LendingTree LLC, an online lending marketplace, was implicated in a massive data breach tied to the Snowflake cybersecurity incident, which affected up to 165 organizations, including Ticketmaster, Advance Auto, and the Los Angeles Unified School District. The breach resulted in the compromise of LendingTree’s customer data, exposing sensitive personal and financial information. The incident led to a proposed class-action lawsuit, with a federal court ruling that LendingTree’s arbitration clause was unenforceable due to insufficient notice to affected customers. The breach stemmed from a third-party cloud provider (Snowflake) vulnerability, exploited by cybercriminals to access and exfiltrate customer records. The exposed data likely included financial details, loan applications, and personally identifiable information (PII), increasing risks of identity theft, fraud, and reputational damage for LendingTree. The legal fallout and loss of customer trust further compound the financial and operational repercussions for the company.

AT&T suffered two major data breaches in March and July 2024, exposing sensitive customer information. The March breach leaked Social Security numbers, birthdates, addresses, email IDs, phone numbers, billing account numbers, passcodes, and other personal data on the dark web. The July breach exposed phone numbers, call logs, interaction counts, call frequencies, and cell site IDs. Millions of users were affected, with some experiencing identity theft risks, financial fraud, and reputational harm. AT&T agreed to a $177 million settlement, offering victims up to $7,500 in compensation, depending on the extent of data exposure. The breaches led to legal action, financial losses for customers, and long-term trust erosion in the company’s cybersecurity measures.

Canadian Hacker Pleads Guilty to Massive Data Theft and Extortion Scheme A 26-year-old Canadian national, Connor Moucka, has pleaded guilty to hacking over 165 companies, stealing billions of records, and extorting victims for millions. The U.S. Department of Justice (DOJ) announced the guilty plea on Wednesday, detailing Moucka’s role in a series of high-profile cyberattacks. Moucka, operating under the aliases Waifu and Judische, targeted cloud provider Snowflake, exploiting vulnerabilities to breach dozens of its customers, including AT&T, LendingTree, and Ticketmaster. The attack on AT&T alone compromised data from over 100 million customers, including call records, banking details, driver’s license numbers, and Social Security numbers. Other breaches exposed similarly sensitive information. Over several years, Moucka and his co-conspirators extorted victims for more than $2.5 million in ransom payments and earned an additional $500,000 by selling stolen data on hacking forums like BreachForums. The DOJ estimates the total financial impact on victims at $9.5 million. FBI Special Agent W. Mike Herrington described Moucka’s tactics as "calculated and predatory," emphasizing the real-world harm inflicted on both corporations and their customers. Arrested in Canada in late 2024, Moucka was identified by cybersecurity researchers, including Google’s Mandiant, as one of the most consequential hackers of the year. Moucka is scheduled to be sentenced on October 27 and faces decades in prison.

Lending Tree, LLC suffered a data breach after it discovered a “code vulnerability” on its website. The breach resulted in the names, addresses, Social Security numbers, and birth dates of certain individuals, however, some files containing additional data types were also identified on the dark web. Lending Tree investigated the incident and sent out data breach letters to all affected parties.

The California Office of the Attorney General reported that LendingTree, LLC experienced a data breach on June 3, 2022, involving a code vulnerability that likely resulted in the unauthorized disclosure of sensitive personal information. The breach potentially affected individuals' names, social security numbers, dates of birth, and street addresses, with the unauthorized disclosure believed to have begun in mid-February 2022.