Krebs on Security

JULY 18, 2023

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] com , a service that sold access to billions of passwords and other data exposed in countless data breaches. In 2019, a Canadian company called Defiant Tech Inc. Abusewith[.]us

Hacking 190

Hacking Accountability Data breaches Marketing 190

Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach that exposed customers’ network information (CPNI), including phone numbers and calls records. T-Mobile has disclosed a data breach exposing customers’ account’s information. SecurityAffairs – hacking, T-Mobile). Pierluigi Paganini.

Data breaches 138

Data breaches Mobile Telecommunications Wireless 138

Security Affairs

DECEMBER 19, 2018

National Aeronautics and Space Administration (NASA) notifies employees of a data breach that exposed social security numbers and other personal information. 23, 2018, NASA cybersecurity personnel began investigating a possible compromise of NASA servers where personally identifiable information (PII) was stored.”

Data breaches 108

Data breaches Advertising Hacking Cybersecurity 108

Security Affairs

OCTOBER 31, 2019

Two hackers have pleaded guilty to hacking Uber and LinkedIn’s Lynda.com service in 2016 and attempted to extort money from the two companies. Brandon Charles Glover and Vasile Mereacre are two hackers that have pleaded guilty to hacking Uber and LinkedIn’s Lynda.com service in 2016. Pierluigi Paganini. SecurityAffairs –.

Data breaches 68

Data breaches Hacking Advertising Accountability 68

Security Affairs

JUNE 10, 2019

Retro video game website Emuparadise revealed to have suffered a data breach that exposed 1.1 Million accounts back in April 2018. The security breach occurred in April 2018 and exposed account information for approximately 1.1 SecurityAffairs – Emuparadise, hacking). Pierluigi Paganini.

Data breaches 73

Data breaches Advertising Cybercrime Passwords 73

The Last Watchdog

APRIL 4, 2022

They are often unaware of the risks they take on, which can include hacking, fraud, phishing, and more. SMBs and enterprises alike have been struggling with APIs as a mechanism for information security. A breach should always trigger a comprehensive crisis communication plan involving the board, C-suite, and other stakeholders.

Hacking 222

Hacking Penetration Testing Data breaches Authentication 222

Security Affairs

NOVEMBER 23, 2019

Chinese smartphone vendor OnePlus has suffered a new data breach, according to a company’s notice hackers accessed customers’ order information. OnePlus disclosed a data breach, an “unauthorized party” accessed some customers’ order information, including names, contact numbers, emails, and shipping addresses.

Data breaches 104

Data breaches Passwords Advertising Accountability 104

Security Affairs

NOVEMBER 15, 2020

million Pluto TV user accounts on a hacking forum for free, he claims they were stolen by ShinyHunters threat actor. million Pluto TV user records, he also added that the service was hacked by ShinyHunters. SecurityAffairs – hacking, ShinyHunters). The post ShinyHunters hacked Pluto TV service, 3.2M A hacker has shared 3.2

Accountability 105

Accountability Hacking Data breaches Passwords 105

Security Affairs

MAY 17, 2019

The popular question-and-answer platform for programmers Stack Overflow announced on Thursday that is has suffered a data breach. The news of a data breach makes the headlines, this time the victim is the popular question-and-answer platform for programmers Stack Overflow. SecurityAffairs – data breach, hacking).

Data breaches 82

Data breaches Advertising Engineering Passwords 82

Security Affairs

NOVEMBER 22, 2019

Bad news for T-Mobile prepaid customer, the US-based telecom giant T-Mobile today disclosed a new data breach incident. The US branch of the telecommunications giant T -Mobile disclosed a security breach that according to the company impacted a small number of customers of its prepaid service. Pierluigi Paganini.

Wireless 101

Wireless Data breaches Mobile Telecommunications 101

Security Affairs

FEBRUARY 26, 2021

Data Breach: WizCase team uncovered a massive data leak containing private information about Turkish Citizens through a misconfigured Amazon S3 bucket. Police report containing accident details, as well as involved parties phone numbers, driver’s license information, name-surname, and national identifier.

Data breaches 103

Data breaches Insurance Identity Theft Education 103

Security Affairs

SEPTEMBER 27, 2019

DoorDash is a San Francisco–based on-demand food delivery service, the company confirmed it has suffered a data breach that exposed roughly 5 million users. DoorDash announced a data breach that exposed the personal information of 4.9 ” reads the security notice published on the website.

Data breaches 70

Data breaches Passwords Advertising Banking 70

Security Affairs

AUGUST 18, 2018

According to a report from cyber threat intelligence firm Risk Based Security some 2.6. billion data records have been exposed in data breached in the first half of 2018. billion data records have been exposed in the first half of 2018. 2018 has been a curious year. billion records.

