Cybersecurity articles tagged #Identity Theft on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/dark-web-service-nexus-sells-153m-driver-licenseshttps://runtimerebel.com/blog/dark-web-service-nexus-sells-153m-driver-licensesA new dark web service, Nexus, is selling over 153 million drivers' licenses from North America, likely sourced from an identity verification company.Wed, 02 Sep 2026 01:59:46 GMTDark WebIdentity TheftData BreachNexusExploit Forumhttps://runtimerebel.com/blog/unlimited-technology-systems-data-breach-exposes-3-8m-recordshttps://runtimerebel.com/blog/unlimited-technology-systems-data-breach-exposes-3-8m-recordsUnlimited Technology Systems disclosed a data breach exposing PII and PHI of 3.8 million individuals, including Social Security numbers.Fri, 07 Aug 2026 08:47:50 GMTData BreachHealthcarePHIPIIIdentity Thefthttps://runtimerebel.com/blog/oauth-2-0-device-code-phishing-escalates-to-industrial-threathttps://runtimerebel.com/blog/oauth-2-0-device-code-phishing-escalates-to-industrial-threatDevice code phishing, exploiting the OAuth 2.0 device authorization grant, is rapidly stealing access tokens. Learn how to defend against this growing threat.Fri, 31 Jul 2026 14:09:49 GMTDevice Code PhishingOAuth 2 0Access TokensPhishingIdentity Thefthttps://runtimerebel.com/blog/man-sentenced-for-hacking-750-snapchat-accounts-via-phishinghttps://runtimerebel.com/blog/man-sentenced-for-hacking-750-snapchat-accounts-via-phishingIllinois man Brandon Sudge sentenced to six years for large-scale Snapchat credential harvesting and theft of private content from over 750 victims.Fri, 24 Jul 2026 13:50:49 GMTSnapchatCredential HarvestingIdentity TheftSocial Engineeringhttps://runtimerebel.com/blog/upbound-group-breach-13-million-loss-via-acima-lease-fraudhttps://runtimerebel.com/blog/upbound-group-breach-13-million-loss-via-acima-lease-fraudUpbound Group discloses a massive data breach involving Acima customer data, resulting in $13 million in fraudulent leases and significant identity theft.Thu, 23 Jul 2026 02:51:43 GMTUpbound GroupAcimaFintech FraudIdentity TheftSEC Disclosurehttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskhttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskAn identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.Wed, 22 Jul 2026 17:24:17 GMTIdentity TheftAccount Takeover2FA BypassEmail SecurityPhishingSocial Engineeringhttps://runtimerebel.com/blog/scattered-spider-sentencing-analysis-of-the-ps29m-tfl-breachhttps://runtimerebel.com/blog/scattered-spider-sentencing-analysis-of-the-ps29m-tfl-breachTwo Scattered Spider members sentenced for the 2024 TfL breach, costing £29 million and disrupting 148 systems. Learn about their TTPs and recovery costs.Fri, 17 Jul 2026 02:45:29 GMTScattered SpiderTransport for LondonNational Crime AgencySocial EngineeringIdentity Thefthttps://runtimerebel.com/blog/texas-data-breach-exposes-3m-driver-s-licenses-via-vendorhttps://runtimerebel.com/blog/texas-data-breach-exposes-3m-driver-s-licenses-via-vendorA data breach at a third-party vendor of the Texas Parks and Wildlife Department exposed over 3 million driver's licenses, impacting Texans' PII.Fri, 19 Jun 2026 16:54:19 GMTTexasData BreachTPWDThird Party RiskDriver S LicensesPII ExposureIdentity Thefthttps://runtimerebel.com/blog/university-of-nottingham-data-breach-450000-student-records-exposedhttps://runtimerebel.com/blog/university-of-nottingham-data-breach-450000-student-records-exposedNottingham University confirms a data breach affecting over 450,000 students and alumni. Analyze the risks of identity theft and targeted phishing campaigns.Thu, 