> InfoSec News Nuggets 12/05/2025

Marquis Data Breach Impacts Over 780,000 People Hackers accessed the network of fintech provider Marquis and stole files containing personal and financial data on more than 780,000 individuals, including names, addresses, Social Security numbers, taxpayer IDs, and bank or card details. The intrusion was detected in August 2025, and recent regulator filings show Marquis is now notifying affected individuals and multiple state attorneys general as the scope of the breach has been confirmed.   Freedom Mobile Data Breach: Hackers Steal Customer Info in 2025 Attack Freedom Mobile disclosed that attackers compromised its systems in October 2025 via a subcontractor account and exfiltrated customer data such as names, postal addresses, dates of birth, phone numbers, and account numbers for a limited number of users. The telecom says payment data and passwords were not affected, and it has cut off the malicious access, notified impacted customers, and offered credit monitoring.   700Credit Data Breach Incident – Follow-Up to December 1, 2025 ComplyAuto Alert Compliance firm ComplyAuto reports that 700Credit has confirmed a data breach in which unencrypted dealer customer data, including names, addresses, and Social Security numbers, was copied without authorization between May and October 2025. 700Credit plans to file required federal and state notifications and provide consumer notices and credit monitoring, while dealers are being urged to confirm notification details, obtain lists of affected customers, and update their Safeguards Rule and breach response documentation.   ‘Postmasters have once again been let down’ – Post Office reprimanded over two-month data breach The UK Information Commissioner’s Office issued a formal reprimand to the Post Office after an unredacted legal document about Horizon scandal victims, containing names, home addresses, and professional details for 502 postmasters, was published online for nearly two months in 2024. The regulator found that inadequate controls, unclear publishing processes, and insufficient staff training contributed to the incident and highlighted the case as a warning for organizations to strengthen data governance around document publication.    Europol busts $815M-strong fraud network European authorities dismantled a large cryptocurrency fraud and money laundering network that allegedly laundered more than €700 million through fake investment platforms and related schemes, arresting nine suspects and seizing cash, crypto, and online accounts. The operation, coordinated across multiple countries, targeted both the core fraud operators and the marketing infrastructure behind deceptive social media ads that used deepfake-style impersonations of public figures to lure victims.   FinCEN: Ransomware Incidents and Payments Dropped in 2024 After Law Enforcement Actions According to a new analysis by the U.S. Financial Crimes Enforcement Network, reported ransomware incidents and aggregate payments fell in 2024 compared with 2023, following major law enforcement disruptions of the ALPHV/BlackCat and LockBit ransomware operations. The report, based on Bank Secrecy Act filings, still identifies ransomware as a significant threat and notes that manufacturing, financial services, and healthcare remained among the most targeted sectors, with more than 200 distinct ransomware variants observed. The post InfoSec News Nuggets 12/05/2025 appeared first on AboutDFIR - The Definitive Compendium Project.