Virtual mental health platform Cerebral, which provides services to both insured and uninsured patients, has suffered a patient information disclosure affecting over three million users. The disclosure, caused by the use of pixel tracking technologies between October 2019 and January 2023, may have shared information such as names, phone numbers, and IP addresses with third-party platforms including Google, Meta, and TikTok. The unauthorized disclosures may have also included appointment information, treatment notes, and insurance details. Cerebral has disabled the trackers and is providing credit report monitoring and password change recommendations.

Phishing Campaign Impersonates Booking.com, Plants Malware
Cybersecurity professionals have raised concerns over a new phishing campaign that imitates Booking.com to plant credential-stealing malware. The threat, first detected in December 2024, targets