Ma'lumotlar Buzilishi
Florida Talabalar Yordam Veb-sayti Xakerlik Hujumi 4,9 Million Odamning Ma'lumotlarini Xavf Ostiga Qo'ydi
Florida Ta'lim Departamenti (FLDOE) o'zining talabalar moliyaviy yordam veb-sayti xakerlar tomonidan buzilganini aytmoqda, bu taxminan 4,9 million odamning shaxsiy ma'lumotlari ochiq qolishi mumkin.
Departament 19-oktabrda hujumni aniqladi. U tahdidni aniqlagandan so'ng o'zining hodisaga javob berish tartiblarini ishga tushirganini va o'shandan beri buzilishni to'xtatganini aytadi.
"Hozirgi vaqtda, biz hodisa Florida Talabalar Moliyaviy Yordam veb-sayti (FloridaStudentFinancialAidSG.org) bilan cheklangan deb hisoblaymiz va taxminan 4,9 million shaxsga ta'sir qilishi mumkin," deb aytdi departament.
Veb-sayt Florida davlat tomonidan moliyalashtiriladigan stipendiya va grant dasturlari uchun onlayn markazdir. FLDOE shtatda moliyaviy yordam uchun ariza bergan har kim ta'sirlanganlar orasida bo'lishi mumkinligini ogohlantiradi.
Ismlar, Ijtimoiy Xavfsizlik raqamlari, tug'ilgan sanalar, uy manzillari, telefon raqamlari, elektron pochta manzillari va jins kodlari hujumchilar kirishi mumkin bo'lgan ma'lumot turlari orasida.
"Barcha shaxslar albatta ta'sirlanmagan va ishtirok etgan aniq ma'lumotlar shaxsga qarab farq qilishi mumkin," deb ta'kidladi FLDOE.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
Departament hujumchilar qanday kirganini yoki kim javobgar ekanligini oshkor qilmagan va hech qanday tahdid guruhi hujumni ochiq da'vo qilmagan ko'rinadi. Florida Raqamli Xizmat va Florida Huquqni Muhofaza Qilish Departamenti javob berishda yordam bermoqda.
Departament tuzatish ishlari davom etar ekan, ba'zi veb-saytlari va onlayn xizmatlari bir muddat uzilishi mumkinligini ogohlantirgan.
FLDOE ma'lumotiga ko'ra, talabalarning mavjud yordami xavfsiz. Buzilish u amalga oshiradigan to'lovlar va o'qish to'lovlarini kechiktirmaydi, shuningdek, uning stipendiyalari, grantlari va talaba kreditlari uchun huquqni o'zgartirmaydi.
Buzilish sentyabr oyida Florida Avtomobil Yo'llari Xavfsizligi va Motor Transport Vositalari Departamentida (FLHSMV) sodir bo'lgan hodisadan keyin yuz berdi. O'sha agentlik ShinyHunters tovlamachilik guruhi 200 000 dan ortiq haydovchi yozuvlarini o'g'irlaganini da'vo qilganidan so'ng, xakerlar o'zining haydovchi ma'lumotlar bazasiga kirganini tasdiqladi.
FLHSMV hujumni mahalliy politsiya bo'limi foydalanuvchisiga tegishli buzilgan ma'lumotlarga bog'ladi, lekin ShinyHunters nomini aytmadi.
Bog'liq: Revolve Ma'lumotlar Buzilishi Kamida 180 000 Odamga Ta'sir Qildi
Bog'liq: Chainalysis AI Boshqariladigan Kiberhujumdan Keyin Ma'lumotlar Buzilishini Oshkor Qildi
Bog'liq: Polymarket Savdogarlarga 3,9 Million Dollarni Qaytardi, DebugBear DNS O'g'irlashni Ko'rsatdi
Yozgan: Eduard Kovacs
Eduard Kovacs (@EduardKovacs) SecurityWeek'da katta boshqaruvchi muharrir. U jurnalistika karerasini boshlashdan oldin o'rta maktab IT o'qituvchisi bo'lib ishlagan. Eduard sanoat informatika bo'yicha bakalavr darajasiga va elektr muhandisligida kompyuter texnikasi bo'yicha magistr darajasiga ega.
