Tens of thousands of Americans are staring at the possibility of fraud after thieves stole their information from a healthcare firm.

In a notice to the Office of the Maine Attorney General, the Arkansas-based Highlands Oncology Group says 113,575 Americans are impacted by a massive cybersecurity incident.

In a data incident notice posted on its website, Highlands says that an unauthorized entity gained access to its systems and stole files that may include patients’ names, dates of birth, Social Security numbers, driver’s license/state identification numbers, passport numbers, credit/debit card numbers, financial account numbers, medical treatment records, medical record numbers, patient account numbers,  and/or health insurance policy records.

“Highlands Oncology Group PA recently discovered a data incident that may have involved the personal information for certain individuals. On June 2, 2025, Highlands discovered it was the victim of a cyber-attack, and certain Highlands files and systems were inaccessible…

The forensic investigation determined that an unauthorized third party accessed Highlands’ computer network at times between January 21, 2025, and June 2, 2025, and encrypted some of its files. The investigation also determined that the third party may have accessed and acquired certain files from Highlands’ systems during this period.”

Highlands offers a full spectrum of cancer care services, including chemotherapy, radiation oncology, surgical oncology, as well as supportive services like rehabilitation, massage, lymphedema therapy, genetic counseling and pharmacy.

The firm says it has sent letters of notification to affected individuals, while offering complimentary identity theft protection services for those whose Social Security numbers, driver’s license or state ID numbers were involved in the incident.

Highlands is encouraging patients to stay vigilant by reviewing their account statements and reporting any suspicious activity that could suggest fraud or identity theft.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

Victims of a bank data breach are set to receive up to $3,000 each after a settlement was reached in a class action lawsuit.

According to the settlement administration portal, impacted customers at Arizona-based Evolve Bank & Trust who file a claim and provide documentary evidence of losses resulting from the data breach stand to receive up to $3,000.

A flat cash payment of $20 will also be available but claimants can only choose one or the other, not both.

“In addition to selection one of the Cash Payment options, Settlement Class Members may elect one (1) year of monitoring that will provide the following benefits: Credit Monitoring, real-time alerts, and insurance coverage for up to $1,000,000 for identity theft.”

Claims must be filed by October 30th. A final approval hearing of the settlement will be held on November 14th.

The lawsuit against Evolve Bank & Trust was filed in January and alleges that cybercriminals infiltrated the billion-dollar lender’s information systems and gained access to sensitive and confidential information.

In a notice to customers in July of 2024, Evolve Bank said the data breach had occurred between February and May of 2024.

“…it appears the criminals downloaded information from our databases and a file share that included names, Social Security numbers, bank account numbers, and contact information for most of our personal banking customers, as well as customers of our Open Banking partners. We have also learned that personal information relating to our employees was also likely affected.”

Evolve Bank & Trust, which started as First State Bank in 1925, is headquartered in West Memphis, Arizona. It boasts of around $1.6 billion in total assets and has five branches in the US.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

No one is surprised to see another bad quarter of sales for Tesla; the only question is how Musk will spin it.

Tesla delivered 384,122 vehicles in the second quarter of this year, wrapping up another weak quarter for the company as it struggles to bring the pace of sales back up to 2023 levels.

That represents a 13.5% drop from the number of cars Tesla delivered in the second quarter of 2022, and it means Tesla runs a real chance of underperforming its total sales figure from 2024. If that happens, it would mean Tesla’s sales will have fallen two years in a row — despite the company once promoting the ability to grow deliveries at 50% annually.

TechCrunch

Pausing production, offering sweetheart financing deals, and lowering prices don’t seem to help. Tesla’s advantage in the market wasn’t quality; it was novelty. There are now more, better options to choose from, and Musk’s chemically induced performance on the global stage has not helped. There will be no pivot to selling EVs to coal-rolling weirdos, but that seems to be their only hope?

Previously:
• The Tesla ‘Cyberbeast’ is exceptionally ugly
• Tesla layoffs hit its diversity and inclusivity programs
• Small stickers on the ground trick Tesla autopilot into steering into opposing traffic lane

Krispy Kreme is warning tens of thousands of Americans that they are now at risk of identity theft and fraud following a major cybersecurity incident.

In a new filing with the Office of the Maine Attorney General, the doughnut and coffeehouse giant says it has discovered a computer hack affecting 161,676 employees, former employees and members of their families.

In a statement, the firm says that an unknown actor gained unauthorized access to the retailer’s information technology systems, stealing multiple types of data.

According to Krispy Kreme, the attacker may have siphoned sensitive personal information, including names, Social Security numbers, dates of birth and driver’s license or state ID numbers. The thief may have also copied financial data such as financial account access records, credit or debit card entries, along with security codes, as well as usernames and passwords to financial accounts.

