Graham Cluley

MARCH 13, 2024

Streaming company Roku has revealed that over 15,000 customers' accounts were hacked using stolen login credentials from unrelated data breaches. Read more in my article on the Hot for Security blog.

Data breaches 110

Data breaches Accountability Hacking Passwords 110

Security Affairs

MARCH 16, 2024

Unemployment agency France Travail (Pôle Emploi) recently suffered a data breach that could impact 43 million people. On August 2023, the French government employment agency Pôle emploi suffered a data breach and notified 10 million individuals impacted by the security breach.

Data breaches 111

Data breaches Cybercrime Government Ransomware 111

WIRED Threat Level

DECEMBER 28, 2022

The password manager's most recent data breach is so concerning, users need to take immediate steps to protect themselves.

Password Management 113

Password Management Data breaches Passwords Hacking 113

Security Affairs

DECEMBER 23, 2023

Mobile virtual network operator Mint Mobile suffered a new data breach, threat actors had access to customers’ personal information. Mint Mobile experienced a recent data breach, exposing customers’ personal information to unauthorized access by threat actors.

Mobile 113

Mobile Data breaches Wireless Data collection 113

Security Affairs

SEPTEMBER 27, 2023

DarkBeam left an Elasticsearch and Kibana interface unprotected, exposing records from previously reported and non-reported data breaches. DarkBeam has apparently been collecting information to alert its customers in case of a data breach. Sample of leaked data. What to do if your password was leaked?

Passwords 141

Passwords Data breaches Phishing Hacking 141

Security Affairs

DECEMBER 11, 2023

Toyota Financial Services (TFS) disclosed a data breach, threat actors had access to sensitive personal and financial data. Toyota Financial Services (TFS) is warning customers it has suffered a data breach that exposed sensitive personal and financial data.

Financial Services 114

Financial Services Data breaches Identity Theft Banking 114

CSO Magazine

FEBRUARY 28, 2023

Password management company LastPass, which was hit by two data breaches last year , has revealed that data exfiltrated during the first intrusion, discovered in August, was used to target the personal home computer of one of its devops engineers and launch a second successful cyberatttack, detected in November.

Data breaches 133

Data breaches Engineering Password Management Hacking 133

CyberSecurity Insiders

DECEMBER 1, 2022

LastPass, a password management service offering company, has disclosed that it has suffered a data breach in an attack that might be linked to the August data leak where hackers stole vital information from the servers of the said company.

Data breaches 132

Data breaches Password Management Passwords Encryption 132

Security Affairs

MARCH 19, 2023

The NBA (National Basketball Association) disclosed a data breach after a third-party firm providing a newsletter service was breached. The NBA (National Basketball Association) is notifying followers of a data breach after a third-party company providing a newsletter service was breached.

Data breaches 94

Data breaches Hacking Passwords Phishing 94

Security Affairs

APRIL 11, 2020

San Francisco International Airport (SFO) disclosed a data breach, its websites SFOConnect.com and SFOConstruction.com were hacked last month. In March hackers compromised two websites of San Francisco International Airport (SFO) and now it disclosed a data breach. ” continues the data breach notice.

Data breaches 141

Data breaches Hacking Telecommunications Passwords 141

SecureWorld News

DECEMBER 7, 2023

New revelations have shed light on the extensive fallout of the 23andMe data breach, which exposed the personal information of a staggering 6.9 This significant update comes almost two months after the genetic testing company initially reported a breach affecting 14,000 individuals. million users.

Data breaches 104

Data breaches Passwords Data privacy Accountability 104

Krebs on Security

MAY 19, 2020

In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” ” Items SBU authorities seized after raiding Sanix’s residence.

Passwords 343

Passwords Accountability Hacking Password Management 343

Security Affairs

MARCH 10, 2023

AT&T is warning some of its customers that some of their information was exposed after the hack of a third-party vendor’s system. AT&T is notifying millions of customers that some of their information was exposed after a third-party vendor was hacked. ”​ Exposed data don’t include financial information (i.e.