Kundalik Axborot Byulleteni
Eng so'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek Elektron Axborot Byulleteniga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Eduard Kovacsdan Ko'proq
- Suriyalik Xaker AQShda O'n Yildan Ortiq Qochqinlikdan Keyin Qamoq Jazosiga Hukm Qilindi
- Drupal Commerce Core Zaifligi Onlayn Do'konlarga Qarshi Ishlatildi
- Polymarket Savdogarlaridan 2 Million Dollardan Ortiq Yangi Ta'minot Zanjiri Hujumida O'g'irlandi
- Binance'dan 6 Milliard Dollarlik Xakerlik Shimoliy Koreyaning TraderTraitor Belgilarini Ko'rsatadi
- Google Gemini 4 Carbon Modelida Kuchli Kiberxavfsizlik Imkoniyatlarini Ta'kidlaydi
- BAE Bankrotlik Sudlari Hujumida Hech Qanday Ma'lumot Olinmaganini Aytadi
- Xakerlar Sony'ning Yaponiya ISP So-net'dan 2,6 Million Yozuvni O'g'irladi
- Cisco SD-WAN Nol Kunlik Zaifligi Volt Typhoonning 'Jim Poyezd' Tarmog'iga Bog'liq
Eng So'nggi Yangiliklar
- Revolve Ma'lumotlar Buzilishi Kamida 180 000 Odamga Ta'sir Qildi
- Google 250 000 Dollarlik Root-in-Cloud Xato Mukofotini E'lon Qildi
- Cursor Ta'minot Zanjiri Hujumida Zararli Claude Code Kengaytmasi Xizmat Qildi
- Chainalysis AI Boshqariladigan Kiberhujumdan Keyin Ma'lumotlar Buzilishini Oshkor Qildi
- Polymarket Savdogarlarga 3,9 Million Dollarni Qaytardi, DebugBear DNS O'g'irlashni Ko'rsatdi
- FBI Shimoliy Koreyaning Binance Xakerligiga Bog'liq 600 dan Ortiq Manzilni Belgiladi
- Ivanti Connect Secure Hujum Zanjirida Ishlatiladigan Yana Ikki Nol Kunlik Zaiflikni Tuzatdi
- Northstar Security Stealth'dan 7 Million Dollar Bilan Chiqdi, Toksik Xavf Kombinatsiyalarini Fosh Etish Uchun
Trend
Zararli Claude Code Kengaytmasi Cursor Ta'minot Zanjiri Hujumida Xizmat Qildi
PHP2Shell Hujumlari Palo Alto Firewalls'ni Ildizga Olib Keldi, Lekin WordPress'ga Qarshi Muvaffaqiyatsiz Bo'ldi
Northstar Security Stealth'dan 7 Million Dollar Bilan Chiqdi, Toksik Xavf Kombinatsiyalarini Fosh Etish Uchun
Suriyalik Xaker AQShda O'n Yildan Ortiq Qochqinlikdan Keyin Qamoq Jazosiga Hukm Qilindi
Yangi WordPress Zaifligi Hujumchilarning Diqqat Markazida
Parollar Parollardan Yaxshiroq. Lekin Ular Yetarli Emas.
Maksimal Darajadagi GitLab Zaifligi Alpine Linux'ga Qarshi Ishlatildi
Drupal Commerce Core Zaifligi Onlayn Do'konlarga Qarshi Ishlatildi
Kundalik Axborot Byulleteni
Eng so'nggi tahdidlar, tendentsiyalar va texnologiyalar, shuningdek, soha mutaxassislarining chuqur fikrlari haqida xabardor bo'lish uchun SecurityWeek Elektron Axborot Byulleteniga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Vebinar: Agentik Pentesting Kuchliroq CTEM Dasturi Uchun
2026-yil 4-noyabr
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyaga qo'shiling va agentik pentestingni o'rganing hamda CTEM dasturingizda doimiy ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan O'tish
Virtual Tadbir: CISO Forum 2026 Sammiti
2026-yil 10 va 11-noyabr
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlari amaliy tajribani almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashadigan ushbu tadbirga qo'shiling.
Ro'yxatdan O'tish
Harakatdagi Odamlar
Barracuda Dan Fletcher'ni CFO etib tayinladi.
Artemis Security Arun Singh'ni CGO etib tayinladi.
General Paul M. Nakasone Armadin Kengashiga qo'shildi.
Harakatdagi Ko'proq Odamlar
Mutaxassis Fikrlari
*
Parollar Parollardan Yaxshiroq. Lekin Ular Yetarli Emas.
