Student Loan Breach Exposes 2.5M Records
2026-05-01T07:23:29Z•68bb0d09f0dca7f3eaf0362965b0f31262be805a4c25ad39b99f7fa07045733d
0ktapusAPT TA423CISA warningChromeContiLockBitMFA spoofingPalo Alto PAN-OSScanBoxWebKitactive exploitationbreachcredential theftdata breachiOSmacOSphishingransomwaresecurity newssurveillance camerasthreatfeedtravel scamsunpatched vulnerabilitywatering holezero-day
What happened
Threatpost RSS roundup (Aug 18–31, 2022) covering multiple high-impact incidents: a 2.5M‑record student loan breach; a watering‑hole campaign delivering the ScanBox JS recon tool (attributed to APT TA423); a large phishing campaign by ‘0ktapus’ spoofing MFA that hit ~130 firms; a surge in ransomware activity led by LockBit and Conti offshoots; widespread sale of access to Chinese surveillance cameras that remain unpatched to an 11‑month‑old vulnerability; a Twitter security whistleblower complaint; a CISA advisory warning of active exploitation against Palo Alto PAN‑OS firewall bugs; phishing/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- threatpost
- Record identifier
- 68bb0d09f0dca7f3eaf0362965b0f31262be805a4c25ad39b99f7fa07045733d
- Enrichment time
- 2026-05-01T07:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.