Student Loan Breach Exposes 2.5M Records
2026-06-01T19:23:31Z•e70c1d3f676959744e6d6d24697b258b7d839f3a7811a93c72262ff58f5c93d2
0ktapusAPT-TA423CISA-warningChromeContiLockBitMFA-spoofingPAN-OSPaloAltoScanBoxWebKitcredential-theftdata-breachiOSmacOSphishingransomwarestudent-loansurveillance-camerastravel-scamunpatched-CVEwatering-holezero-day
What happened
A clustered set of August 2022 security reports: a 2.5M-record student loan data breach; a watering‑hole campaign (likely APT TA423) deploying ScanBox JavaScript reconnaissance; a widespread phishing campaign by ‘0ktapus’ spoofing MFA that impacted 130 firms; rising ransomware activity led by LockBit and Conti offshoots; thousands of Chinese surveillance cameras exposed due to an 11‑month‑old unpatched critical CVE and being traded for access; a Twitter ex‑security chief whistleblower alleging broad security/privacy lapses; a Palo Alto PAN‑OS firewall vulnerability under active attack prompted
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- threatpost
- Record identifier
- e70c1d3f676959744e6d6d24697b258b7d839f3a7811a93c72262ff58f5c93d2
- Enrichment time
- 2026-06-01T19:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.