Other customer data that might have been seized include digital signatures, usernames and passwords, email addresses and passwords, biometric records, USCIS or Alien Registration Numbers, US military ID numbers, medical or health records and health insurance entries.

“On November 29, 2024, Krispy Kreme became aware of unauthorized activity on a portion of its information technology systems. Upon learning of the unauthorized activity, we immediately began taking steps to investigate, contain, and remediate the incident with the assistance of leading cybersecurity experts.

On May 22, 2025, our investigation into the incident determined that certain personal information was affected. There is no evidence that the information has been misused, and we are not aware of any reports of identity theft or fraud as a direct result of this incident.”

Krispy Kreme says it abruptly sent letters of notification to affected customers to provide more information about the cybersecurity incident, while offering free credit monitoring and identity protection services.

The firm says it is revamping its security protocols “to further protect the privacy of the data entrusted to us.”

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

A massive data breach at a company connected to the grocery retail giant Ahold Delhaize USA impacted more than 2.2 million victims.

The breach targeted Ahold Delhaize USA Services, LLC, a firm that provides support services to Ahold Delhaize USA, one of the largest grocery retail groups on the East Coast.

Stolen data from the breach varied on a person-to-person basis but included names, contact details, birthdates, Social Security numbers, passport and driver’s license numbers, financial account records, workers’ compensation details, medical records in employment histories and other employment-related records, per a notification on the Maine Attorney General’s website.

“We detected a cybersecurity issue involving unauthorized access to some of our internal US business systems on November 6th, 2024. We immediately launched an investigation with the assistance of leading external cybersecurity experts, coordinated with US federal law enforcement and began taking steps to contain the issue.

Based on our investigation, we identified that an unauthorized third party obtained certain files from one of our internal US file repositories between November 5th and 6th, 2024.”

Ahold Delhaize USA Services says it is currently notifying impacted victims and offering complimentary credit monitoring and identity protection services for two years.

Ahold Delhaize USA is the American division of a large global retailer, and its domestic corporate umbrella includes the grocery brands Food Lion, Giant Food, The GIANT Company, Hannaford and Stop & Shop.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

Two California men face up to 30 years in jail for allegedly operating a scheme that fraudulently accessed the bank accounts of elderly victims and stole their funds.

According to the U.S. Attorney’s Office, Eastern District of California, a 17-count indictment unsealed on Tuesday charges brothers-in-law Ayman Alaaraj and Ahmad Nassar with bank fraud and aggravated identity theft.

Court documents show that in May 2023, Nassar took over several bank accounts belonging to two elderly victims at two separate banks using sophisticated techniques, such as porting over the phone number belonging to one of the victims.

The method enabled Nassar to access the accounts and bypass the banks’ two-factor authentication protection. Nassar, occasionally assisted by Alaaraj, then drained the accounts and ran up unpaid credit card debits, causing more than $794,000 in losses to the victims.

The two men then moved the stolen money through the pass-through accounts created under the victim’s names, as well as funneled $100,000 through Alaaraj’s businesses.

The defendants eventually transferred the money to themselves using ATM cash withdrawals, personal checks, Western Union transactions and Zelle transactions. They also used the stolen funds to pay credit cards, engage in online gambling and buy a Mercedes.

If found guilty, the two men face up to 30 years of jail time and a $1 million fine for each count of bank fraud. They also face a mandatory prison term of two years and a fine of up to $250,000, or twice the gross gain or gross loss, for the aggravated identity theft count.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

Bottom line: A recent warning from Malwarebytes explains that users searching for tech support phone numbers can encounter fake contact information, even when visiting the official websites of major brands. Users should carefully examine text appearing in support site search bars and approach sponsored Google search results with caution, if at all.

Many people likely understand that they should verify URLs when visiting sites for banks, tech companies, and other critical services to avoid fraudulent links. While steering clear of links in suspicious emails is a well-known security precaution, hackers also frequently purchase sponsored Google ads that lead to fake websites designed to steal personal information.

However, the latest scam is even sneakier. Instead of creating fake websites, scammers inject false tech support numbers into legitimate sites by modifying parameters in sponsored search links. Search engines don’t display the added text in the URLs, and official support pages don’t block it, making the scam appear more convincing.

The scheme begins when users search Google for tech support numbers for major brands. Clicking on a top sponsored result leads to an actual support page, but the scammer’s phone number appears in the site’s search bar.

Unsuspecting users who call the number, thinking they’ve reached the company’s call center, are instead connected to scammers attempting to steal account credentials or banking information. Malwarebytes reports that attackers have targeted support pages for Netflix, PayPal, Apple, Microsoft, Facebook, Bank of America, and HP. These hijacked search results are hardest to spot on Apple’s website.