Tashkilotlar parollarni yo'q qilganda, hujumchilar moslashadi. Autentifikatorni to'g'ridan-to'g'ri hujum qilish o'rniga, ular uning atrofidagi imkoniyatlarni qidiradi. (Torsten George)
Xavf Shaxsiy Bo'lganda: Xavfsizlik Rahbarlari Saraton Tashxisidan Nima O'rganishi Mumkin
Xavf menejerlari zaif signallarni aniqlash, uzilishlarni rejalashtirish va noaniqlik ostida qiyin qarorlar qabul qilishga o'rgatilgan. Lekin intizom tizim yoki korxona emas, balki siz bo'lganingizda boshqacha ko'rinadi. (Steve Durbin)
Hech Kim Xavfsizlik So'rovnomasiga Ishonmaydi. Biz Baribir Unga Tayanamiz.
Deyarli har bir B2B bitimini nazorat qiladigan jarayon yuboruvchi ishonmaydigan va qabul qiluvchi qabul qiladigan o'z-o'zini baholashdir. Nihoyat kompaniyalar o'rtasida ishonch uchun yaxshiroq asos bor. (Sravish Sridhar)
Bu Normal: NetScaler Nol Kunliklari Yangi Normal Haqida Nima Aytadi
Agar Citrix NetScaler tuzatishlari tez orada chiqarilsa, yamoqni boshqarish quvurlarini tayyor saqlang. (Tod Beardsley)
AI Dasturiy Ta'minot Xavfsizligining Kaliti Tezlik Emas, Balki Yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir ko'rsatadi. (Matias Madou)
Data Breaches
Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.
By
Eduard Kovacs
| November 2, 2026 (10:44 AM ET)
*
The Florida Department of Education (FLDOE) says hackers breached its student financial aid website, potentially exposing the personal information of roughly 4.9 million people.
The department discovered the intrusion on October 19. It says it launched its incident response procedures after detecting the threat and has since contained the breach.
“At this time, we believe the incident was limited to the Florida Student Financial Aid website (FloridaStudentFinancialAidSG.org) and may have impacted approximately 4.9 million individuals,” the department said.
The website is the online hub for Florida’s state-funded scholarship and grant programs. FLDOE warns that anyone who has applied for financial aid in the state in the past could be among those affected.
Names, Social Security numbers, dates of birth, home addresses, phone numbers, email addresses, and gender codes are among the data types the attackers may have accessed.
“Not all individuals were necessarily affected, and the specific information involved may vary by person,” FLDOE noted.
Advertisement. Scroll to continue reading.
The department has not disclosed how the attackers got in or who is responsible, and no threat group appears to have publicly claimed the attack. The Florida Digital Service and the Florida Department of Law Enforcement are assisting with the response.
The department has cautioned that some of its websites and online services may be disrupted for a time as remediation continues.
According to FLDOE, students’ existing aid is safe. The breach will not delay the disbursements and tuition payments it handles, nor will it change eligibility for its scholarships, grants, and student loans.
The breach follows a September incident at the Florida Department of Highway Safety and Motor Vehicles (FLHSMV). That agency confirmed hackers had accessed its driver database after the ShinyHunters extortion group claimed to have stolen more than 200,000 driver records.
FLHSMV traced the intrusion to compromised credentials belonging to a local police department user but did not name ShinyHunters.
Related: Revolve Data Breach Impacts at Least 180,000 People
Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
Related: Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
Written ByEduard Kovacs
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Eduard Kovacs
- Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
- Drupal Commerce Core Vulnerability Exploited Against Online Stores
- $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
- $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
- Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
- BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
- Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
Latest News
- Revolve Data Breach Impacts at Least 180,000 People
- Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
- Malicious Claude Code Extension Served in Cursor Supply Chain Attack
- Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
- Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
- FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
- Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
Trending
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
Fresh WordPress Vulnerability in Attackers’ Crosshairs
Passkeys Are Better Than Passwords. But They Are Not Enough.
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Drupal Commerce Core Vulnerability Exploited Against Online Stores
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Barracuda has appointed Dan Fletcher as CFO.
Artemis Security has appointed Arun Singh as CGO.
General Paul M. Nakasone has joined Armadin’s Board of Directors.
More People On The Move
Expert Insights
*
Passkeys Are Better Than Passwords. But They Are Not Enough.
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)