Latest Cyber attack News | Top Cyber attack News Headlines Today | Today India news | Breaking Cyber attack News Today | English Cyber attack News Headlines - TheDailyGuardian

M&S Confirms Customer Data Stolen in Cyber Attack

May 13, 2025, 8:46 pm

Marks & Spencer (M&S) has confirmed that personal customer information was among the items stolen in the recent cyber attack, and that this may include telephone numbers, home addresses and dates of birth.

Online Purchase History Compromised, But No Card Details Affected

The High Street retailer said the personal details stolen may also include online purchasing histories, but said the data theft did not involve usable payment or card details, or account passwords.

M&S was targeted by the Cyber attack three weeks ago and is still trying to get services back to normal, with online orders still suspended.

Password Resets for Customer Accounts

The retailer added customers would be asked to reset account passwords “for extra peace of mind”.

M&S boss Stuart Machin told customers the firm was writing to them to tell them that “regrettably, some personal customer details have been stolen”.

“There is no evidence that the data has been passed on,” he added.

But it is believed the hackers may yet pass on or sell on the stolen data as part of the efforts to blackmail M&S, which is still a threat of identity theft.

Number of Affected Customers Unknown

The store has not said how many of its clients had their information taken, but added that it had written to all users of its website to tell them, reported the incident to the appropriate authorities and was in contact with cyber security specialists to keep any developments under review.

Based on its final full-year results, the firm had around 9.4 million active internet customers in the year ended 30 March.

Mr Machin added M&S was “working around the clock to get things back to normal” as soon as possible.

What Has Been Stolen?

M&S said the contact details stolen may include:

Name
Date of birth
Telephone number
Home address
Household information
Email address
Online order history

The retailer also said any card details stolen would not be usable because it does not store full card payment details on its systems.

What Should You Do?

M&S has stated that people do not need to do anything, but has also stated:

Users will be asked to reset their password for their online account
Customers should be careful as they “might receive emails, calls or texts purporting to be from M&S when they are not”

You will never be contacted by us and asked for personal account details such as usernames or passwords.

Experts Urge Precaution After Breach

Lisa Barber, Which?’s tech editor, said that it was worrying that the criminals had obtained access to the information that was potentially useful for identity fraud.

“It’s always best to change your password as soon as possible if there has been a security breach and make sure your new password is distinct from any other online accounts,” she said.

Matt Hull, threat intelligence leader at cyber security firm NCC Group, said hackers who have stolen personal data can use it to “craft very convincing scams”.

“If you’re unsure about an email’s authenticity, don’t click any links. Instead, visit the company’s website directly to verify any claims.”

Cyber Attack Began During Easter Weekend on M&S

Issues at M&S started during the Easter weekend when shoppers complained of issues with Click & Collect and contactless payments in stores.

The retailer confirmed it was experiencing a “cyber incident” and although in-store services have returned to normal, its online orders on its website and app have been suspended since 25 April.

There is still no indication of when online orders will return.

Cyber Gang Dragon Force Suspected Behind Attack on M&S

M&S’ revelation that customer information had been hacked as part of the recent cyber attack was inevitable given the nature of the attack.

The attackers behind it, who also recently attacked Co-op and Harrods, employed the DragonForce cyber crime service to conduct the attacks.

DragonForce runs an affiliate cyber crime service on the darknet that anyone can use their malware and website to conduct attacks and extortions.

The gang is reported to employ a double extortion tactic, which involves them stealing a backup of their victim’s information and also scrambling it to render it unusable.

They can subsequently validly demand a ransom for both unscrambling the information and erasing their backup.

But if the hacked individual or company refuses to pay ransom, hackers can in certain instances begin leaking the pilfered data to other cyber hackers, who may seek to conduct additional attacks to get more sensitive information.

Currently, DragonForce’s darknet site has no mention of M&S.

Insider Insight on Retail Response of M&S

Jackie Naghten, a consultant who has advised large retailers such as M&S, Arcadia and Debenhams, said the management structure at M&S would be taking the data breach “very seriously”, but cautioned that contemporary logistics in retail were “massively complex”.

“I think they have been keeping their powder dry. If they have nothing good to say then they are not saying anything,” she said.

Ms Naghten reported overall customers were being very supportive and sympathetic to the retailer.

But she said it was probably M&S would have “another week” before it would need to offer details on when business as usual would be resumed.

“It’s costing them absolute fortunes,” she said to the BBC. M&S shares have fallen around 12% in the last month.

India Rescues 549 Citizens from Cyber Crime Centres in Myanmar-Thailand Border

March 12, 2025, 11:21 am

India has managed to repatriate 549 of its nationals who were rescued from cyber crime dens along the Myanmar-Thailand border. The repatriation, which was done in two flights by military planes, was confirmed by the Ministry of External Affairs (MEA) on Wednesday.

The victims, who originated from states like Andhra Pradesh, Telangana, Maharashtra, Gujarat, Punjab, and Uttar Pradesh, were misled with false assurances of employment in the IT sector. They were taken to Chinese criminal syndicate-operated cyber crime centres in Myanmar’s lawless border areas, which are outside the control of the country’s military junta.

Crackdown on Cyber Crime Centres Leads to Rescue

The majority of the trafficked Indians were released along with nationals of other South and Southeast Asian nations in the latest crackdown on scam activities along the Myanmar-Thailand border. The authorities moved them from Myanmar’s Myawaddy district to Mae Sot in Thailand, where they were kept temporarily in detention centers. The Indian Air Force (IAF) then transported them back home in a C-17 heavy lift aircraft on Monday and Tuesday.

MEA spokesperson Randhir Jaiswal posted the update on social media, saying, “Government of India facilitated safe repatriation of 266 Indians [on Tuesday] on an IAF aircraft, who were released from cyber crime centres in South East Asia. 283 Indians were repatriated similarly on Monday.”

Indian Embassies Work for Safe Return

The Indian missions in Thailand and Myanmar collaborated with the local authorities to get the trafficked people released and brought back home. On Monday, the MEA again asserted that the government has been making constant efforts to rescue Indians cheated by false job promises in Southeast Asia.

“These individuals were then compelled to indulge in cyber crime and commit other forms of fraud in scam centers that operate in areas along the Myanmar-Thailand border,” the MEA said.

Warning Against Job Scams in Southeast Asia

The Indian government continues to advise citizens against becoming victims of such employment scams. The MEA asked Indian nationals to check foreign employers’ credentials through Indian missions and background check recruiting agents and companies before considering job offers in the region.

Similar Rescues in Southeast Asia

India has been busy dismantling human trafficking networks of its citizens. In January, the Indian embassy in Laos freed 67 Indian men from cyber scam centres within a special economic zone. With this, Indians rescued from such scams in Laos alone totaled 924.

In the last three years, hundreds of Indian citizens have been drawn into such scams in Cambodia, Laos, Myanmar, and Thailand.

The “Pig Butchering” Scam – A Global Menace

Chinese criminal syndicates, therefore, have been blamed for what is commonly referred to as the “pig butchering” scam. The internet scam happens when scammers gain the trust of victims first before they persuade them to invest in fraudulent platforms, resulting in money losses. The name of the scam is an indication of fattening a pig before slaughtering it—representing how cons deceive victims prior to stealing their cash.

The Indian government continues its crackdown on such scams and urges citizens to stay vigilant when seeking jobs abroad.

Japan Airlines Confirms Cyber Attack, Warns of Potential Flight Disruptions

December 26, 2024, 7:15 am

Japan Airlines confirmed on Thursday that it had been targeted by a cyber attack, which could affect its flight operations. A company spokeswoman told AFP, “We can confirm that a cyber attack has occurred and we are currently addressing the situation. This is likely to impact flight operations in the near future.” Further details about the attack were not immediately provided.

DO NOT Type These 6 Words In Google Search Or Else…

November 11, 2024, 6:20 pm

According to the New York Post, a strange cyberattack has led internet users to search for “Are Bengal cats legal in Australia?”—a seemingly innocent query that could expose them to data theft. Cybersecurity firm SOPHOS recently issued a warning on its website, advising users against searching for this phrase. The alert highlighted that people who search for this question and then click on certain top search results might end up compromising their personal data.

SOPHOS explained, “Victims are often lured into clicking on malicious adware or links disguised as legitimate content, or in this case, a standard Google search.” The security firm cautioned that Australian users are particularly at risk, as only links containing “Australia” in the phrase appear dangerous. Users who click on these links risk exposing sensitive information, such as banking details, or losing access to their devices via a malware program known as Gootloader.

Though the topic of Bengal cats might seem harmless, SOPHOS emphasized that it’s actually an alarming indicator of evolving cybersecurity threats, as even benign search terms can be exploited by hackers.

This tactic, known as “SEO poisoning,” is increasingly used by cybercriminals to push their harmful sites higher in search results, as described by the Daily Mail as an “insidious technique.” SOPHOS recommends that anyone suspecting exposure to this attack should change their passwords immediately.

Ranveer Allahbadia’s YouTube Channel: Did BeerBiceps Videos Get Retrieved?

September 27, 2024, 1:47 pm

In a dramatic cyberattack, both YouTube channels of popular Indian YouTuber Ranveer Allahbadia, known as BeerBiceps, were hacked and had all their content deleted. The hackers replaced the videos on both channels with older streams featuring Elon Musk and Donald Trump. Following the attack, YouTube temporarily removed both channels, displaying an error message to users.

The main channel was renamed to “@Elon.trump.tesla_live2024”, while his personal channel was changed to “@Tesla.event.trump_2024” by the hackers. Both channels are now restored, though some technical issues persist, as the “Home” section still shows the message, “This channel doesn’t have any content,” despite videos being accessible through other sections.

Quick Restoration After Cyberattack

Just hours after the hacking incident, both of Ranveer’s YouTube channels were restored, and the original content is now visible to his subscribers. Despite the swift recovery, some technical glitches remain. YouTube has yet to comment on the full resolution of the issue, but Ranveer’s content is accessible again.

What Did Ranveer Allahbadia Say?

After the cyberattack, Allahbadia, who had just returned to Mumbai, addressed the situation humorously. He posted on social media with a picture of vegan burgers, saying, “Celebrating my two main channels being hacked with my favourite food. Vegan burgers. Death of BeerBiceps met with Death of diet.” He also shared a selfie with an eye mask, reflecting on the incident with the caption, “Is this the end of my YouTube career? Was nice knowing you all.”

Ranveer Allahbadia’s YouTube Journey

Ranveer Allahbadia, also known as BeerBiceps, began his journey in digital content creation at the age of 22. His initial focus was on fitness and cooking, documenting his personal routine and experiences. Over time, his YouTube presence grew, and he expanded his content to include men’s fashion, grooming, personal development, and mental health.

Early Life and Education

Born on June 2, 1993, in Mumbai, Maharashtra, Ranveer attended Dhirubhai Ambani International School. He later earned a Bachelor’s degree in Engineering (B.E.) from Dwarkadas J. Sanghvi College of Engineering, graduating in 2015. Post-graduation, he launched his YouTube channel, BeerBiceps, which quickly became a popular platform.

Monk Entertainment and Expanding Success

In 2018, Ranveer co-founded Monk Entertainment, a talent management and content creation agency. The company has worked with prominent brands like Netflix, Google, and Pepsico, helping these brands create successful digital campaigns. By 2019, Ranveer launched The Ranveer Show, a podcast featuring interviews with global personalities, covering a broad spectrum of topics such as money, fame, spirituality, and finance.

In 2021, Ranveer became the first independent creator from India to partner with Spotify, where his show quickly became one of the platform’s top podcasts.

A Digital Pioneer in India’s YouTube Scene

With seven YouTube channels and nearly 12 million subscribers, Ranveer Allahbadia is a pioneer in the Indian digital space. His success in both content creation and entrepreneurship has made him a leading figure in the world of social media and online content.

Though the hacking incident posed a temporary setback, his quick recovery demonstrates his resilience in the face of challenges, and his fans can continue enjoying the content that has made him one of India’s most popular digital content creator.

US Accuses Iran Of Cyber Attacks On 2024 Presidential Campaigns

August 20, 2024, 1:06 pm

United States has accused Iran of launching cyber-attacks targeting the presidential campaigns of Kamala Harris and Donald Trump, as well as attempting to influence US voters to deepen political divisions. This assessment, made by the FBI and other federal agencies, marks the first time the US government has publicly attributed responsibility amid rising concerns over foreign interference in the upcoming election.

Iranian Cyber Operations Target Campaigns

According to a joint statement from the FBI, the Office of the Director of National Intelligence (ODNI), and the Cybersecurity and Infrastructure Security Agency (CISA), Iranian activities have become increasingly aggressive during this election cycle. The agencies reported that Iran’s cyber operations specifically targeted both Harris and Trump’s campaigns. “This includes the recently reported activities to compromise former President Trump’s campaign, which the intelligence community attributes to Iran,” the statement read.

Earlier this month, the Trump campaign accused Iran of hacking one of its websites, with Trump downplaying the incident by stating that Iran only accessed publicly available information. The US agencies also noted that Iranian operatives used social engineering and other techniques to gain access to individuals with direct ties to both campaigns.

