Ampath Confirms Cyberattack, Disputes 80M Patient Claim
Ampath confirmed a 2 October cyberattack exposed patient admin data. The 80M figure counts rows, not people, but the leaked fields still arm impersonators.
Areas of Focus
Email InfrastructureSMTP & MTA ArchitectureSPF, DKIM, DMARC & SRSEmail Privacy & SecurityCredential Stuffing PreventionSoftware Engineering
Articles by Ahsan Luqman
271 articlesBookoff Confirms Breach Hit 6.38 Million People
Bookoff's second disclosure turns 'may have leaked' into confirmed: 6,427,735 records sent out, covering 6,383,279 people, 212,371 already quit.
You Probably Do Not Need a Second Email Address at All
A second inbox sounds like organisation. In practice it is a second login, a second app and a second thing to secure. Aliases give the separation without it.
Forwarding moves mail, but aliases control who reaches you
Forwarding moves mail from A to B. An alias gives each site its own address, with controls for pause, reply and leaks. The difference is control.
RideOn Express Warns 6.5 Million Records May Be Exposed
RideOn Express says up to 6.5 million delivery records may have leaked, with no confirmed exfiltration yet. The unconfirmed part is not a reason to wait.
Arcadia Data Breach: Second Wave Adds About 343,000 Records
Second-wave disclosures add about 343,000 registrations from 17 more places. The vendor still has no consolidated total, and scam mail is already arriving.
Find Every Account Linked to Your Email in One Audit
No single tool lists every account tied to your email. Audit inbox, saved passwords, connected apps and breach data, then give each signup its own alias.
JR Tokai Says 15,000 Shopping Records May Have Leaked
JR Tokai says about 15,000 shopping records may have leaked via IDC Frontier's cloud. The file pairs emails with home addresses and order contents.
KFCC Breach Exposes About 400 Customers' Account Details
KFCC confirmed a leak hitting about 400 insurance customers. The file holds account numbers, balances and encrypted ID numbers, enough to impersonate your bank.
Email spoofing works because the From line is never checked
SPF, DKIM and DMARC each check a different part of a message, and none of them checks the name you see. Here is what each one proves, and what it leaves open.