SecureWorld News

APRIL 29, 2024

Kaiser Permanente, one of the largest not-for-profit providers of health care and coverage in the United States, is dealing with the fallout from a significant data breach that has affected more than 13 million individuals. The company revealed details of the incident in a public notification posted on April 25th.

Data breaches 87

Data breaches Healthcare Identity Theft Advertising 87

SecureWorld News

APRIL 2, 2024

After weeks of denial, AT&T has finally acknowledged a massive data breach impacting 73 million current and former customer accounts. The telecom giant had initially claimed that a large trove of personal data leaked on the Dark Web did not originate from their systems. million former account holders."

Data breaches 85

Data breaches Identity Theft Authentication Accountability 85

Security Affairs

APRIL 12, 2024

Roku announced that 576,000 accounts were compromised in a new wave of credential stuffing attacks. Roku announced that 576,000 accounts were hacked in new credential stuffing attacks, threat actors used credentials stolen from third-party platforms. Then, they enter those accounts to abuse permissions, siphoning out data, or both.

Accountability 111

Accountability Passwords Data breaches Authentication 111

Identity IQ

APRIL 10, 2024

AT&T Data Breach: How to Know If Your Information Has Been Exposed IdentityIQ More than 51 million people have had their personal information compromised in the recent AT&T data breach. The exposed data has been found on the dark web , a place where cybercriminals buy and sell leaked personal information.

Data breaches 95

Data breaches Identity Theft Passwords Password Management 95

Malwarebytes

APRIL 2, 2024

million current customers, and the leaked data is “from 2019 or earlier” Based on our preliminary analysis, the data set appears to be from 2019 or earlier, impacting approximately 7.6 million current AT&T account holders and approximately 65.4 million former account holders. We are reaching out to all 7.6M

Data breaches 143

Data breaches Passwords Phishing Accountability 143

Security Affairs

APRIL 10, 2024

AT&T confirmed that the data breach impacted 51 million former and current customers and is notifying them. AT&T revealed that the recently disclosed data breach impacts more than 51 million former and current customers and is notifying them. ” reads the data breach notification.

Data breaches 102

Data breaches Telecommunications Identity Theft Hacking 102

Malwarebytes

MARCH 5, 2024

In a subsequent update, American Express explained that it was not a service provider, but a merchant processor that suffered the breach. The account information of some card holders may have fallen into the wrong hands. The accessed information includes account numbers, names, and card expiration dates. Take your time.

Data breaches 101

Data breaches Passwords Accountability Identity Theft 101

Bleeping Computer

OCTOBER 5, 2023

Amazon will require all privileged AWS (Amazon Web Services) accounts to use multi-factor authentication (MFA) for stronger protection against account hijacks leading to data breaches, starting in mid-2024. [.]

Accountability 129

Accountability Data breaches Authentication Technology 129

Security Affairs

FEBRUARY 23, 2024

Australian telecommunications provider Tangerine disclosed a data breach that impacted roughly 230,000 individuals. Tangerine suffered a data breach that exposed the personal information of roughly 230,000 individuals. ”continues the statement.

Data breaches 96

Data breaches Telecommunications Banking Mobile 96

SecureWorld News

DECEMBER 7, 2023

New revelations have shed light on the extensive fallout of the 23andMe data breach, which exposed the personal information of a staggering 6.9 This significant update comes almost two months after the genetic testing company initially reported a breach affecting 14,000 individuals. million users.

Data breaches 104

Data breaches Passwords Data privacy Accountability 104

Malwarebytes

DECEMBER 18, 2023

The targeted system contained customer names, phone numbers, and email addresses among other customer account metadata, including system logs for one customer. MongoDB said there is no evidence of unauthorized access to Atlas clusters since that would require compromise of the separate Atlas cluster authentication system.

Data breaches 91

Data breaches Social Engineering Phishing Authentication 91

Approachable Cyber Threats

APRIL 17, 2023

Risk Level 3 Data breaches are a significant concern here in the digital age. million victims were impacted by a data breach in 2022 alone. Remember when we talked about Facebook , Marriott , easyJet , and J.Crew ’s data breaches in past years? They can even help generate secure passwords for you!

