No need to hack when it’s leaking: Dalbir Singh & Associates law firm edition

Source: DataBreaches.net  ·  Category: Ransomware & Breach


Dalbir Singh & Associates (NY immigration law firm) exposed misconfigured Amazon S3 bucket containing sensitive client data; firm ignored responsible disclosure warnings and re-exposed data after remediation. Extortion attempts underway. Client notification obligations likely triggered under NY GBL §668 and NYDFS; regulatory reporting to NY AG recommended.

→ Read the full article

Read more