Security Affairs

OCTOBER 4, 2023

Sony Interactive Entertainment has notified current and former employees and their family members about a data breach. Sony Interactive Entertainment (SIE) has notified current and former employees and their family members about a data breach that exposed their personal information.

Data breaches 127

Data breaches Ransomware Hacking Software 127

SecureWorld News

APRIL 2, 2024

After weeks of denial, AT&T has finally acknowledged a massive data breach impacting 73 million current and former customer accounts. The telecom giant had initially claimed that a large trove of personal data leaked on the Dark Web did not originate from their systems.

Data breaches 84

Data breaches Identity Theft Authentication Accountability 84

Security Affairs

OCTOBER 26, 2023

On August 10, 2023, the Japanese maker of watches Seiko disclosed a data breach following a cyber attack. Seiko Group Corporation (hereinafter referred to as “the Company” or “we”) has confirmed that on July 28th of this year, the Company suffered a possible data breach.

Data breaches 126

Data breaches Ransomware Cybersecurity Education 126

Security Affairs

FEBRUARY 23, 2024

Australian telecommunications provider Tangerine disclosed a data breach that impacted roughly 230,000 individuals. Tangerine suffered a data breach that exposed the personal information of roughly 230,000 individuals.

Data breaches 95

Data breaches Telecommunications Banking Mobile 95

Security Affairs

SEPTEMBER 24, 2023

educational nonprofit organization National Student Clearinghouse disclosed a data breach that impacted approximately 900 US schools. The security breach resulted from a cyber attack exploiting a vulnerability in the MOVEit managed file transfer (MFT).- reads the advisory published by the company.

Data breaches 113

Data breaches Education Ransomware Software 113

Security Affairs

NOVEMBER 20, 2023

The Canadian government discloses a data breach after threat actors hacked two of its contractors. “On October 19 th , 2023, Brookfield Global Relocation Services (BGRS) informed the Government of Canada of a breach involving Government of Canada information held by BGRS and SIRVA Canada systems.”

Data breaches 113

Data breaches Government Hacking Backups 113

Security Affairs

SEPTEMBER 3, 2022

Electronics giant Samsung has confirmed a new data breach after some of its US systems were compromised in July. After the attack that hit the company in late July 2022, Samsung disclosed a data breach. Threat actors had access to internal company data, including the source code of Galaxy models.

Data breaches 144

Data breaches Hacking Authentication Cybersecurity 144

SecureWorld News

DECEMBER 7, 2023

New revelations have shed light on the extensive fallout of the 23andMe data breach, which exposed the personal information of a staggering 6.9 This significant update comes almost two months after the genetic testing company initially reported a breach affecting 14,000 individuals. million users.

Data breaches 103

Data breaches Passwords Data privacy Accountability 103

Dark Reading

AUGUST 11, 2022

Ransomware gang gained access to the company's VPN in May by convincing an employee to accept a multifactor authentication (MFA) push notification.

Data breaches 135

Data breaches VPN Hacking Authentication 135

Security Affairs

NOVEMBER 3, 2021

Labour Party discloses a data breach after a ransomware attack hit a service provider that is managing its data. Labour Party discloses a data breach after a service provider that manages its data was hit by a ransomware attack. SecurityAffairs – hacking, data breach). The post The U.K.

Data breaches 124

Data breaches Ransomware Authentication Hacking 124

Security Affairs

JANUARY 3, 2023

A post published on a popular hacking forum claims Volvo Cars has suffered a new data breach, alleging stolen data available for sale. French cybersecurity Anis Haboubi yesterday first noticed that a threat actor was attempting to sell data allegedly stolen from Volvo Cars on a popular hacking forum.

Data breaches 90

Data breaches Hacking Ransomware Manufacturing 90

Security Affairs

SEPTEMBER 6, 2022

Threat actors published a sample of data allegedly stolen from TikTok, but the company denies it was breached. The hacking collective AgainstTheWest recently published a post on Breach Forums message board claiming to have hacked TikTok and stolen source code and user data. OK, #TikTokBreach is real.

