurred over the summer may have impacted thousands of individuals across the United States, including health care workers, Texas residents and bankruptcy claimants, among others. 

Individuals whose information is exposed during a data breach can be at an increased risk of suffering from identity theft, credit fraud or a variety of other issues. 

Medicare beneficiaries possibly impacted by MOVEit data breach

The Department of Health and Human Services and the Centers for Medicare and Medicaid Services announced a May data breach may have impacted around 612,000 Medicare beneficiaries. 

The data breach involved government and public data stored on MOVEit file transfer software, according to a July news release.  

“Progress Software Corporation announced that a vulnerability in its MOVEit software had allowed an unauthorized party to gain access to files across many organizations in both the government and private sectors,” the release stated. 

CMS received notice of the data breach June 2, according to the agency, which said it determined none of its own systems were compromised. 

Bankruptcy claimants in BlockFi, FTX, Genesis cases affected by data breach against claims and noticing agent

Claims and noticing agent Kroll LLC disclosed a threat actor gained access to the personal information of bankruptcy claimants in cases involving BlockFi, FTX and Genesis. 

Kroll says it secured the BlockFi, FTX and Genesis accounts compromised in the data breach, which it claims is the result of a targeted SIM swapping attack against one of its employees. 

The claims and noticing agent says it has already begun notifying individuals who were potentially impacted by the data breach via email. 

“We deeply regret any inconvenience or concern this situation may have caused and we will continue to prioritize the safety and trust of our clients, partners and community,” Kroll says in a statement. 

Discord.io shuts down operations for ‘foreseeable future’ in wake of data breach

In August, Discord.io announced it would shut down its operations following a data breach that exposed the information of 760,000 of its members. 

The shutdown will be “for the foreseeable future,” according to Discord.io, a third-party Discord service that helps members create custom invites for their channels. 

A sample of the data stolen during the data breach, which Discord.io says it believes was caused by a vulnerability in its website code, was reportedly posted on Breached Forums, an online hacking forum.

Information exposed in the data breach included internal user IDs, status and avatar info, API keys, coin balances and registration dates, among other things, according to Discord.io. 

City of Dallas discloses May ransomware attack caused data breach affecting 26,000 individuals

The city of Dallas, Texas, disclosed a May ransomware attack against its city services resulted in a data breach affecting 26,000 individuals. 

It first disclosed the ransomware attack to the public May 3. The resulting data breach has since hindered a number of city services, including public safety departments and the public library systems, according to the city. 

Dallas previously said the ransomware attack had not led to any personal information exposure, despite a hacking group threatening to release data it claimed to have stolen during the incident. 

The city only conceded the ransomware attack exposed benefits-related data kept by its human resources department.

Data breach impacts B.C. public health sector workers, applicants

The Health Employers Association of British Columbia disclosed it suffered a data breach involving websites for its Health Match B.C., Locums for Rural B.C. and the B.C. Care Aide & Community Health Worker Registry. 

The data breach may have impacted thousands of individuals who either work or are applying to work in the B.C. public health sector, according to the association. 

Information exposed in the data breach may include social insurance numbers, driver’s license and passport details and home addresses, among other private data. 

“I sincerely regret this event happened, and I want to reassure everyone that we are working with cybersecurity and privacy experts to address the incident,” the association’s CEO Michael McMillian says in a statement. 

Were you affected by a data breach over the summer? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Umpqua Bank class action claims MOVEit data breach affects 430K customers
• Freecycle confirms data breach affecting 7M users
• University of Minnesota data breach class action lawsuit investigation
• Advance America class action alleges loan provider could have prevented data breach