Data breaches 58

Data breaches Social Engineering Cyber threats Phishing 58

Security Affairs

MAY 29, 2019

The news and social media aggregator Flipboard disclosed on Tuesday that it suffered a breach, unauthorized users had access to some databases storing user information. Hackers had access to the company systems between June 2, 2018, and March 23, 2019, and again on April 21-22, 2019. ” continues the security notice. .

Data breaches 67

Data breaches Accountability Passwords Advertising 67

Security Affairs

JUNE 5, 2019

Recovery agency for patient collections American Medical Collection Agency (AMCA) suffered a data breach that could impact many of its customers. American Medical Collection Agency (AMCA) suffered a data breach that could impact many of its customers, the company still hasn’t disclosed details. of LabCorp patients.

Data breaches 73

Data breaches Advertising Insurance Banking 73

Security Affairs

AUGUST 9, 2020

US Office of the Comptroller of the Currency (OCC) regulator has fined the credit card provider Capital One Financial Corp with $80 million over 2019 data breach. The US Office of the Comptroller of the Currency (OCC) has imposed an $80 million fine to the credit card provider Capital One Financial Corp over 2019 data breach.

Hacking 89

Hacking Banking Data breaches Advertising 89

Security Affairs

APRIL 3, 2021

More clients of Capital One have been impacted in the 2019 data breach, the US bank is notifying them of their SSNs exposure. US bank Capital One notified a number of additional customers that their Social Security numbers were exposed in the data breach that took place in July 2019. District Court in Seattle.

Hacking 77

Hacking Data breaches Banking Small Business 77

Security Affairs

FEBRUARY 2, 2024

Olsen, the Assistant Attorney General for National Security; and James Smith, the Assistant Director in Charge of the New York Field Office of the Federal Bureau of Investigation (“FBI”), announced today that JOSHUA ADAM SCHULTE was sentenced to 40 years in prison by U.S. District Judge Jesse M.

Computers and Electronics 102

Computers and Electronics Engineering Hacking Data breaches 102

Security Affairs

JULY 9, 2019

The UK’s data privacy regulator plans to fine giant hotel chain Marriott International with a £99 million ($123 million) under GDPR over 2014 data breach. ’s Information Commissioner’s Office, Marriott International was not compliant to the European Union’s data protection regulation GDPR.

Data breaches 67

Data breaches Data privacy Advertising Encryption 67

Security Affairs

MAY 15, 2020

Security experts from Cyble reported that a threat actor is attempting to sell twenty-nine databases on a hacker forum since May 7. Data appears to come from past data breaches, the oldest one dates back as 2012 while the latest one dates April 2020. million December 2018 Shein.com 42 million June 2018 Fotolog.com 33.5

Data breaches 111

Data breaches Advertising Passwords Hacking 111

Security Affairs

JULY 8, 2019

The UK Information Commissioner’s Office (ICO) fined British Airways with £183 million for failing to protect the personal information of roughly 500,000 customers during 2018 security breach. “The proposed fine relates to a cyber incident notified to the ICO by British Airways in September 2018. .

Data breaches 72

Data breaches Advertising Hacking Mobile 72

Security Affairs

SEPTEMBER 1, 2021

Securities and Exchange Commission (SEC) announced sanctions against several organizations over email account hacking. Securities and Exchange Commission (SEC) announced sanctions against eight entities belonging to three companies over email account hacking due to cybersecurity failures. Pierluigi Paganini.

Accountability 90

Accountability Hacking Financial Services Cybersecurity 90

Security Affairs

JULY 30, 2019

– card issuer and financial corporation suffered a data breach that exposed personal information from more than 100 million credit applications. Thompson (33) is suspected to be responsible for the data breach. On July 17, 2019, Capital One was informed of the incident by a GitHub user who saw the post.

Data breaches 77

Data breaches Computers and Electronics Banking Small Business 77

Security Affairs

APRIL 7, 2020

it has been hacked, the company admitted the incident while a hacker group named NN Hacking Group is offering the stolen data for sale on the dark web. If confirmed, the situation is very serious because the email provider has never disclosed a data breach even if it was obliged by the European privacy legislation GDPR.

Hacking 74

Hacking Data breaches Advertising Accountability 74

Security Affairs

SEPTEMBER 22, 2023

In August 2018, Air Canada suffered another data breach. The company announced that the security incident may have affected 20,000 customers (1%) of its 1.7 22-24, 2018, it added that financial data was protected, but invited to remain vigilant for fraudulent credit card transactions.

