TheRegister's platform is a leading technology news website, offering insights into IT industry news, hardware reviews, and software updates. Through articles, analysis, and opinion pieces, TheRegister offers insights into cybersecurity threats, technology trends, and industry developments. Readers can stay updated with the latest news and analysis from the world of technology and IT business.

The Register

ShinyHunters cybercrime gang claims to have stolen data from Panera Bread (14M records), CarMax (500K records), and Edmunds (millions of records) through voice-phishing attacks targeting SSO credentials. The gang allegedly accessed Panera via a stolen Microsoft Entra SSO code, while gaining access to other victims like Crunchbase and Betterment by phishing Okta SSO codes. The attacks combine social engineering phone calls with real-time phishing kits to bypass multi-factor authentication. Security researchers report this is part of an ongoing campaign targeting around 100 organizations, with attackers impersonating IT support to trick employees into entering credentials on fake login pages.

ShinyHunters claims Panera Bread in alleged data theft