Adobe Fined $1M in Multistate Suit Over 2013 Breach; No Jail for Spamhaus Attacker
Summary: Adobe agreed to pay $1 million to settle a lawsuit brought by 15 state attorneys general over its 2013 breach, which exposed payment records on approximately 38 million people and included source code for Acrobat, Reader, Photoshop and ColdFusion. In a separate case, a Dutch court sentenced Sven Olaf Kamphuis to 240 days for coordinating the 2013 DDoS attack on Spamhaus but suspended the remaining 185 days after counting 55 days served awaiting extradition, so he avoids jail.
Bottom line: The $1 million settlement works out to about $1.80 per victim across the 15 participating states, against a breach that touched 38 million people and Adobe's $1.4 billion quarterly earnings - a ratio that tells you how little a large-scale data exposure has cost a company of that size.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026