11 Jun 2026 09:38:44 GMTUniversity of NottinghamHigher EducationData PrivacyPII LeakIdentity Thefthttps://runtimerebel.com/blog/wfp-palestine-breach-600000-gaza-households-data-exposedhttps://runtimerebel.com/blog/wfp-palestine-breach-600000-gaza-households-data-exposedThe UN World Food Programme confirms a data breach in its Palestine registration portal, exposing sensitive data for 600,000 households in the Gaza Strip.Thu, 04 Jun 2026 17:09:11 GMTUN World Food ProgrammeGazaData BreachHumanitarian SecurityIdentity Thefthttps://runtimerebel.com/blog/french-and-spanish-police-dismantle-major-fake-id-marketplacehttps://runtimerebel.com/blog/french-and-spanish-police-dismantle-major-fake-id-marketplaceAuthorities dismantle a sophisticated marketplace supplying high-quality fraudulent identity documents to smuggling networks across the European Union.Thu, 04 Jun 2026 13:15:35 GMTIdentity TheftEU Law EnforcementSmuggling NetworksDocument Fraudhttps://runtimerebel.com/blog/dashlane-brute-force-attack-mitigation-for-stolen-encrypted-vaultshttps://runtimerebel.com/blog/dashlane-brute-force-attack-mitigation-for-stolen-encrypted-vaultsDashlane confirms a brute-force attack where fewer than 20 personal vaults were downloaded. Analyze the technical impact and mitigation strategies for users.Tue, 02 Jun 2026 05:40:26 GMTDashlaneBrute ForcePassword ManagerIdentity TheftMFA Bypasshttps://runtimerebel.com/blog/google-chrome-dbsc-preventing-account-takeover-via-cookie-thefthttps://runtimerebel.com/blog/google-chrome-dbsc-preventing-account-takeover-via-cookie-theftGoogle Chrome rolls out Device Bound Session Credentials (DBSC) to protect users from session hijacking by cryptographically binding cookies to hardware.Fri, 29 May 2026 13:17:47 GMTGoogle ChromeDBSCSession HijackingIdentity TheftTPMhttps://runtimerebel.com/blog/fbi-warning-fake-fifa-world-cup-sites-target-fans-with-fraudhttps://runtimerebel.com/blog/fbi-warning-fake-fifa-world-cup-sites-target-fans-with-fraudFBI warns of fraudulent websites impersonating FIFA for the 2026 World Cup, engaging in data theft, fake ticket sales, and hospitality scams.Thu, 28 May 2026 20:53:07 GMTFIFA World Cup 2026PhishingFraudScamFBIOnline SecurityIdentity TheftFake Ticketshttps://runtimerebel.com/blog/carnival-data-breach-6-million-customer-records-exposedhttps://runtimerebel.com/blog/carnival-data-breach-6-million-customer-records-exposedA data breach at Carnival Cruise Line exposed personal information for nearly 6 million customers, raising significant identity theft risks.Thu, 28 May 2026 17:25:28 GMTCarnivalData BreachPersonal DataIdentity TheftCruise LineCustomer Datahttps://runtimerebel.com/blog/romanian-hacker-sentenced-for-breach-of-oregon-government-networkshttps://runtimerebel.com/blog/romanian-hacker-sentenced-for-breach-of-oregon-government-networksAdrian-Tiberiu Oprea sentenced to 56 months for a multi-year cyber campaign targeting Oregon government systems and dozens of U.S. organizations.Thu, 28 May 2026 13:25:37 GMTAdrian Tiberiu OpreaOregon GovernmentIdentity TheftFinancial FraudCredential Thefthttps://runtimerebel.com/blog/ajax-football-club-hack-suspect-arrested-in-almere-data-breachhttps://runtimerebel.com/blog/ajax-football-club-hack-suspect-arrested-in-almere-data-breachDutch police arrested a 35-year-old suspect linked to the AFC Ajax data breach involving the theft of sensitive personal data of players and staff.Wed, 27 May 2026 09:16:44 GMTAFC AjaxDutch National PoliceData BreachIdentity TheftAlmereCredential Thefthttps://runtimerebel.com/blog/7-eleven-data-breach-185000-records-leaked-by-shinyhuntershttps://runtimerebel.com/blog/7-eleven-data-breach-185000-records-leaked-by-shinyhuntersAnalysis