Data breaches 95

Data breaches Hacking Media Authentication 95

Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. Recently someone has leaked on GitHub [ 1 , 2 ] a collection of files apparently stolen from the Chinese hacking firm, I-Soon.

Hacking 109

Hacking Government Spyware Marketing 109

The Last Watchdog

AUGUST 19, 2021

At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons. Related: Kaseya hack worsens supply chain risk. Often inadvertent data breaches stem from a well-meaning employee trying to meet the needs of clients but without the technical systems to facilitate.

Mobile 306

Mobile Data breaches Authentication Accountability 306

Security Affairs

AUGUST 24, 2022

The company disclosed a data breach after threat actors have access to a limited subset of data stored in a compromised database. Exposed data includes emails, usernames, and encrypted passwords. According to the company, financial and payment data were not compromised because are not stored on its servers.

Data breaches 108

Data breaches Passwords Media Accountability 108

Security Boulevard

AUGUST 21, 2022

The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show. The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show.

Authentication 98

Authentication Accountability Hacking Ransomware 98

Security Affairs

MAY 2, 2024

Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.

Hacking 99

Hacking Authentication Passwords Accountability 99

Identity IQ

JANUARY 16, 2023

LifeLock Data Breach Compromises Thousands! Recently, thousands of Norton LifeLock customer accounts were compromised in a data breach. Credential stuffing is a type of data breach where hackers use previously stolen lists of information, such as usernames and passwords, to gain unauthorized access to accounts.

Data breaches 105

Data breaches Identity Theft Password Management Passwords 105

Security Affairs

MAY 13, 2023

A data breach disclosed by Toyota Motor Corporation exposed info of more than 2 million customers for ten years Toyota Motor Corporation disclosed a data breach that exposed the car-location information of 2,150,000 customers between November 6, 2013, and April 17, 2023.

Data breaches 87

Data breaches Authentication Internet Internet 87

SecureWorld News

OCTOBER 17, 2023

In the wake of the recent 23andMe data breach that impacted millions of customers, new legal action is now being pursued against the genetic testing company. Four class action lawsuits were filed in the past week on behalf of 23andMe users whose personal and health data was compromised in the breach.

Data breaches 89

Data breaches Authentication Passwords Cybersecurity 89

Security Affairs

AUGUST 31, 2022

The Russian subscription-based streaming service Start discloses a data breach affecting 7.5 The Russian media streaming platform START disclosed a data breach that impacted 7.5 Russian news outlet Medusa verified that the leaked data are valid. ” reads the data breach notice published on Telegram.

Data breaches 83

Data breaches Passwords Banking Media 83

Troy Hunt

SEPTEMBER 9, 2021

As technology has evolved, fingers (and palms and irises and faces) have increasingly been used as a means of biometric authentication. What happens if someone obtains, say, my fingerprint just like they may obtain my password in a data breach or a phishing attack? But doesn't this all make biometrics like passwords?

Authentication 336

Authentication Passwords Data breaches Risk 336

Hacker Combat

SEPTEMBER 28, 2022

Two Samsung customers, who are being represented by Clarkson Law Firm, have launched a class action lawsuit against the electronics maker for the two data breaches it had in 2022. A hack that targeted Samsung in July 2022 led to the compromise of US consumers’ personal information.

Data breaches 73

Data breaches Identity Theft Phishing Authentication 73

Identity IQ

JANUARY 19, 2021

With all that transpired over the last few months, and even with the SolarWinds cyberattack making headlines , it might be easy to forget that data breaches and hacks continue to expose the personal information of millions. This leaves victims of the data breaches vulnerable to identity theft.

Data breaches 105

Data breaches Identity Theft Small Business Passwords 105

Krebs on Security

JUNE 28, 2019

says it will soon force all Cloud Solution Providers (CSPs) that help companies manage their Office365 accounts to use multi-factor authentication. As it happened, the PCM employee was not using multi-factor authentication. And when that PCM employee’s account got hacked, so too did many other PCM customers.

