#identity-theft

A social engineering attack on Betterment compromised emails, phone numbers, addresses, and other personal data for 1.4 million users, using impersonation to bypass internal systems.

Source: The Register | Have I Been Pwned

Canada’s investment regulator confirmed a phishing breach that exposed sensitive personal and financial data belonging to hundreds of thousands of investors nationwide.

Source: BleepingComputer | CIRO

A social engineering attack tied to ShinyHunters exposed sensitive personal data of nearly six million Carnival customers, including addresses, phone numbers, and identity records.

Source: The Register

ConsentFix v3 automates Azure OAuth phishing by stealing authorisation codes through phishing pages and converting them into access tokens for Microsoft services. Attackers deploy cloud-hosted infrastructure and automation tools to capture and reuse tokens in real time across compromised environments.

Source: BleepingComputer

Attackers are impersonating ADP with polished phishing emails that funnel employees to fake portals, quietly siphoning login credentials and sensitive identity data tied to payroll and benefits access.

Source: Cofense Phishing Defense Center

In the heart of the wizarding world, amidst the hallowed halls of Gringotts and the bustling alleys of Diagon, a new menace lurked—identity theft. Witches and wizards found their vaults plundered, not by goblins or dark wizards, but through insidious means that bypassed even the most potent enchantments. The Daily Prophet reported a staggering 30% increase in such fraudulent activities over the…