Data breaches 97

Data breaches Identity Theft Passwords Scams 97

The Last Watchdog

JULY 24, 2023

In fact, according to Verizon’s most recent data breach report, approximately 80 percent of all breaches are caused by phishing and stolen credentials. Not only are passwords vulnerable to brute force attacks, but they can also be easily forgotten and reused across multiple accounts. They are simply not good enough.

Authentication 245

Authentication Passwords Phishing Social Engineering 245

Malwarebytes

JANUARY 15, 2024

As is often the case these days, it turns out that the cyberincident was very likely a ransomware attack that included a data breach. Ransomware operators typically steal data from the compromised systems to use as extra leverage against the victim. The company has not so far specified the type of data that may have been stolen.

Data breaches 96

Data breaches Identity Theft Passwords Ransomware 96

Approachable Cyber Threats

APRIL 17, 2023

Category Awareness, Guides Risk Level Data breaches are a significant concern here in the digital age. million victims were impacted by a data breach in 2022 alone. Remember when we talked about Facebook , Marriott , easyJet , and J.Crew ’s data breaches in past years?

Data breaches 98

Data breaches Identity Theft Passwords Scams 98

Security Affairs

NOVEMBER 20, 2023

The Canadian government discloses a data breach after threat actors hacked two of its contractors. “On October 19 th , 2023, Brookfield Global Relocation Services (BGRS) informed the Government of Canada of a breach involving Government of Canada information held by BGRS and SIRVA Canada systems.”

Data breaches 114

Data breaches Government Hacking Backups 114

Malwarebytes

NOVEMBER 7, 2023

After 1Password, BeyondTrust, and Cloudflare detected unauthorized log-in attempts to their in-house Okta administrator accounts, they reported the incidents to Okta who started an investigation. To gain access to that service account, the attacker compromised an Okta employee. Enable two-factor authentication (2FA).

Accountability 119

Accountability Passwords Data breaches Phishing 119

Security Affairs

SEPTEMBER 24, 2023

educational nonprofit organization National Student Clearinghouse disclosed a data breach that impacted approximately 900 US schools. MOVEit Transfer is a file transfer tool used by many organizations, including the Clearinghouse, to support the transfer of data files.” reads the advisory published by the company.

Data breaches 114

Data breaches Education Ransomware Software 114

Security Affairs

SEPTEMBER 3, 2022

Electronics giant Samsung has confirmed a new data breach after some of its US systems were compromised in July. After the attack that hit the company in late July 2022, Samsung disclosed a data breach. Threat actors had access to internal company data, including the source code of Galaxy models.

Data breaches 144

Data breaches Hacking Authentication Cybersecurity 144

Identity IQ

JANUARY 16, 2023

LifeLock Data Breach Compromises Thousands! Recently, thousands of Norton LifeLock customer accounts were compromised in a data breach. Credential stuffing is a type of data breach where hackers use previously stolen lists of information, such as usernames and passwords, to gain unauthorized access to accounts.

Data breaches 105

Data breaches Identity Theft Password Management Passwords 105

Security Affairs

AUGUST 24, 2022

The company disclosed a data breach after threat actors have access to a limited subset of data stored in a compromised database. Exposed data includes emails, usernames, and encrypted passwords. The company is urging all users to immediately reset account passwords and log out of all devices connected to its service.

Data breaches 110

Data breaches Passwords Media Accountability 110

The Last Watchdog

AUGUST 19, 2021

The attacker claims to have compromised an end-of-lifed GPRS system that was exposed to the internet and was able to pivot from it to the internal network, where they were able to launch a brute force authentication attack against internal systems. Most immediately is the ubiquity of 2-factor authentication.

Mobile 306

Mobile Data breaches Authentication Accountability 306

CyberSecurity Insiders

MARCH 22, 2022

Going deep into the details, CafePress’s former owner, Residual Pumpkin Entity, was storing critical customer data such as social security numbers, passwords and other account related info in plain text and not with any authentication.

Data breaches 127

Data breaches Retail Identity Theft Authentication 127

Security Boulevard

AUGUST 21, 2022

The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show. The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show.