Data breaches 90

Data breaches Hacking Wireless Telecommunications 90

Security Affairs

JANUARY 23, 2022

OpenSubtitles has suffered a data breach, the maintainers confirmed that the incident impacted 7 Million subscribers. OpenSubtitles is a popular subtitles websites, it suffered a data breach that affected 6,783,158 subscribers. The hack is the result of poor cyber security since its launch in 2006, administrator OSS said.

Data breaches 123

Data breaches Passwords Hacking Accountability 123

Security Affairs

JANUARY 7, 2022

The appointment scheduling service FlexBooker discloses a data breach that impacted over 3.7 Stolen data are now available for sale on multiple cybercrime forums. The threat actors claim the stolen database contains customer information, including names, emails, phone numbers, hashed passwords, and password salt.

Data breaches 138

Data breaches Accountability Passwords Cybercrime 138

Security Affairs

FEBRUARY 23, 2024

Australian telecommunications provider Tangerine disclosed a data breach that impacted roughly 230,000 individuals. Tangerine suffered a data breach that exposed the personal information of roughly 230,000 individuals. Access to the affected legacy database has also been closed.”continues

Data breaches 96

Data breaches Telecommunications Banking Mobile 96

Security Affairs

JANUARY 19, 2024

American global apparel and footwear company VF Corp revealed that the December data breach impacted 35.5 VF Corp also added that it has found no evidence that customer passwords were stolen. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, VF Corp)

Data breaches 116

Data breaches Retail Insurance Passwords 116

SecureWorld News

APRIL 2, 2024

After weeks of denial, AT&T has finally acknowledged a massive data breach impacting 73 million current and former customer accounts. The telecom giant had initially claimed that a large trove of personal data leaked on the Dark Web did not originate from their systems.

Data breaches 85

Data breaches Identity Theft Authentication Accountability 85

Security Affairs

OCTOBER 17, 2022

Australian retail giant Woolworths disclosed a data breach that impacted approximately 2.2 Bad news for the customers of the MyDeal online marketplace, the Australian retail giant Woolworths disclosed a data breach that impacted approximately 2.2 Also, no customer account passwords were accessed. million of them.

Retail 117

Retail Data breaches Passwords Accountability 117

Graham Cluley

MARCH 20, 2024

Are you using the same passwords in multiple places online? Well, stop. Stop right now. And make sure that you've told your friends and family to stop being reckless too. Read more in my article on the Hot for Security blog.

Passwords 101

Passwords Hacking Data breaches Phishing 101

Security Affairs

OCTOBER 2, 2023

The European Telecommunications Standards Institute (ETSI) disclosed a data breach, threat actors had access to a database of its users. ” reads the data breach notification published by the European Telecommunications Standards Institute. The vulnerability on which the attack was based has been fixed.”

Telecommunications 113

Telecommunications Data breaches Technology Cybersecurity 113

Security Affairs

NOVEMBER 22, 2021

GoDaddy suffered a data breach that impacted up to 1.2 GoDaddy discloses a data breach that impacted up to 1.2 million of its customers, threat actors breached the company’s Managed WordPress hosting environment. The original WordPress Admin password that was set at the time of provisioning was exposed.

Data breaches 124

Data breaches Passwords Accountability Phishing 124

Security Affairs

JULY 8, 2021

The American multinational investment bank and financial services firm Morgan Stanley discloses a data breach caused by the hack of an Accellion FTA server of a third-party vendor. The hack of the FTA server took place in March, but the hacker had access to the data of Morgan Stanley customers in May.

Data breaches 122

Data breaches Hacking Banking Financial Services 122

Security Affairs

JANUARY 11, 2021

American technology company Ubiquiti Networks is disclosed a data breach and is notifying its customers via email. American technology vendor Ubiquiti Networks suffered a data breach and is sending out notification emails to its customers asking them to change their passwords and enable 2FA for their accounts.

