Storm⚡️Watch | Cyber Podcast | Navigating Cyber Turbulence: MOVEit, BGP Fixes, & Ireland's NCSC Powers

Summary: Columbus, Ohio initially claimed no data was stolen in its ransomware attack, then revealed that the Rhysida ransomware group had leaked 3.1 terabytes of sensitive data. A TDECU MOVEit incident, in which a third-party data-transfer vendor was compromised and exposed members' full names, dates of birth, and social security numbers, took 13 months to disclose.
Key Takeaway: Thirteen months between a MOVEit breach and its disclosure means personal data like Social Security numbers sat exposed long after the incident - and the Columbus case shows a city's public denial can precede a 3.1-terabyte leak.

Read the original at GreyNoise Blog ↗