of the 7-Eleven data breach involving threat actor ShinyHunters, impacting 185,000 users and exposing sensitive PII including dates of birth.Tue, 26 May 2026 13:13:00 GMT7 ElevenShinyHuntersPII LeakData BreachIdentity Thefthttps://runtimerebel.com/blog/cyber-enabled-cargo-theft-how-phishing-and-identity-theft-hijack-freighthttps://runtimerebel.com/blog/cyber-enabled-cargo-theft-how-phishing-and-identity-theft-hijack-freightCyber-enabled cargo crime leverages stolen credentials and phishing to reroute freight, replacing traditional hijackings with digital fraud and identity theft.Thu, 14 May 2026 16:47:04 GMTCargo TheftSupply Chain SecurityNmftaIdentity TheftLogistics Securityhttps://runtimerebel.com/blog/gavril-sandu-extradited-to-us-for-historical-phishing-schemehttps://runtimerebel.com/blog/gavril-sandu-extradited-to-us-for-historical-phishing-schemeGavril Sandu, a Romanian national, faces US charges for a 2007-2008 phishing operation that targeted financial institutions and thousands of victims.Wed, 06 May 2026 12:48:13 GMTGavril SanduPhishingIdentity TheftExtraditionCybercrimeFinancial Fraudhttps://runtimerebel.com/blog/fbi-warning-cyber-enabled-cargo-theft-losses-surge-to-725-millionhttps://runtimerebel.com/blog/fbi-warning-cyber-enabled-cargo-theft-losses-surge-to-725-millionFBI alerts logistics firms to a massive rise in cyber-enabled cargo theft involving identity theft and fraudulent carrier profiles. Protect your supply chain.Thu, 30 Apr 2026 16:37:05 GMTCargo TheftLogistics SecurityFraudIdentity TheftSupply Chain Securityhttps://runtimerebel.com/blog/roblox-account-hijacking-610000-accounts-compromised-and-soldhttps://runtimerebel.com/blog/roblox-account-hijacking-610000-accounts-compromised-and-soldUkrainian police arrested a group for hijacking 610,000 Roblox accounts and generating $225,000 in profits through illegal sales of user data.Wed, 29 Apr 2026 20:30:38 GMTRobloxAccount TakeoverCredential StuffingCybercrimeIdentity Thefthttps://runtimerebel.com/blog/detecting-and-mitigating-money-mule-accounts-to-prevent-app-fraudhttps://runtimerebel.com/blog/detecting-and-mitigating-money-mule-accounts-to-prevent-app-fraudLearn how intelligence-driven mule account detection disrupts the fraud ecosystem and prevents Authorized Push Payment losses before funds are exfiltrated.Wed, 29 Apr 2026 08:56:59 GMTMoney MuleAPP FraudFinancial CrimeFraud DetectionIdentity Thefthttps://runtimerebel.com/blog/france-titres-data-breach-identity-documents-stolen-by-l33t-hackerhttps://runtimerebel.com/blog/france-titres-data-breach-identity-documents-stolen-by-l33t-hackerFrance Titres confirms a data breach after threat actor L33T claims to have stolen 400,000 files, including identity document scans and personal citizen data.Wed, 22 Apr 2026 00:42:34 GMTFrance TitresL33TIdentity TheftFranceBreachForumshttps://runtimerebel.com/blog/draftkings-hacker-sentenced-lessons-in-credential-stuffing-defensehttps://runtimerebel.com/blog/draftkings-hacker-sentenced-lessons-in-credential-stuffing-defenseAnalysis of the sentencing of Kamerin Stokes following the 2022 DraftKings breach, detailing credential stuffing TTPs and account takeover prevention strategies.Fri, 17 Apr 2026 12:29:34 GMTDraftKingsCredential StuffingAccount TakeoverInsider ThreatIdentity Thefthttps://runtimerebel.com/blog/dprk-it-worker-laptop-farms-u-s-nationals-sentenced-for-fraudhttps://runtimerebel.com/blog/dprk-it-worker-laptop-farms-u-s-nationals-sentenced-for-fraudTwo U.S. residents sentenced for operating laptop farms that enabled