Data breach notification service Have I Been Pwned has been updated to include 361 million email addresses from credentials exfiltrated in credential-stuffing attacks and password-stealing malware intrusions that have been leaked on Telegram channels used by cybercriminals, BleepingComputer reports.

BleepingComputer reports that more than 3.2 million individuals were noted to have had their data exfiltrated in the breach of U.S. nationally licensed debt collection agency Financial Business and Consumer Solutions in February, which is over a million higher than the figure initially reported by the firm to the Office of the Maine Attorney General in April.

Digital Pix & Composites, a professional photography firm specializing in graduation, fraternity, and sorority composites, had personal information from 43,000 students from 222 universities across the U.S., including Stanford University, the University of Maryland, University of Texas, and Washington University, exposed as a result of a misconfigured Microsoft Azure Blob instance, according to Cybernews.

Widely known threat actor USDoD was discovered by VX-Underground researchers was planning to expose 2.9 billion records belonging to U.S., Canadian, and British citizens believed to have been stolen by the SXUL threat operation from Florida-based information broker National Public Data months after the data trove was initially advertised for sale for $3.5 million, reports The Register.

Officials from the Illinois Secretary of State's office disclosed the compromise of residents' driver's license details and Social Security numbers following a phishing attack against its employees in April, StateScoop reports.

Ransomware gang RansomHub took responsibility for attacking major U.S. internet, phone, and TV service provider Frontier Communications in April, which it claimed resulted in the exfiltration of data from over 2 million people, according to The Record, a news site by cybersecurity firm Recorded Future.

UnitedHealth Group's Change Healthcare has been permitted by the Department of Health and Human Services to issue breach notices for the healthcare providers impacted by the widespread ransomware attack following severe opposition to a previous pronouncement requiring all affected organizations to file their own notifications, reports The Record, a news site by cybersecurity firm Recorded Future.

More than 900 of almost 2,300 official government email addresses belonging to politicians of Great Britain, France, and European Parliament have been exposed on the dark web, mostly impacting British senior government and opposition members, whose email addresses appeared over 2,100 times, SecurityWeek reports.