Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials

A hacking group that recently doxed hundreds of government officials, including from the Department of Homeland Security (DHS) and Immigration and Customs Enforcement (ICE), has now built dossiers on tens of thousands of U.S. government officials, including NSA employees, a member of the group told 404 Media. The member said the group did this by…

Read More

The Discord Hack is Every Users’ Worst Nightmare

A catastrophic breach has impacted Discord user data including selfies and identity documents uploaded as part of the app’s verification process, email addresses, phone numbers, approximately where the user lives, and much more.  The hack, carried out by a group that is attempting to extort Discord, shows in stark terms the risk of tech companies…

Read More

Landlords Demand Tenants’ Workplace Logins to Scrape Their Paystubs

Landlords are using a service that logs into a potential renter’s employer systems and scrapes their paystubs and other information en masse, potentially in violation of U.S. hacking laws, according to screenshots of the tool shared with 404 Media. The screenshots highlight the intrusive methods some landlords use when screening potential tenants, taking information they…

Read More

Steam Hosted Malware Game that Stole $32,000 from a Cancer Patient Live on Stream

A cancer patient lost $32,000 in crypto after installing a Steam game on his computer containing malware that drained one of his crypto wallets. Raivo Plavnieks is a 26 year old self-described “crypto degen” from Latvia who streams on the site Pump.fun under the name Rastaland. After a seven hour stream on September 20, Plavnieks…

Read More

Hackers Threaten to Submit Artists’ Data to AI Models If Art Site Doesn’t Pay Up

An old school ransomware attack has a new twist: threatening to feed data to AI companies so it’ll be added to LLM datasets. Artists&Clients is a website that connects independent artists with interested clients. Around August 30, a message appeared on Artists&Clients attributed to the ransomware group LunaLock. “We have breached the website Artists&Clients to…

Read More

ICE Adds Random Person to Group Chat, Exposes Details of Manhunt in Real-Time

Members of a law enforcement group chat including Immigration and Customs Enforcement (ICE) and other agencies inadvertently added a random person to the group called “Mass Text” where they exposed highly sensitive information about an active search for a convicted attempted murderer seemingly marked for deportation, 404 Media has learned.  The texts included an unredacted…

Read More

Feds Used Local Cop’s Password to Do Immigration Surveillance With Flock Cameras

A Drug Enforcement Administration agent used a local police officer’s password to the Flock automated license plate reader system to search for someone suspected of an “immigration violation.” That DEA agent did this “without [the local police officer’s] knowledge,” and the password to the Flock account, which belonged to the Palos Heights PD, has since…

Read More

Tea App Turns Off DMs After Exposing Messages About Abortions, Cheating

Tea, the viral women’s dating safety app, has turned off direct messages after 404 Media revealed that a vulnerability allowed unauthorized parties to gain access to users’ direct messages, including many in which women discussed their abortions, cheating partners, and phone numbers they sent to one another. Kasra Rahjerdi, the independent security researcher who first…

Read More

A Second Tea Breach Reveals Users’ DMs About Abortions and Cheating

A second, major security issue with women’s dating safety app Tea has exposed much more user data than the first breach we first reported last week, with an independent security researcher now finding it was possible for hackers to access messages between users discussing abortions, cheating partners, and phone numbers they sent to one another….

Read More