Yahoo reports that Bulgarian authorities have arrested a 20-year-old man in connection with a data breach at the national tax agency that exposed some seven-million people's personal information. The unidentified suspect is said to have been a legitimate penetration tester who went over to the dark side.

Congress is raising concerns about the 2020 US census, according to TheHill. This is the first census in which a significant portion of the data collection will be done online, with the attendant possibility of hacking, and a priori jitters are to be expected.

Researchers at Boston University report that they've demonstrated ways of defeating Media Access Control (MAC) address randomization Bluetooth Low Energy (BLE) uses to protect devices from being identified and tracked. Even properly, carefully implemented instances can yield a lot more information about a device than had generally been believed.

The US FBI has issued a Flash alert offering master decryption keys and other useful information concerning the now possibly retired but still troublesome GandCrab ransomware.

Monroe College, a proprietary school headquartered in the Bronx borough of New York, is grappling with a significant ransomware incident. Naked Security puts the extortion demand at $1.8 million; Inside Higher Ed says it's an even $2 million. Monroe has declined to say whether it will pay the ransom, but it has reverted to manual operations wherever possible.

The US House Armed Services Committee has asked to see “all National Security Presidential Memorandums relating to Department of Defense operations in cyberspace," Roll Call reports.