Wednesday, January 7, 2026

HIPPAA Journal lists largest healthcare data breaches of 2025

 US Department of Health and Human Services Office for Civil Rights

15 Large breaches    The top 5:
Aflac 22,650,000
Conduent Business Services LLC  10,515,949
Yale New Haven Health System  5,556,702
Episource LLC 5,414866
Blue Shield of California 4,700,000

Figures on the number of breaches and the companies reporting so far are not accurate nor complete due to the government shutdown and most breaches were breaches of business associates.
 

Monday, January 5, 2026

Aflac data breach

 Aflac reported a data breach of 22 million people's personal and health information. Several other health insurance companies also reported breaches at the same time in June.
Stolen data included social security numbers and government issued documents.

Kimwolf Botnet

 This relatively new botnet compromises Android based TV boxes, many which ship with default mode which allows remote access!
Two million devices are part of the Kimwolf botnet allowing a great increase in ad fraud and DDoS attacks.
A tool to check your Android based TV or streamer here.
Update: Some Android digital picture frames may be infected before and delivery.
Update: A list of known infected or vulnerable devices:

Here’s a clean, search‑verified list of the Android TV boxes most commonly infected by the Kimwolf botnet, based directly on the sources you pulled.

Kimwolf overwhelmingly targets cheap, no‑name, uncertified Android TV boxes — many of which come pre‑infected or ship with exposed ADB that allows instant compromise.

1. “TV BOX” (generic label)

A huge number of infected devices simply report themselves as “TV BOX”, a catch‑all name used by many unbranded Chinese manufacturers.

2. SuperBOX

Frequently appears in infected device pools.

3. HiDPTAndroid

Another common generic Android TV box name seen in Kimwolf infections.

4. P200

A widely cloned board used in many low‑cost TV boxes.

5. X96Q

One of the most frequently mentioned infected models.

6. XBOX / X‑BOX (not Microsoft Xbox)

A misleading brand name used by several no‑name Android TV box vendors.

7. SMART_TV / SMART TV (generic)

Generic “Smart TV” labeled devices with Android builds.

8. MX10

Another common low‑cost box repeatedly seen in botnet telemetry.



The Guardian warning "Digital wallet fraud: how your bank card can be stolen without it leaving your wallet"

 Guardian Article

Fraudsters use phishing to steal card details, which fund a spending spree using Apple Pay or Google Pay

Use of this technique are on the rise.


Sun City Computer Club Cyber Blog has returned

I will be posting really important news and notifications again now that the Cyber Blog has returned to the Computer Club's web site.