> InfoSec News Nuggets 12/09/2025

Police raid Coupang over massive data breach South Korean police raided Coupang’s headquarters in Seoul after the company disclosed a massive breach that exposed personal information for roughly 33.7 million customers, including names, phone numbers, email addresses, and delivery details. Investigators are seizing internal documents and logs to look for potential security lapses and to trace how the data was accessed and leaked. The incident has drawn national attention because the breach affects a large portion of the country’s population and raises questions about protections for large-scale e-commerce platforms.   Tri‑Century Eye Care Data Breach Impacts 200,000 Individuals A breach at a Pennsylvania‑based eye care provider compromised sensitive patient and employee information including names, dates of birth, social security numbers, medical/health data, insurance and financial data. The attack was claimed by the Pear ransomware group, which reportedly stole over 3 TB of data and published it after the provider refused to pay.   Russian Police Bust Bank‑Account Hacking Gang Using NFCGate‑Based Malware Authorities in Russia dismantled a criminal group accused of using malware built on the open‑source NFCGate framework to steal millions of rubles from bank customers. The crackdown follows investigations into malware‑enabled account takeovers and underscores ongoing abuse of open‑source tools for banking fraud.   Cyber Attacks Exploit New CVE-2025-55182 (“React2Shell”) in Widespread Campaigns At least two advanced threat actor groups began exploiting the newly disclosed React2Shell vulnerability in server‑side components of the React framework within hours of its publication. The rapid exploitation highlights the urgency for organizations running React‑based back ends to patch without delay.   ASUS Confirms Supplier Breach After Everest Ransomware Claims 1 TB Data Theft ASUS acknowledged that a breach at one of its suppliers resulted in the theft of approximately 1 TB of data, allegedly by the Everest ransomware group. The incident illustrates increasing supply‑chain targeting by ransomware actors and raises concerns over downstream impact on hardware, software, or intellectual property.   Freedom Mobile Confirms Data Breach After Ransomware Attack Freedom Mobile, a Canadian telecommunications provider, disclosed that attackers compromised its customer account management platform and exfiltrated personal data including names, addresses, dates of birth, phone numbers, and account details. The breach resulted from a ransomware attack by the group TridentLocker, according to their public claim. The post InfoSec News Nuggets 12/09/2025 appeared first on AboutDFIR - The Definitive Compendium Project.