Iran Denies Allegations

In response to the US accusations, Iran’s mission to the United Nations dismissed the claims as “unsubstantiated and devoid of any standing,” and challenged Washington to provide evidence. The statement from Iran reiterated that the country has neither the intent nor the motive to interfere in the US presidential election.

Election Security and Past Precedents

Google recently reported that hackers linked to Iran’s Islamic Revolutionary Guard Corps, identified as APT42, have been targeting high-profile individuals and organizations in the US and Israel, including political campaigns. This comes amid rising tensions between Washington and Tehran, especially with the ongoing conflict in Gaza.

The current allegations echo concerns from the 2016 election, when Russian hackers were blamed for breaching Democratic National Committee emails, which exposed internal communications, including those related to candidate Hillary Clinton.

With the US election scheduled for November 5, the ongoing cyber threats and foreign interference remain a critical concern for national security, although the US agencies have not provided specific details on how they concluded Iran’s involvement or what information may have been compromised.

FBI Alerts Kamala Harris’s Team Over Cybersecurity Threats

August 14, 2024, 2:02 pm

Kamala Harris’s presidential campaign has been informed by the FBI of a foreign influence attempt targeting its operations, heightening concerns over foreign interference in US elections. The alert comes shortly after Donald Trump’s campaign reported a suspected Iranian hacking attempt via email phishing. The FBI has confirmed it is investigating these foreign hacking efforts against both campaigns.

Cybersecurity Measures and Historical Context

Harris’s campaign asserts that its cybersecurity measures have thwarted any successful breaches. This situation echoes the 2016 election, when Russia’s hacking of Democratic party emails aimed to destabilize Hillary Clinton’s campaign and support Trump. The FBI is also probing hacking attempts related to the Biden-Harris campaign before Joe Biden’s withdrawal, which led to Harris receiving the Democratic nomination.

Phishing Attempts and Broader Implications

Reports indicate that Biden-Harris staff received spear phishing emails intended to gain unauthorized access. The Trump campaign also reported a hack, with stolen files surfacing in recent news, although the campaign did not officially notify the FBI. Roger Stone, a Trump ally, confirmed his personal email accounts were compromised and is cooperating with authorities.

International Tensions and Speculations

Amidst these security concerns, US intelligence suggests Iran is trying to undermine Trump’s re-election efforts, a claim Iran denies. The situation is further complicated by speculations that Iran might retaliate against Israel following the assassination of Hamas leader Ismail Haniyeh in Tehran.

Donald Trump’s Campaign Breached By Hackers, Blames ‘Hostile’ Foreign Sources

August 11, 2024, 9:16 am

The presidential campaign of former President Donald Trump announced on Saturday that it had fallen victim to a cyberattack, alleging that Iranian actors were involved in the breach and subsequent distribution of sensitive internal documents. However, the campaign did not provide direct evidence linking the incident to Iran.

This announcement follows a report by Microsoft, released just a day earlier, which highlighted foreign attempts to interfere in the upcoming 2024 U.S. presidential election. According to the report, a spear-phishing email was sent in June by an Iranian military intelligence unit to a high-ranking official within a U.S. presidential campaign, using a compromised email account belonging to a former senior advisor.

Donald Trump campaign spokesperson Steven Cheung attributed the breach to “foreign sources hostile to the United States” but refrained from offering specifics. The National Security Council responded by stating that it takes any reports of foreign interference “extremely seriously” and condemns any attempts to undermine U.S. democratic institutions.The issue has been referred to the Justice Department.

Iran’s mission to the United Nations denied any involvement in the hack, dismissing the allegations as baseless. Despite these denials, Iran has been suspected in the past of conducting hacking operations against its adversaries, including threats of retaliation against Donald Trump for the 2020 drone strike that killed Iranian General Qassem Soleimani.

The U.S. Justice Department recently unsealed charges against a Pakistani national with ties to Iran, accused of plotting assassination attempts against U.S. political figures, potentially including Trump. This development has heightened concerns over Iran’s potential involvement in cyber and other forms of interference in the 2024 election.

The breach was first reported by Politico, which revealed that it had begun receiving emails on July 22 from an anonymous source claiming to possess internal campaign documents. Among the leaked materials was a research dossier on Trump’s running mate, Ohio Senator JD Vance, dated February 23, months before Vance was officially selected.

