At this stage of the game, little confirmed about Traderie data breach. Orthopedic data breach hits close to the bone.

Summary

By the CyberWire staff

At a glance.

At this stage of the game, little confirmed about Traderie data breach.
Orthopedic data breach hits close to the bone.

At this stage of the game, little confirmed about Traderie data breach.

Traderie, a video game item trading website, has disclosed it experienced a data breach that exposed users’ personal data. Gamers on popular titles like Roblox, Rocket League, and Diablo use the Traderie platform, which is owned by US software firm Akrew, as a marketplace for trading or selling in-game items. TechCrunch reports that an unauthorized third-party accessed data from users’ accounts, and that the breach also impacted Nookazon, another Akrew-owned trading website that’s specifically focused on the game Animal Crossing: New Horizons. Although Traderie didn’t provide specifics about how many users were affected or which user data was acquired, the platform collects personally identifiable info like user email addresses, Discord and Twitter usernames, and IP addresses. A seller on hacking forum BreachForums who recently claimed to be in possession of data stolen from Traderie alleges that 2.6 million users were compromised in the breach. The user also says Stripe information, which Traderie uses for processing payments, was also compromised. However, the breach notification email sent to Traderie users claims the company does “not directly store your password and any financial information is handled by the payment platform Stripe.”

Orthopedic data breach hits close to the bone.

JDSupra reports that an orthopedic care provider based out of the US state of Mississippi suffered a data breach in which an unauthorized party acquired consumers’ sensitive data. Bienville Orthopaedic Specialists LLC (BOS) says that the exposed data include names, Social Security numbers, medical information, health insurance information, usernames and passwords, financial account information, and driver’s license numbers. According to the notice of data breach filed with the Attorney General of Maine, the intruder had access to BOS’s systems between February 3, 2023, and March 5, 2023. After detecting the intrusion, BOS conducted an investigation to determine what patient data were impacted, which concluded at the end of July. BOS has sent notification letters to all affected parties.

Selected Reading

Polish Senate investigation recommends potential criminal charges for politicians implicated in Pegasus scandal (Record) Poland's Senate on Thursday released the results of a commission’s investigation into the use of Pegasus spyware to hack an opposition politician in 2019, describing "gross violations of constitutional standards.”

TMG Health Faces Class Action Over Data Breach Affecting 192,000 (Bloomberg Law) TMG Health Inc. failed to protect the personal health information of more than 192,000 people that was exposed in a June data breach, a proposed federal class action said.

Bienville Orthopaedic Specialists Data Breach Leaks as Many as 240,000 Social Security Numbers (JD Supra) On September 1, 2023, Bienville Orthopaedic Specialists LLC (“BOS”) filed a notice of data breach with the Attorney General of Maine after discovering...

Traderie, a marketplace for in-game items, alerts users to data breach (TechCrunch) The data breach also affects Akrew’s Nookazon website, which allows gamers to trade and sell in-game items from Animal Crossing: New Horizons.

Dymocks warns customer records may be on dark web after possible data breach (the Guardian) Bookseller’s managing director says potential hack was detected on Wednesday and investigation has been launched

Hackers claim to publish prominent Israeli hospital’s patient data (Record) Ragnar Locker ransomware gang claimed responsibility for the attack on Mayanei Hayeshua Medical Center, which has served top government officials and senior rabbis.

5 macOS Infostealers Making Waves Right Now (ReliaQuest) Over the past year, the rapid development of infostealers has focused on macOS environments. This growing trend highlights an escalating demand for macOS-specific malware capabilities

New Ransomware Strains - CryptNet, Mallox, and Xollam (Avertium) CryptNet, Mallox, & Xollam are new ransomware strains with operators that have intensified the way they attack, posing new challengers for cyber experts.

BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild (The Citizen Lab) Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.