Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.

Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.