Cheung condemned the hack, stating that the documents were “obtained illegally” and intended to disrupt the 2024 election. He warned that any media outlets publishing the stolen materials would be aiding America’s enemies.

Microsoft’s report noted that while Russian operations initially led foreign influence efforts, Iranian cyber activities had recently escalated. The report emphasized that Iran’s involvement in U.S. election interference has become a consistent feature in recent election cycles, with operations typically intensifying later in the campaign season.

As the 2024 election approaches, concerns over foreign interference are expected to grow, with both the Trump campaign and security experts closely monitoring developments.

Taylor Swift’s Eras Tour Targeted In Major Cyber-Attack By ShinyHunters

July 6, 2024, 5:23 pm

Taylor Swift’s Eras tour recently faced a cyber-attack where hackers associated with the group ShinyHunters claimed they had acquired barcode data for hundreds of thousands of tickets. They demanded a substantial ransom from Ticketmaster, threatening to release the data if their demands were not met.

The compromised information included ticket specifics from Swift’s concerts in Indianapolis, Miami, and New Orleans. The hackers also said they had access to 30 million more barcodes for other big events. However, Ticketmaster and its parent company Live Nation refused to engage in any ransom talks. They assured the public that their ticketing system uses dynamic barcodes that change frequently, so the leaked data wouldn’t work for getting into shows.

Cybersecurity experts have stated that the stolen ticket data won’t allow unauthorized access to events like Taylor Swift’s tour, thanks to Ticketmaster’s advanced security measures. Don Smith from Secureworks explained that creating a working barcode from the leaked data would be extremely difficult for accessing large events.

This incident is part of a growing trend of cyberattacks and ransomware, which have caused significant financial losses across many industries. In 2023 alone, victims reportedly paid $1.1 billion in ransoms. ShinyHunters, known for targeting big companies like Santander and Microsoft, continues to pursue financial gains through such attacks.

Earlier this year, ShinyHunters reportedly hacked into a third-party contractor to get hold of Ticketmaster’s vast customer database, affecting about 560 million people. This breach worsened Live Nation’s existing PR problems, amid accusations of monopolistic behavior in ticket sales.

Taylor Swift’s Eras tour has also faced cybersecurity threats before, such as a breach in Australia that compromised Ticketek accounts, causing issues with ticket reselling. Despite these challenges, measures to reduce risks for fans have included setting up special help desks at concert venues.

The FBI and US Department of Justice have taken action against ShinyHunters by shutting down forums where they posted ransom threats and hacked data. Despite these efforts, the group continues to operate, showing ongoing challenges in fighting cyber threats against large companies and public institutions.

While the recent hack targeted Ticketmaster and Live Nation, the stolen data’s ability to gain unauthorized access to events like Taylor Swift’s tour seems limited due to strong security measures. Nonetheless, the incident highlights the persistent danger cybercriminals pose to organizations handling sensitive customer information, emphasizing the need for constant vigilance and investment in cybersecurity.

Iran, Russia Cyber Attacks Threaten US Water Systems: EPA Warns

May 21, 2024, 10:06 am

The Environmental Protection Agency (EPA) issued a stark warning on Monday, highlighting the escalating cyber attacks targeting water utilities across the United States. The EPA urged immediate action to safeguard the nation’s drinking water, emphasizing the critical need for both large and small water systems to enhance their cybersecurity measures. The agency found that about 70% of water utilities inspected in the past year were in violation of standards aimed at preventing breaches and intrusions.

Recent cyber attacks, some affiliated with geopolitical rivals such as Russia and Iran, have targeted smaller communities, raising concerns about the vulnerability of essential infrastructure. An Iranian-linked group targeted a Pennsylvania town’s water provider, forcing it to switch to manual operations.

The EPA’s enforcement alert underscored the seriousness of the threats, indicating continued inspections and potential penalties for non-compliance. Despite challenges such as fragmented governance and limited resources, the EPA emphasized the importance of developing robust cybersecurity plans and adopting best practices.

In response to the growing risks, the Biden administration has prioritized protecting critical infrastructure, including drinking water systems, with executive orders to bolster defenses and calls for states to develop comprehensive cybersecurity strategies.

Industry experts advocate for collaborative approaches to address cybersecurity vulnerabilities, suggesting the establishment of new organizations to develop and enforce cybersecurity policies in partnership with the EPA.

As the nation confronts mounting cyber threats, ensuring the security of water utilities remains paramount in safeguarding public health and national security.