Student Loan Breach Exposes 2.5M Records
2026-07-21T19:23:32Z•5df4473b03075c8e111f3ecf9b70240bf30e3063c54fb2dfb5898c3c91b1cddc
0ktapusCISA-warningChrome-zero-day','travel-fraud','malicious-links','security-whitContiIoTLockBitMFA‑spoofingPAN-OSPalo-AltoScanBoxTA423WebKitaccess-for-saleactive-exploitdata-breachiOS-zero-daykernel-exploitkeyloggermacOS-zero-dayphishingransomwarestudent-loan-breachsurveillance-camerasunpatched-vulnerabilitywatering-hole
What happened
Threatpost feed (Aug 2022) reports multiple high-impact incidents: a 2.5M-record student-loan data breach; a watering‑hole campaign (attributed to APT TA423) delivering the ScanBox JavaScript reconnaissance/keylogging tool; a large phishing campaign by '0ktapus' spoofing multi-factor authentication and impacting 130+ firms; rising ransomware activity led by LockBit and Conti offshoots; widespread sale of access to Chinese surveillance cameras due to an unpatched critical CVE; a Palo Alto PAN-OS firewall vulnerability under active exploit prompting a CISA warning; travel-reservation link/phish/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- threatpost
- Record identifier
- 5df4473b03075c8e111f3ecf9b70240bf30e3063c54fb2dfb5898c3c91b1cddc
- Enrichment time
- 2026-07-21T19:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.