Qilin is extorting the clinic with threats to release patients’ personal and clinical information

https://www.security-chu.com/2026/06/el-grupo-de-ransomware-qilin-publico-en.html

#databreach #Chile #cl #ransomware #health #Healthcare

California Back & Pain Specialists exposed 133GB of patient PHI on a public server (3,400+ driver’s licenses + full medical records).

After responsible disclosure, AWS took it offline. Company remains silent.

#DataBreach #CyberSecurity #HIPAA #ResponsibleDisclosure #Healthcare

Full report

https://write-ups.security-chu.com/2026/06/California-Back-Pain-Specialists-with-data-breach.html

@PogoWasRight

Sometimes I’ve found myself banging my head against the keyboard trying to contact companies to help them fix their misconfigurations and exposed servers.

After several frustrating experiences, I decided to create my own clear and structured Responsible Disclosure methodology.

Today I’m sharing it with you 👇

This flow represents how I handle vulnerabilities — always prioritizing ethical contact, escalation when necessary, and only publishing write-ups once the issue is fixed.

Opinions and constructive feedback are more than welcome. Have you faced similar situations? What’s your approach?

https://write-ups.security-chu.com/p/my-methodology.html

#ResponsibleDisclosure #Cybersecurity #SecurityResearch

INSDUBAI: Motor insurance policies, data of insured persons was exposed on an unprotected server.

This report details a misconfiguration in a publicly exposed server containing sensitive files belonging to policyholders in the United Arab Emirates.

After responsible disclosure to the affected entities and the UAE Cybersecurity Center, the server was taken offline, thereby securing the policyholders’ data.

No response was received from the involved parties; the server was simply closed.

https://write-ups.security-chu.com/2026/05/insdubai-data-breach-incident.html

#cybersecurity #databreach #UAE

I've compiled a complete index of my write-ups documenting misconfigurations and accidental data exposures across multiple countries.

Covering organizations in Chile, UAE, China, Finland, New Zealand, USA, Vietnam, Sri Lanka, and more.

Over 20 public reports of unprotected servers, open buckets, and exposed backups.

Full index → https://write-ups.security-chu.com/p/indexes.html

#CyberSecurity #InfoSec #DataBreach #Misconfiguration