The threat actor who claimed to breach Oracle Cloud shared the following URL as proof of the breach showing what appears to be a file containing their email address uploaded to Oracle's servers:

https://web.archive.org/web/20250301161517/http:/login.us2.oraclecloud.com/oamfed/x.txt?x

BleepingComputer contacted Oracle with further questions about how the threat actor was able to do so.

Last week, the same researchers shared a sample of this data with us that contained BleepingComputer forum accounts.

All of these credentials were stolen via information-stealing malware based on the format (url:name:password) of the data.

Threat actors have been conducting credential stuffing attacks on Roku for the past few months using Open Bullet 2/SilverBullet configs that rotate through proxies to bypass brute force detections.

The stolen Roku accounts are then sold for as little as 50¢ each on stolen account marketplaces that provide instructions on how to hijack them to illegally purchase hardware using the stored credit card.

After the publishing of our story, Clop ransomware told BleepingComputer they deleted Brightline's data, not realizing what business they were in.

Article updated:

The stolen information is already up for sale on a hacking forum, with the threat actor (IntelBroker) claiming it contains the information of at least 170,000 individuals.

A sample shows it includes names, dates of birth, addresses, emails, phone numbers, SSNs, and much more.

The personal information of House members and their staff was stolen from the servers of DC Health Link, the House health care plan admin.

Impacted U.S. House members were notified of the breach via email by House CAO Catherine L. Szpindor, as first reported by
Henry Rodgers (https://twitter.com/henryrodgersdc)

In the private advisory, LastPass asked business customers to keep the information "confidential", but it was ultimately leaked to the public.

To prevent the advisories from being indexed by search engines, these advanced disclosures contained the noindex HTML tags.