Hello. The U.S. on Wednesday unsealed an indictment of a 25-year-old U.K. man accused of selling troves of information and credentials stolen from dozens of organizations worldwide since 2022.

The man, whom U.S. authorities say is known as IntelBroker, was arrested in France in February. Federal prosecutors are seeking his extradition to New York. 

Alleged U.S. victims include a telecom company, a couple of internet service providers and a healthcare provider in Washington, D.C., according to the indictment. Over time, IntelBroker and partners sought more than $2.4 million from these organizations and through selling their data on the dark web.

When your business, employee or customer data is breached, it often goes up for sale online, being sliced and diced for years. The IntelBroker charging documents shine a light on how the operation worked.

Other news: 

• Nova Scotia Power offers five years of credit monitoring after breach
• Keep Chinese AI out of U.S. agencies, lawmakers say
• Logistics provider Estes Forwarding confirms hack
• And more

Logistics hack: Estes Forwarding Worldwide, a unit of trucking company Estes Express Lines, was hacked in late May. The incident didn't disrupt operations and was contained "within hours," according to an email Estes sent to customers and employees. (Freightwaves)

Security, interrupted: The Trump administration's overhaul of federal agencies, including widespread staffing cuts, has impeded cooperation on cybersecurity between the U.S. government and critical-infrastructure providers. Canceled meetings and no participation in industry events, along with upheaval in established points of contact between companies and U.S. agencies, are contributing to the turmoil. (Cybersecurity Dive)

Strict new cyber regulations in Australia have helped local businesses bounce back faster after hacks, according to data-security company Commvault, which polled 408 tech executives about cyber response. Recovery time for businesses in Australia and New Zealand averages 28 days, down from 45 days in the previous year, Commvault said.

• The rules, put in place after big breaches in 2022 at telecom company Optus and health insurer Medibank, require companies disclose hacks and more details about their security measures. (Reuters)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.