Monthly Cybersecurity News June 2025

Elisabeth Do
Elisabeth Do
calendar icon
July 23, 2025
2 min

Here are some interesting updates about cybersecurity threats and new trends.

Cartier Confirms Data Breach

The retail sector is facing a surge in cyberattacks, with luxury brands like Cartier, and retailers like The North Face and Victoria’s Secret, recently targeted. Cartier has confirmed a data breach where limited customer information (names, emails, and countries of origin) was exposed, though no financial data was compromised. The attack follows a severe ransomware incident at Marks & Spencer, estimated to cost over $400 million. Experts warn these breaches expose vulnerabilities in retail cybersecurity, fueling phishing threats. Cartier has contained the breach, notified affected customers, and urged vigilance against suspicious communications as investigations and responses continue.

Source: Forbes

Kettering Health Resumes Operations After Major Ransomware Attack

Kettering Health has largely resumed normal operations following a ransomware attack by the Interlock group on May 20, 2025. The attack caused a system-wide outage across its 14 medical centers and 120 outpatient facilities in western Ohio. Core components of its Epic electronic health records (EHR) system were restored on June 2, allowing patient data entry and transition from paper records. Kettering took significant cybersecurity measures, including enhanced monitoring and updated access controls. As of June 10, services like surgery, pharmacy, and physician visits had fully resumed, and the MyChart patient portal was fully operational.

The Interlock group claimed responsibility, asserting it had stolen 941 GB of data, which allegedly includes personal, financial, and health information. Though the extent of the breach remains under investigation, Kettering confirmed unauthorized access to a small subset of patient data. Notification letters will be sent once the full impact is determined. Scam communications have also emerged, prompting warnings to patients.

More than 200 people participated in the ongoing recovery efforts. While most systems are restored, some infrastructure requires further work. Kettering Health is focused on securing its systems and fully restoring patient communications while maintaining high-quality care. The ransom was reportedly not paid, and Interlock leaked data on the dark web.

Source: The HIPAA Journal

Study Finds More Than Half of Top TikTok Mental Health Videos Spread Misinformation

A Guardian investigation found that over 50% of the top 100 TikTok videos under the hashtag **entalhealthtips contain misinformation, often promoting unverified advice, supplements, or "quick-fix" solutions. Experts reviewed the posts and flagged repeated misuse of psychological terminology, overgeneralization of trauma and mental illness, and advice based on anecdotal rather than evidence-based content. Examples include inaccurate guidance on PTSD, presenting typical emotions as signs of serious illness, or equating therapy to a cure-all. Mental health professionals emphasized that conditions like PTSD are complex, variable, and require professional assessment. MPs and health experts criticized TikTok’s algorithm for amplifying potentially harmful advice and called for tighter regulation through the Online Safety Act. While TikTok claims to work with health agencies and remove 98% of harmful misinformation proactively, concerns remain about the platform's role in shaping public health perceptions. Lawmakers argue current regulations aren’t comprehensive enough to address the scale of harm, and warn that misleading content can trivialize mental illness or mislead vulnerable users. The study highlights the growing threat of social media misinformation and the urgent need to differentiate personal storytelling from clinically sound advice in online mental health discussions.

Source: The Guardian

Yes24 Cyberattack Disrupts Events and Ticket Sales Nationwide

A ransomware attack on Yes24, South Korea’s major ticketing and online book platform, crippled its services for days, causing mass event cancellations and postponements, fan frustrations, and ticketing chaos. Authorities launched an investigation into possible data breaches as the company works to fully restore services by June 15.

Source: The Record