New Known Breaches in the Past Week - February 26, 2021

Kroger data breach highlights urgent need to replace legacy, end-of-life tools

Kroger became the latest major company to announce a data breach, acknowledging in a statement that information from some current and former employees as well as customers of Kroger Health and Money Services were impacted by an attack on a third-party file transfer tool from Accellion. By Jonathan Greig I February 24, 2021

Scoop: Sequoia Capital says it was hacked

Sequoia Capital told its investors on Friday that some of their personal and financial information may have been accessed by a third party, after a Sequoia employee's email was successfully phished, Axios has learned. By Kia Kokalitcheva I February 20, 2021

Clubhouse Chats Are Breached, Raising Concerns Over Security

A week after popular audio chatroom app Clubhouse said it was taking steps to ensure user data couldn’t be stolen by malicious hackers or spies, at least one attacker has proven the platform’s live audio can be siphoned. By Jamie Tarabay and Kartikay Mehrotra I February 22, 2021

Clop ransomware gang leaks online what looks like stolen Bombardier blueprints of GlobalEye radar snoop jet

The Clop ransomware gang claims to have stolen documents from aerospace giant Bombardier’s defense division – and has leaked what appears to be a CAD drawing of one of its military aircraft products, raising fears over what else they’ve got. By Gareth Corfield I February 23, 2021

Regulator investigating Cashalo data breach

THE National Privacy Commission (NPC) is investigating a potential data breach involving 3.3 million users of online lending platform Cashalo, a joint venture between JG Summit Holdings subsidiary Express Holdings, Inc. and Hong Kong-based Oriente. By Business World I February 23, 2021