NSW Police cybercrime detectives are investigating an alleged breach of an isolated NSW Health server after a hacker claimed to have taken about 100,000 sensitive documents, or roughly 70 gigabytes of data. The claim appeared on a dark-web forum under the name “bytetobreach” and was shared by cyber threat intelligence firm Hackmanac, which said it had not been verified. The hacker claimed the documents dated from 2020 onwards and were obtained through a misconfigured subdomain. They said an accidental server crash prevented a wider intrusion and that they had notified Australia’s computer emergency response team; they did not demand a ransom.
Cyber Security NSW describes the incident as limited and says no patient data has been affected or is currently at risk. Health Minister Ryan Park said authorities had been aware of the matter for several days but delayed public comment while police assessed it. He said investigators had identified no risk to clinical services, while stressing the inquiry remains active and circumstances could change. The incident highlights the continuing challenge of protecting public systems from evolving cyberattacks. Park said the government would keep reviewing and strengthening its cybersecurity controls, despite having established protections in place.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A Postman user says an update began routing POST requests through Postman’s servers before forwarding them to the intended destination. They warn against using the client for sensitive requests without clear consent to this proxying. (news.ycombinator.com)
The Capytistas, an activist group, plans to publish home addresses and dossiers about Elon Musk, Tesla leaders, and hundreds of billionaire-linked people. The group says the campaign will expose how extreme wealth shapes political power, while raising safety and privacy concerns. (wired.com)
A cyberattack reprogrammed equipment at a French blood-storage facility to heat samples to 110°C instead of keeping them at -30°C. Staff caught the tampering in time, and France’s health ministry reported no operational impact or damaged blood. (twitter.com)
A free 2.5-hour course teaches ethical penetration testing in an isolated Capture The Flag lab. It covers Linux, network scanning, web discovery and exploitation, and security automation with Bash and Python. (freecodecamp.org)
Kairos is an open-source platform for real-time event intelligence and fraud and risk decisioning. It focuses on analyzing financial behavior to support risk decisions. (github.com)
The DOJ warned that a data breach involving the FBI likely also affected Justice Department employees. The warning indicates the breach may extend beyond the FBI. (politico.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.