DDOS 119

DDOS Data breaches Cyber Attacks Mobile 119

Security Affairs

MARCH 7, 2024

According to the report, in 2023 tech support scams and extortion crimes increased, while phishing, non-payment/non-delivery scams, and personal data breach slightly decreased. Established in 2018, RAT streamlines communications with financial institutions and FBI field offices to facilitate the freezing of funds for victims.”

Cybercrime 115

Cybercrime Internet Internet Scams 115

Security Affairs

JUNE 23, 2019

NASA Office of Inspector General revealed that the Agency’s network was hacked in April 2018, intruders exfiltrated roughly 500 MB of data related to Mars missions. The report says that hackers stole roughly 500 MB of data related to Mars missions from NASA’s Jet Propulsion Laboratory in Southern California.

Hacking 111

Hacking Data breaches Advertising Firewall 111

Security Affairs

FEBRUARY 21, 2020

The Defense Information Systems Agency (DISA) US agency in charge of secure IT and communication for the White House has disclosed a data breach. The agency sent a data breach notification to its employees last week informing them of a security breach that took place last year between May and July.

Data breaches 121

Data breaches Telecommunications Advertising Cyber Attacks 121

Security Affairs

JUNE 17, 2020

A CIA elite hacking unit that developed cyber-weapons failed in protecting its operations, states an internal report on the Vault 7 data leak. In March, Joshua Schulte , a former CIA software engineer that was accused of stealing the agency’s hacking tools and leaking them to WikiLeaks, was convicted of only minor charges.

Hacking 120

Hacking Engineering Data breaches Advertising 120

Security Affairs

APRIL 22, 2024

The threat actors shared a portion of the stolen data with TechCrunch as proof of the hack, it includes records on current and former government officials, diplomats, and politically exposed people. Curiously, in 2011, Thomson Reuters acquired World-Check, then in October 2018, Thomson Reuters closed a deal with The Blackstone Group.

Risk 122

Risk Spyware Hacking Accountability 122

Security Affairs

FEBRUARY 27, 2021

The telecommunications giant T-Mobile disclosed a data breach after some of its customers were apparently affected by SIM swap attacks. The telecommunications provider T-Mobile has disclosed a data breach after it became aware that some of its customers were allegedly victims of SIM swap attacks. Pierluigi Paganini.

Mobile 98

Mobile Telecommunications Data breaches Identity Theft 98

Krebs on Security

JULY 21, 2023

Many things have changed since 2018, such as the names of the companies in the Fortune 100 list. But one aspect of that vaunted list that hasn’t shifted much since is that very few of these companies list any security professionals within their top executive ranks. Nor is the average pay hugely different among all these roles.

CSO 207

CSO CISO Insurance Risk 207

Security Affairs

OCTOBER 24, 2023

If cybercriminals discover the environment file first, it puts the organization at risk of unauthorized access to critical data, potential data breaches, data tampering, financial losses, reputational damage, and legal and compliance issues,” Cybernews researchers write.

Data breaches 112

Data breaches Social Engineering Phishing DDOS 112

SecureWorld News

NOVEMBER 24, 2021

GoDaddy confirmed more than 1 million users' data was exposed after it was the victim of a malicious hacking incident. And it was more than two months before they realized the breach had happened. GoDaddy responds to data breach. This is the third data breach GoDaddy has experienced since 2018.

Data breaches 88

Data breaches Passwords CISO Media 88

Security Affairs

OCTOBER 23, 2020

In March 2018, the Department of Homeland Security and Federal Bureau of Investigation issued a joint technical alert to warn of attacks on US critical infrastructure powered by Russian threat actors. Hackers also targeted Exim mail agents ( CVE 2019-10149 ) and Fortinet SSL VPNs ( CVE-2018-13379 ). Pierluigi Paganini.

Government 122

Government Hacking Advertising Passwords 122

Security Affairs

NOVEMBER 2, 2023

The World Economic Forum’s (WEF’s) Global Risks Report , says, “The largest (data breach) was in India, where the government ID database, Aadhaar, reportedly suffered multiple breaches that potentially compromised the records of all 1.1 billion registered citizens.

Identity Theft 111

Identity Theft Data breaches Telecommunications Mobile 111

Security Affairs

JUNE 27, 2019

In 2018 PCM generated roughly $2.2 The attack appears to be financially motivated, attackers appeared primarily interested in stealing data that could be used in gift card fraud scheme. Krebs speculates that intruders could be the same that hacked the Indian IT outsourcing giant Wipro Ltd. SecurityAffairs – PCM, hacking).

Hacking 94

Hacking Advertising Accountability Data breaches 94