Authentication 226

Authentication Accountability Data breaches Software 226

Krebs on Security

DECEMBER 13, 2022

While the FBI’s InfraGard system requires multi-factor authentication by default, users can choose between receiving a one-time code via SMS or email. Prior to its infiltration by the FBI, RaidForums sold access to more than 10 billion consumer records stolen in some of the world’s largest data breaches.

Hacking 362

Hacking Energy and Utilities Cybercrime Accountability 362

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 89

Data breaches Social Engineering Phishing Accountability 89

The Last Watchdog

AUGUST 29, 2022

Related: Damage caused by ‘business logic’ hacking. This is according to Verizon’s latest 2022 Data Breach Investigations Report ( DBIR ). In the report’s findings, stolen credentials and exploited vulnerabilities are the top reasons for web breaches. Authentication bypass.

Hacking 201

Hacking Passwords Password Management Data breaches 201

Troy Hunt

APRIL 14, 2024

Data breach verification: that seems like a good place to start given the discussion in this week's video about Accor. Watch the vid for the whole thing but in summary, data allegedly taken from Accor was published to a popular hacking forum and the headlines inevitably followed.

Retail 220

Retail Authentication Data breaches Hacking 220

Security Affairs

NOVEMBER 25, 2020

million settlement in a multi-state investigation of the data breach that the company suffered in 2014. million settlement over the 2014 data breach. In 2014, Home Depot revealed that the data breach impacted 56 million customers across the US and Canada. SecurityAffairs – hacking, Data breach).

Retail 119

Retail Data breaches Penetration Testing Password Management 119

Security Affairs

NOVEMBER 25, 2021

Recently disclosed data breach impacted several of its brands, including Domain Factory, Heart Internet, Host Europe, Media Temple, tsoHost and 123Reg. Recently GoDaddy has disclosed a data breach that impacted up to 1.2 million of its customers, threat actors breached the company’s Managed WordPress hosting environment.

Data breaches 87

Data breaches Passwords Media Internet 87

SecureWorld News

OCTOBER 7, 2021

A recent hack discovered by one of the world's largest telecommunications companies has the potential to impact millions of cell phone users worldwide. The company also says it discovered the breach in May 2021, but the hack began five years earlier in 2016. 2FA concerns from Syniverse hack.

Data breaches 79

Data breaches Mobile Hacking Authentication 79

Security Affairs

JANUARY 18, 2021

The OpenWRT forum, the community behind the open-source project for embedded operating systems based on Linux, disclosed a data breach. OpenWRT forum was compromised during the weekend and user data were stolen by intruders. The administrators of the forum disclosed the data breach with an announcement published on the forum.

Hacking 130

Hacking Data breaches Passwords Accountability 130

IT Security Guru

OCTOBER 26, 2023

Enter Two-Factor Authentication, or 2FA for short. Here’s a shocking stat: according to the Verizon Data Breach Investigations Report , 81% of hacking-related breaches leverage either stolen or weak passwords. Authentication Apps: Consider this the artisanal gelato of the 2FA world. What Exactly is 2FA?

Authentication 115

Authentication Passwords Mobile VPN 115

Security Affairs

MAY 8, 2023

In early April, the ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International). The authenticity of the leaked private key was confirmed by Alex Matrosov, founder of firmware security firm Binarly.

Data breaches 81

Data breaches Ransomware Firmware Manufacturing 81

Security Affairs

JANUARY 20, 2023

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. The company added that the unauthorized accessed were the result of credential stuffing attacks and that its systems were not breached. .” What is credential stuffing?

Data breaches 90

Data breaches Identity Theft Accountability Passwords 90

Krebs on Security

AUGUST 1, 2018

Reddit.com today disclosed that a data breach exposed some internal data, as well as email addresses and passwords for some Reddit users. As Web site breaches go, this one doesn’t seem too severe. APP-BASED AUTHENTICATION. “We point this out to encourage everyone here to move to token-based 2FA.”

Authentication 195

Authentication Mobile Passwords Accountability 195