North Korean IT workers to defraud Fortune 500 companies using stolen identities.Thu, 16 Apr 2026 08:40:47 GMTDPRKLaptop FarmInsider ThreatIdentity TheftLazarus Grouphttps://runtimerebel.com/blog/hybrid-cybercrime-mail-interception-via-vacant-homes-for-fraudhttps://runtimerebel.com/blog/hybrid-cybercrime-mail-interception-via-vacant-homes-for-fraudThreat actors exploit vacant homes as 'drop addresses' to intercept mail, enabling sophisticated hybrid cybercrime like identity theft and financial fraud.Thu, 02 Apr 2026 16:26:56 GMTMail InterceptionHybrid CybercrimeIdentity TheftFraudPhysical Securityhttps://runtimerebel.com/blog/hightower-holding-data-breach-130000-records-compromisedhttps://runtimerebel.com/blog/hightower-holding-data-breach-130000-records-compromisedWealth management firm Hightower Holding reports a data breach affecting 130,000 people. Stolen data includes names, Social Security numbers, and driver's licenses.Thu, 26 Mar 2026 16:32:38 GMTHightower HoldingPII TheftFinancial ServicesIdentity Thefthttps://runtimerebel.com/blog/navia-data-breach-2-7m-individuals-sensitive-data-exposedhttps://runtimerebel.com/blog/navia-data-breach-2-7m-individuals-sensitive-data-exposedNavia Benefit Solutions discloses a data breach exposing sensitive information for nearly 2.7 million individuals. Understand the impact and mitigation.Fri, 20 Mar 2026 00:36:12 GMTNaviaData BreachPersonal DataPHIPIIHealthcare DataIdentity Thefthttps://runtimerebel.com/blog/starbucks-data-breach-unauthorized-access-to-partner-central-accountshttps://runtimerebel.com/blog/starbucks-data-breach-unauthorized-access-to-partner-central-accountsStarbucks discloses a data breach affecting hundreds of employees, exposing SSNs and financial details via compromised Partner Central accounts in May 2024.Fri, 13 Mar 2026 12:20:01 GMTStarbucksPartner CentralPII ExposureCredential StuffingIdentity Thefthttps://runtimerebel.com/blog/lexisnexis-data-breach-confirmed-400000-records-leakedhttps://runtimerebel.com/blog/lexisnexis-data-breach-confirmed-400000-records-leakedLexisNexis confirms data breach following hackers' leak of 2GB of files, impacting 400,000 personal information records. Understand the implications.Wed, 04 Mar 2026 20:15:54 GMTLexisNexisData BreachPersonal InformationData LeakIdentity Thefthttps://runtimerebel.com/blog/alabama-man-pleads-guilty-to-extortion-via-social-media-hijackinghttps://runtimerebel.com/blog/alabama-man-pleads-guilty-to-extortion-via-social-media-hijackingDevin Deandre Moore admits to hijacking hundreds of accounts for sextortion. Analysis of the TTPs used in this large-scale digital extortion campaign.Mon, 02 Mar 2026 20:13:38 GMTSocial Media HackingExtortionCyberstalkingPhishingIdentity Thefthttps://runtimerebel.com/blog/stolen-credentials-and-the-escalation-of-agentic-ai-attackshttps://runtimerebel.com/blog/stolen-credentials-and-the-escalation-of-agentic-ai-attacksIBM X-Force reports 56% of 2025 vulnerabilities require no authentication, enabling agentic AI to weaponize stolen credentials and expand attack blast radius.Wed, 25 Feb 2026 16:33:22 GMTIBM X ForceAgentic AIIdentity TheftCredential AccessAuthentication Bypasshttps://runtimerebel.com/blog/sentenced-ukrainian-national-facilitated-dprk-it-worker-infrastructurehttps://runtimerebel.com/blog/sentenced-ukrainian-national-facilitated-dprk-it-worker-infrastructureOleksandr Didenko sentenced to five years for orchestrating an identity laundering scheme that enabled North Korean operatives to infiltrate Western corporate networks.Mon, 23 Feb 2026 16:26:29 GMTDPRKIdentity TheftRemote Work FraudInsider ThreatLazarus Group