Data breaches 116

Data breaches Passwords Accountability IoT 116

Security Affairs

AUGUST 26, 2023

Pôle emploi, the French government employment agency suffered a data breach that impacted 10 million individuals. The French government employment agency Pôle emploi suffered a data breach and is notifying 10 million individuals impacted by the security breach.

Data breaches 85

Data breaches Government Passwords Hacking 85

Security Affairs

NOVEMBER 1, 2020

A data breach broker is selling account databases containing a total of 34 million user records stolen from 17 companies. The threat actor is advertising the stolen data since October 28 on a hacker forum. Bleeping computer detailed for each company the information exposed in the data breach. million (8.1

Data breaches 145

Data breaches Accountability Advertising Passwords 145

Security Affairs

DECEMBER 1, 2022

Data breaches can be devastating for organizations, these are 3 of the worst incidents that could have been prevented. Data breaches can be devastating for organizations and even entire countries. Eliminating the risk of a data breach is nearly impossible, but some things can be done to reduce it significantly.

Data breaches 95

Data breaches Passwords Social Engineering Encryption 95

Identity IQ

JANUARY 16, 2023

LifeLock Data Breach Compromises Thousands! Recently, thousands of Norton LifeLock customer accounts were compromised in a data breach. Credential stuffing is a type of data breach where hackers use previously stolen lists of information, such as usernames and passwords, to gain unauthorized access to accounts.

Data breaches 105

Data breaches Identity Theft Password Management Passwords 105

Troy Hunt

NOVEMBER 7, 2018

It's just another day on the internet when the news is full of headlines about accounts being hacked. This is when hackers try usernames and password combos leaked in data breaches at other companies, hoping that some users might have reused usernames and passwords across services.

Passwords 238

Passwords Accountability Hacking Education 238

Security Affairs

APRIL 14, 2023

Open-source media player software provider Kodi discloses a data breach after threat actors stole its MyBB forum database. Kodi has disclosed a data breach, threat actors have stolen the company’s MyBB forum database that contained data for over 400K users and private messages.

Data breaches 92

Data breaches Backups Passwords Accountability 92

Security Affairs

JUNE 18, 2021

The supermarket chain Wegmans US Wegmans discloses a data breach, customers information was exposed on the Internet due to a misconfiguration issue. Exposed data include customers’ names, addresses, phone numbers, birth dates, Shoppers Club numbers, as well as e-mail addresses and Wegmans.com account passwords.

Data breaches 108

Data breaches Passwords Accountability Marketing 108

Security Affairs

APRIL 21, 2023

The American Bar Association (ABA) disclosed a data breach, threat actors gained access to older credentials for 1,466,000 members. According to BleepingComputer, 1,466,000 members were impacted by this breach. The bad news is that many members used a default password assigned by the platform and never changed it over the time.

Data breaches 90

Data breaches Passwords Education Accountability 90

Security Affairs

JANUARY 23, 2023

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers. The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach , the incident exposed the data of 133 customers. reads the post published by TechCrunch.

Data breaches 86

Data breaches Accountability Social Engineering Small Business 86

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020.

Data breaches 91

Data breaches Retail Passwords Scams 91

Security Affairs

JANUARY 25, 2023

Zacks Investment Research (Zacks) disclosed a data breach, the security may have exposed the data of 820K customers. Zacks Investment Research (Zacks) disclosed a data breach, the security incident may have affected the personal information of its 820,000 customers. ” reads the notice of data breach.

Data breaches 86

Data breaches Passwords Accountability Hacking 86

Security Affairs

JANUARY 30, 2021

US wireless carrier UScellular discloses data breach, personal information of customers may have been exposed and their phone numbers ported. US wireless carrier UScellular discloses a data breach that exposed personal information of its customers. ” reads the USCellular data breach notification.

Data breaches 141

Data breaches Wireless Retail Accountability 141

Graham Cluley

JANUARY 3, 2023

Do you use the LastPass password manager? Did you know they suffered a data breach, and that your passwords may be at risk? You do now. Here's what you need to know.

Password Management 145

Password Management Data breaches Passwords Hacking 145