The mobile telecommunication company T-Mobile US, Inc has revealed a data breach that compromised around two million users’ personal information. In an official announcement, the company informed its customers about the potential security breach that was discovered and stopped on August 20.

The compromised customer data included names, email addresses, account numbers, and other billing information. Fortunately, the people behind the breach did not access financial data like credit card numbers, social security numbers, and passwords, according to the company.

“Our cybersecurity team discovered and shut down an unauthorized access to certain information, including yours, and we promptly reported it to authorities. None of your financial data (including credit card information) or social security numbers were involved, and no passwords were compromised. However, you should know that some of your personal information may have been exposed, which may have included one or more of the following: name, billing zip code, phone number, email address, account number, and account type (prepaid or postpaid).” the company announced on its official website.

T-Mobile notified the affected people via a text message. It also stated if any of the users don’t receive a notification, then that means their account was not among those impacted by the incident.

The Democratic National Committee (DNC) clarified that the suspected hacking attempt on its voter database was actually a simulated phishing test and not the work of cyber criminals. The party officials stated that the mishap was caused due to lack of communication between the DNC and one of its state branches.

“We have taken heightened steps to fortify our cybersecurity especially as the Trump Administration refuses to crack down on foreign interference in our elections. In an abundance of caution, our digital partners ran tests that followed extensive training. Despite our misstep and the alarms that were set off, it’s most important that all of the security systems in place worked,” Brandon Dillon, the chair of the Michigan Democratic Party, said in a statement.

On Wednesday, the DNC announced that they’ve stopped a cyber-attack on its party’s website VoteBuilder after cybersecurity firm Lookout and cloud service company DigitalOcean notified them about the incident. Briefing Democrats on the unsuccessful attack, the DNC’s chief security officer Bob Lord said, “These threats are serious and that’s why it’s critical that we all work together, but we can’t do this alone. We need the (Trump) administration to take more aggressive steps to protect our voting systems. It is their responsibility to protect our democracy from these types of attacks. This attempt is further proof that there are constant threats as we head into midterm elections and we must remain vigilant in order to prevent future attacks.”

However, now it became clear that the apparent hack was not what it seemed after the investigation.

“We have continued to investigate the phishing site reported to the DNC yesterday. We, along with the partners who reported the site, now believe it was built by a third party as part of a simulated phishing test on VoteBuilder. The test, which mimicked several attributes of actual attacks on the Democratic party’s voter file, was not authorized by the DNC, VoteBuilder nor any of our vendors.” Bob Lord said in a statement.

“There are constant attempts to hack the DNC and our Democratic infrastructure, and while we are extremely relieved that this wasn’t an attempted intrusion by a foreign adversary, this incident is further proof that we need to continue to be vigilant in light of potential attacks,” he added.

Hackers linked to Russian military intelligence tried to hack the websites of two conservative think-tanks in the United States ahead of November’s midterm elections, according to Microsoft.

The Microsoft Corporation said that it has detected and seized websites that were created by hackers linked to the Russian unit to mimic the pages of The International Republican Institute and The Hudson Institute.  These sites are designed to redirect the users to fake web pages where they were asked to enter usernames, passwords, and other credentials.

“We’re concerned that these and other attempts pose security threats to a broadening array of groups connected with both American political parties in the run-up to the 2018 elections. To be clear, we currently have no evidence these domains were used in any successful attacks before the DCU transferred control of them, nor do we have evidence to indicate the identity of the ultimate targets of any planned attack involving these domains,” Microsoft said in a statement.

The Russian authorities denied the allegations made by Microsoft, describing it as a political game.

Microsoft’s report comes after the latest research that revealed the websites of the candidates running for the House of Representatives elections in November are vulnerable to hacking. A team of four researchers led by former National Institutes for Standards and Technology security expert Joshua Franklin highlighted that three of every 10 candidates running for the U.S. House of Representatives are vulnerable to cyberattacks. The team identified multiple threats, malicious web pages, and problems with digital certificates using automated scans and test programs.

A 16-year-old boy in Australia pleaded guilty to hacking Apple’s computer systems multiple times over the course of a year and steal secure data.

The unnamed teen from Melbourne told police that he loved Apple company and dreamed of working there. He obtained unauthorized access to customer accounts and downloaded around 90 gigabytes of secure files without revealing his identity.

He saved hacking instructions and stolen files in a folder dubbed “hacky hack hack” on his laptop and allegedly shared the stolen info with his friends on WhatsApp.

“Two Apple laptops were seized, and the serial numbers matched the serial numbers of the devices which accessed the internal systems,” a prosecutor said in a statement. “The purpose was to connect remotely to the company’s internal systems.”

Apple stated that no customer information was compromised in the incident. The U.S. Federal Bureau of Investigation (FBI) referred the matter to the Australian Federal Police (AFP) after Apple contacted FBI when it discovered the unauthorized activity.

An Apple spokesman stated that the company “discovered the unauthorized access, contained it, and reported the incident to law enforcement. We want to assure our customers that at no point during this incident was their personal data compromised.”

Video making service provider Animoto has revealed a data breach that occurred on July 10 which compromised users’ personal information like names, dates of birth, and email addresses.

According to the official statement, on July 10, 2018, Animoto discovered and halted the unusual activity on its systems and reported to the law enforcement authorities for further investigation. From August 16, 2018, Animoto began notifying its users about the incident, after confirming the activity was unauthorized.

Based out in New York, Animoto offers cloud-based video creation services that generate video from photos, video clips, and music into video slideshows for social media sites.

The company stated that the compromised users’ data may have included first name, last name, username, email addresses, hashed and salted passwords, geolocation, gender, and date of birth. The officials stated it wasn’t clear if the hackers obtained the private key, which could be used to expose the passwords. Animoto also specified that the complete payment data was stored in a separate system and was not accessed.

To prevent the further loss, Animoto suggested its employees and users reset their passwords and reduced employees’ access to critical systems. The company is also reviewing its policies and procedures and examining ways to enhance overall network cyber threat detection at Animoto to detect and prevent unauthorized access to user information.