Authentication 98

Authentication Accountability Hacking Ransomware 98

Malwarebytes

JULY 25, 2022

Word is spreading of a compromise claimed to have accessed around 69 million user accounts. Data claimed to have been taken includes: Usernames Names Email address Date of birth Zip code Date of Birth Gender Country Registration email. In 2020, there were claims of ways to potentially gain access to user accounts.

Data breaches 75

Data breaches Accountability Passwords Password Management 75

Malwarebytes

FEBRUARY 19, 2024

An attacker managed to compromise network administrator credentials through the account of a former employee of the organization. CISA suspects that the account details fell in the hands of the attacker through a data breach. CISA suspects that the account details fell in the hands of the attacker through a data breach.

Accountability 72

Accountability VPN Authentication Phishing 72

Krebs on Security

JUNE 28, 2019

says it will soon force all Cloud Solution Providers (CSPs) that help companies manage their Office365 accounts to use multi-factor authentication. As it happened, the PCM employee was not using multi-factor authentication. And when that PCM employee’s account got hacked, so too did many other PCM customers.

Authentication 226

Authentication Accountability Data breaches Software 226

Malwarebytes

MARCH 21, 2023

The National Basketball Association (NBA) has notified its fans they may be affected by a data breach in a third-party service the organization uses. Data breach There are some actions you can take if you are, or suspect you may have been, the victim of a data breach. Enable two-factor authentication.

Data breaches 75

Data breaches Passwords Social Engineering Phishing 75

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 89

Data breaches Social Engineering Phishing Accountability 89

Hot for Security

MARCH 29, 2021

Have you ever wondered why your email address and other information appeared in a data breach impacting a platform you never signed up for? You probably don’t recall creating an account on the Verifications.io and River City Media data breaches. platform or River City Media. That’s because you didn’t.

Data breaches 116

Data breaches Media Marketing Social Engineering 116

Security Affairs

JANUARY 20, 2023

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. PayPal announced that 34942 customers’ accounts have been compromised between December 6 and December 8.

Data breaches 90

Data breaches Identity Theft Accountability Passwords 90

Identity IQ

NOVEMBER 1, 2021

Earlier this month, UMass Memorial Health alerted patients who were affected by the hospital data breach. The hospital data breach potentially affected more than 209,000 individuals, according to the U.S. How to Protect Yourself After a Hospital Data Breach. Monitor Your Credit. Use Strong Passwords.

Data breaches 98

Data breaches Identity Theft Insurance Passwords 98

Identity IQ

JANUARY 19, 2021

With all that transpired over the last few months, and even with the SolarWinds cyberattack making headlines , it might be easy to forget that data breaches and hacks continue to expose the personal information of millions. This leaves victims of the data breaches vulnerable to identity theft. million customer accounts.

Data breaches 105

Data breaches Identity Theft Small Business Passwords 105

SecureWorld News

OCTOBER 17, 2023

In the wake of the recent 23andMe data breach that impacted millions of customers, new legal action is now being pursued against the genetic testing company. Four class action lawsuits were filed in the past week on behalf of 23andMe users whose personal and health data was compromised in the breach.

Data breaches 89

Data breaches Authentication Passwords Cybersecurity 89

Approachable Cyber Threats

APRIL 17, 2023

Category Awareness, Guides Risk Level Data breaches are a significant concern here in the digital age. million victims were impacted by a data breach in 2022 alone. Remember when we talked about Facebook , Marriott , easyJet , and J.Crew ’s data breaches in past years?

Data breaches 52

Data breaches Identity Theft Passwords Scams 52

Security Affairs

JANUARY 19, 2022

A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed threat actors to take over accounts. A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed attackers to take over accounts without having access to the victim’s phone, Varonis researchers reported.

Accountability 116

Accountability Authentication Passwords Data breaches 116

CyberSecurity Insiders

DECEMBER 22, 2021

The aim was to see whether any of the quarter billion password were compromised and the online account services linked to those passwords were been misused. And such data troves could act as monetary catalysts to the activities of cyber criminals as they can sell such data on the dark web for a fancy price, added Hunt.

Passwords 131

Passwords Data breaches Cyber Attacks Accountability 131