Exposed data includes EINs and Social Security numbers
Ransomware
+1
Malware hidden inside extension icon images
Extensions
Tracked as CVE-2025-34352 with CVSS 8.5
Software Vulnerabilities
Attackers used compromised credentials for initial access
About 20% of users may be affected
Company Website
The incident involved a compromised third-party API
Data Breach
AI is being used for propaganda, recruitment, and translation
AI Vulnerability
Victims can decrypt files without paying a ransom