Malwarebytes says its Browser Guard extension can detect this tactic as a search hijack and warn users. Other red flags include phone numbers appearing at the end of legitimate URLs, excessive use of alarming language, encoded characters like “%20,” and search pages showing results before users enter a query.

To stay safe, users should look up support numbers in previously verified communications, such as past emails or direct messages from the company, and compare them with current search results. If a support representative asks for personal or banking information unrelated to the issue, hang up immediately.

Manually navigating to a company’s website and accessing the support section (without relying on search engines) can also help avoid hijacked sponsored links. Verified links can often be found in trusted communications or on the company’s official social media profiles and Wikipedia page.

A major cybersecurity incident at a healthcare firm may have exposed the sensitive personal and health records of more than 100,000 Americans.

In a new filing with the Office of the Maine Attorney General, North Carolina-based optical care firm Asheville Eye Associates says it discovered a serious data breach affecting 147,116 people.

In a statement, the firm says that an unknown attacker breached its systems and siphoned patient data from its network, including names, addresses, Social Security numbers, medical treatment reports and health insurance records.

“On January 31, 2025, Asheville Eye Associates (AEA) notified individuals that it had detected and stopped a network security incident. An unauthorized party gained access to our network and acquired certain files from our systems. We quickly engaged third-party specialists to assist us with securing the network environment and investigating the incident.

Since that time, AEA has completed a comprehensive review and investigation of the potentially affected records and systems. Through that subsequent investigation, which concluded on April 14, 2025, we identified additional individuals whose personal information was contained in the affected records.”

Asheville Eye Associates is a firm specializing in ophthalmology services, offering cataract surgery, laser surgery for glaucoma and diabetes, LASIK and other procedures to treat ophthalmic disorders.

The firm says it abruptly sent letters of notification to impacted individuals to provide more information about the cybersecurity incident, while offering access to free credit monitoring services to people whose Social Security numbers were compromised.

For now, Asheville Eye Associates says it has not detected any instance of identity theft related to the data breach.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

A cybersecurity incident may have exposed sensitive personal, health and financial records of tens of thousands of Americans.

The latest numbers from the U.S. Department of Health and Human Services Office for Civil Rights show that 36,659 Americans are affected by a hacking/IT incident at Cumberland County Hospital (CCH).

CCH says that an unknown attacker breached its systems and stole patient and employee data, which may include names, dates of birth, addresses, phone numbers, email addresses, ethnicities, Social Security numbers, medications, diagnoses, treatment notes, dates of service, medical record numbers, health plan numbers, claims and billing records.

The hospital also says that the thief may have siphoned the employment data of current and former employees, including driver’s licenses, birth certificates, background check records, W-4 and W-2 tax forms and bank account numbers.

“On April 3, 2025, CCH discovered unauthorized access by a third party to our computer system. We immediately shut down all computers, disabled data sharing connections, contacted law enforcement, and began investigating…

Cybersecurity experts determined that the unauthorized access to our computer system began on February 21, 2025, and ended on April 3, 2025.

The electronic medical records system that CCH and its partners use to record and bill for patient care was not involved or accessed in this incident. “

CCH is a Kentucky-based hospital offering outpatient and inpatient healthcare services.

The hospital says it immediately sent letters of notification to affected individuals to shed more light on the data breach, while offering free identity monitoring services for 12 months.

For now, CCH says that its IT team has revamped the hospital’s security protocols to prevent a similar incident from happening again.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

Sensitive personal and financial information of hundreds of thousands of Americans has been stolen in a newly reported cybersecurity incident.

In a filing with the Office of the Maine Attorney General, Georgia-based data broker giant LexisNexis Risk Solutions (LNRS) says that it discovered a breach affecting 364,333 people.

“We learned that on December 25, 2024, an unauthorized third party acquired certain LNRS data from a third-party platform used for software development. The issue did not affect LNRS?s own networks or systems…

The types of impacted personal information varied by affected individual, and could have included name, contact information (such as phone number, postal or email address), Social Security number, driver’s license number or date of birth. No financial or credit card information was affected.”

LNRS says it immediately sent letters to affected customers to inform them of the breach, while offering free identity monitoring services to affected individuals for two years.

LNRS also says it has not yet detected any instance involving the misuse of the stolen customer data.

The firm is urging customers to stay vigilant and report any suspicious activity related to their financial accounts.

LNRS says it has “launched an investigation with the assistance of leading external cybersecurity experts, notified law enforcement and took steps to review and further enhance our security controls.”

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney