Troy Hunt

MARCH 4, 2020

Since launching version 2 of Pwned Passwords with the k-anonymity model just over 2 years ago now, the thing has really gone nuts (read that blog post for background otherwise nothing from here on will make much sense). They could be searching for any password whose SHA-1 hash begins with those characters. Very slick!

Passwords 275

Passwords Data breaches Risk Encryption 275

Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach that exposed customers’ network information (CPNI), including phone numbers and calls records. T-Mobile has disclosed a data breach exposing customers’ account’s information. ” reads the statement published by the company. Pierluigi Paganini.

Data breaches 137

Data breaches Mobile Telecommunications Wireless 137

Adam Levin

NOVEMBER 27, 2018

Amazon was hit with a data breach just days before Black Friday and Cyber Monday, the biggest shopping time of the year. The major data breach exposed names and email addresses of customers due to a technical error on their website. The issue has been fixed. The impacted customers have been contacted.”.

Data breaches 146

Data breaches Passwords Accountability Hacking 146

CyberSecurity Insiders

APRIL 25, 2022

A Caribbean based company is urging its customers to delete credit card info saved onto its website after it detected a data breach on its servers. Aeropost, Inc that is into the business of logistics and e-commerce, is asking its customers to delete all card related info saved onto the company’s account, respectively.

Data breaches 86

Data breaches Banking Accountability Cyber Attacks 86

Identity IQ

JANUARY 19, 2021

With all that transpired over the last few months, and even with the SolarWinds cyberattack making headlines , it might be easy to forget that data breaches and hacks continue to expose the personal information of millions. This leaves victims of the data breaches vulnerable to identity theft. million customer accounts.

Data breaches 105

Data breaches Identity Theft Small Business Passwords 105

Security Affairs

MARCH 31, 2020

Marriott disclosed a new security breach detected at the end of February 2020 that could impact up to 5.2 Marriott International discloses a data breach that exposed the personal information of roughly 5.2 ” reads the data breach notification published by the company. million of its guests.

Data breaches 117

Data breaches Passwords Advertising Accountability 117

Security Affairs

APRIL 29, 2019

A cyber survey conducted by the United Kingdom’s National Cyber Security Centre (NCSC) revealed that ‘123456’ is still the most hacked password. Security experts at the United Kingdom’s National Cyber Security Centre (NCSC) analyzed the 100,000 most-commonly re-occurring breached passwords using data from Have I Been Pwned (HIBP).

Passwords 107

Passwords Accountability Data breaches Advertising 107

The Last Watchdog

AUGUST 19, 2021

Instead of addressing the security gaps that have plagued T-Mobile for years, they are offering their customers temporary identity protection when breaches happen, as if to say, ‘This is the best we can do.’. For T-Mobile, this is the sixth major breach since 2018. Joshua Arsenio, Director, Security Compass Advisory.

Mobile 306

Mobile Data breaches Authentication Accountability 306

Krebs on Security

MARCH 13, 2019

[ NASDAQ: SZMK ] says it is investigating a security incident in which a hacker was reselling access to a user account with the ability to modify ads and analytics for a number of big-name advertisers. He acknowledged that the purloined account had the ability to add or modify the advertising creatives that get run on customer ad campaigns.

Accountability 211

Accountability Passwords Advertising Penetration Testing 211

Schneier on Security

APRIL 2, 2020

Marriott announced another data breach, this one affecting 5.2 name, mailing address, email address, and phone number) Loyalty Account Information (e.g., account number and points balance, but not passwords) Additional Personal Details (e.g., Marriott announced another data breach, this one affecting 5.2

Hacking 306

Hacking Accountability Data breaches Government 306

Security Affairs

NOVEMBER 22, 2019

Bad news for T-Mobile prepaid customer, the US-based telecom giant T-Mobile today disclosed a new data breach incident. The US branch of the telecommunications giant T -Mobile disclosed a security breach that according to the company impacted a small number of customers of its prepaid service. Pierluigi Paganini.

Wireless 100

Wireless Data breaches Mobile Telecommunications 100

Security Affairs

NOVEMBER 23, 2018

Software company OSIsoft has suffered a data breach, the firm confirmed that all domain accounts have likely been compromised. Software company OSIsoft notified security breach to employees, interns, consultants, and contractors. ” reads the data breach notification. Wednesday, April 18, 2018.

Data breaches 83

Data breaches Software Passwords Accountability 83

Security Affairs

NOVEMBER 23, 2019

Chinese smartphone vendor OnePlus has suffered a new data breach, according to a company’s notice hackers accessed customers’ order information. OnePlus disclosed a data breach, an “unauthorized party” accessed some customers’ order information, including names, contact numbers, emails, and shipping addresses.

Data breaches 102

Data breaches Passwords Advertising Accountability 102

Security Affairs

NOVEMBER 15, 2020

million Pluto TV user accounts on a hacking forum for free, he claims they were stolen by ShinyHunters threat actor. The dump includes PLUTO TV’s display name, email address, bcrypt hashed password, birthday, device platform, and IP address. accounts exposed appeared first on Security Affairs. A hacker has shared 3.2

Accountability 103

Accountability Hacking Data breaches Passwords 103

Adam Levin

APRIL 6, 2020

Marriott International announced a data breach that may have exposed the information of 5.2 This is the second major data breach that Marriott has experienced in recent years; in 2018, the company announced that the information of 327 million customers of subsidiary Starwoodhad been compromised in a similar incident. .

Data breaches 187

Data breaches Financial Services Passwords Insurance 187

Security Affairs

JUNE 10, 2019

Retro video game website Emuparadise revealed to have suffered a data breach that exposed 1.1 Million accounts back in April 2018. The security breach occurred in April 2018 and exposed account information for approximately 1.1 million Emuparadise forum members. million Emuparadise forum members.

Data breaches 73

Data breaches Advertising Cybercrime Passwords 73

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. Earlier in August, Poshmark , a social commerce marketplace where people in the United States can buy and sell new or used clothing, shoes, and accessories, disclosed a data breach that took place in May 2018.

Accountability 85

Accountability Data breaches Passwords Advertising 85

Malwarebytes

AUGUST 16, 2023

The site confirms that there has been a data breach The stolen information could include your discord.io username and your Discord ID, your email-address, your billing address, and a salted and hashed password if you signed up in 2018 or earlier. (In In 2018 discord.io Change your password. Take your time.

Data breaches 93

Data breaches Authentication Passwords Phishing 93

Security Affairs

MAY 29, 2019

The news aggregator Flipboard announced that it suffered a breach, unauthorized users had access to some databases storing user account information. The news and social media aggregator Flipboard disclosed on Tuesday that it suffered a breach, unauthorized users had access to some databases storing user information.

Data breaches 66

Data breaches Accountability Passwords Advertising 66

Security Boulevard

JUNE 26, 2023

The end result of these types of cyber attacks are often highly public and damaging data breaches. 1 in 4 Americans reported that they would stop doing business with a company following a data breach, and 67% of consumers reported a loss of trust in an organization following a breach. What Are Data Breaches?

Data breaches 52

Data breaches Healthcare Telecommunications Financial Services 52

Security Affairs

SEPTEMBER 25, 2018

Another fashion retailer suffered a data breach, the victim is SHEIN that announces the security breach affected 6.42 The retailer hired a forensic cybersecurity firm as well as an international law firm to investigate the security breach. ” reads the data breach notification. million customers.

Data breaches 80

Data breaches Retail Advertising Passwords 80

Security Affairs

SEPTEMBER 27, 2019

DoorDash is a San Francisco–based on-demand food delivery service, the company confirmed it has suffered a data breach that exposed roughly 5 million users. DoorDash announced a data breach that exposed the personal information of 4.9 Users who joined after April 5, 2018 are not affected. “Approximately 4.9

Data breaches 69

Data breaches Passwords Advertising Banking 69

Hacker Combat

SEPTEMBER 6, 2021

Hackers took advantage of the mishap to gain unauthorized access to email accounts and lots of customer’s data was exposed. SEC insisted Cetera was responsible for exposing the personal data of more than 4,300 clients and customers between 2017 November and 2020 June. Often, hackers use phishing emails to target employees.

Accountability 100

Accountability Hacking Financial Services Data breaches 100

Security Affairs

JANUARY 10, 2019

The social media platform Reddit has notified users that some of them have been locked out of their accounts after detecting suspicious activity. Reddit locked down a large number of user accounts after due to a security concern after detecting suspicious activity on them. . ” reads a post published by one of the Reddit admins.

Accountability 83

Accountability Data breaches Passwords Advertising 83

Malwarebytes

OCTOBER 3, 2022

I have an embarrassing confession to make: I reuse passwords. I am not a heavy re-user, nothing crazy, I use a password manager to handle most of my credentials but I still reuse the odd password from time to time. It seems obvious and important therefore to tell users not to reuse passwords.

Passwords 93

Passwords Password Management Accountability Internet 93

Security Affairs

AUGUST 1, 2018

Reddit Warns Users of Data Breach. Reddit is warning its users of a security breach, an attacker broke into the systems of the platform and accessed user data. Reddit is warning its users of a security breach, a hacker broke into the systems of the platform and accessed user data.

Data breaches 59

Data breaches Backups Passwords Authentication 59

SecureWorld News

SEPTEMBER 17, 2020

New York Attorney General Letitia James just announced the settlement of a data breach lawsuit between the AG's office and Dunkin' Donuts. According to state investigators, Dunkin' Donuts failed to respond to a series of successful cyber attacks that left tens of thousands of customer's online accounts vulnerable.

Data breaches 98

Data breaches Accountability Cyber Attacks Cybersecurity 98

Krebs on Security

FEBRUARY 19, 2020

Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. 13, 2018 and Mar.

VPN 355

VPN Passwords Software Telecommunications 355

Security Affairs

AUGUST 30, 2018

Air Canada data breach – The incident was confirmed by the company and may have affected 20,000 customers (1%) of its 1.7 The data breach of the day is the one suffered by Air Canada that may have affected 20,000 customers (1%) of its 1.7 22-24, 2018. 22-24, 2018. million mobile app users.

Data breaches 54

Data breaches Mobile Financial Services Advertising 54

Security Affairs

MARCH 1, 2021

Top executives of the software firm SolarWinds blamed an intern for having used a weak password for several years, exposing the company to hack. Top executives of the SolarWinds firm believe that the root cause of the recently disclosed supply chain attack is an intern that has used a weak password for several years. Confronted by Rep.

Passwords 103

Passwords Cloud Migration Government Hacking 103

Krebs on Security

AUGUST 12, 2020

Several stories here have highlighted the importance of creating accounts online tied to your various identity, financial and communications services before identity thieves do it for you. ” In short, although you may not be required to create online accounts to manage your affairs at your ISP, the U.S. .”

Accountability 339

Accountability Mobile Banking Passwords 339

Krebs on Security

SEPTEMBER 30, 2023

Within this timeframe, Snatch threat actors exploited the victim’s network moving laterally across the victim’s network with RDP for the largest possible deployment of ransomware and searching for files and folders for data exfiltration followed by file encryption.” was also used to register an account at the online game stalker[.]so

Ransomware 214

Ransomware Accountability Cybercrime Backups 214

Security Affairs

MAY 15, 2020

Data appears to come from past data breaches, the oldest one dates back as 2012 while the latest one dates April 2020. million phone numbers that are part of Dubsmash data breach that occurred in 2018. million April 2018 Netlog.com (Twoo.com) 57 million November 2012 Dubsmash.com Phone numbers 47.1

Data breaches 108

Data breaches Advertising Passwords Hacking 108

Security Affairs

FEBRUARY 27, 2021

The telecommunications giant T-Mobile disclosed a data breach after some of its customers were apparently affected by SIM swap attacks. The telecommunications provider T-Mobile has disclosed a data breach after it became aware that some of its customers were allegedly victims of SIM swap attacks.

Mobile 96

Mobile Telecommunications Data breaches Identity Theft 96

Security Affairs

APRIL 23, 2019

We engaged one of the leading data security firms to conduct a thorough investigation, which traced the unauthorized activity to a phishing email received in July 2018. ” The company hired a security firm to investigate the incident, it discovered that the attack begun with a phishing email received in July 2018.

Passwords 71

Passwords Retail Accountability Data breaches 71

Troy Hunt

DECEMBER 19, 2017

Yesterday, I wrote the first part of this 5-part series on fixing data breaches and I focused on education. The next few parts of this series all focus on cures - how do we fix data breaches once bad code has already been written or bad server configurations deployed? Who now owns that data? The cat site?

Data breaches 132

Data breaches Data collection B2B Mobile 132

Security Affairs

MARCH 19, 2019

Security experts at Group-IB presented at Money2020 Asia the results of an interesting analysis of hi-tech crime landscape in Asia in 2018. The number of leaked cards increased in 2018 by 56%. The total underground market value of Singaporean banks’ cards compromised in 2018 is estimated at nearly $640 000.

Banking 82

Banking Government Passwords Marketing 82