CyberSecurity Insiders

JANUARY 30, 2023

JD Sports, Britain’s online retailer of branded sportswear, has reportedly become a victim of a cyber attack that leaked information of over 10 million customers. Accessed information includes data related to phone numbers, email accounts, addresses, names, the location where the order was delivered, and the final 4 digits of bank cards.

Data breaches 109

Data breaches Retail Identity Theft Social Engineering 109

Security Affairs

NOVEMBER 1, 2020

A data breach broker is selling account databases containing a total of 34 million user records stolen from 17 companies. The threat actor is advertising the stolen data since October 28 on a hacker forum. Only RedMart, after being informed by Bleeping computer, disclosed a security breach. million (8.1

Data breaches 144

Data breaches Accountability Advertising Passwords 144

Security Affairs

JANUARY 30, 2021

US wireless carrier UScellular discloses data breach, personal information of customers may have been exposed and their phone numbers ported. US wireless carrier UScellular discloses a data breach that exposed personal information of its customers. ” reads the USCellular data breach notification.

Data breaches 140

Data breaches Wireless Retail Accountability 140

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data.

Data breaches 91

Data breaches Retail Passwords Accountability 91

Security Affairs

APRIL 11, 2020

San Francisco International Airport (SFO) disclosed a data breach, its websites SFOConnect.com and SFOConstruction.com were hacked last month. In March hackers compromised two websites of San Francisco International Airport (SFO) and now it disclosed a data breach. ” continues the data breach notice.

Data breaches 141

Data breaches Hacking Telecommunications Passwords 141

Security Affairs

MAY 3, 2021

Which are the most common causes of a Data Breach and how to prevent It? Data breaches are highly damaging and equally embarrassing for businesses and consumers. If you look at Verizon’s 2020 Data Breach Investigations Report, you can find some of the most common causes of data breaches.

Data breaches 136

Data breaches Social Engineering Engineering Network Security 136

Security Affairs

DECEMBER 14, 2020

The startup started reporting the security incident to its customers that had their data accidentally exposed online, only users who registered on its platform before or on March 17, 2020, were impacted. The company pointed out that financial information either passwords were not exposed. Pierluigi Paganini.

Data breaches 128

Data breaches Backups Software Passwords 128

Security Affairs

AUGUST 3, 2020

Havenly, a Denver-Based company, that realized an interior designer marketplace has disclosed a data breach that impacted 1.3 The US-based interior design web site Havenly has disclosed a data breach after the known threat actor ShinyHunters has leaked for free the databases of multiple companies on a hacker forum.

Data breaches 100

Data breaches Accountability Passwords Advertising 100

Security Affairs

JULY 8, 2021

The American multinational investment bank and financial services firm Morgan Stanley discloses a data breach caused by the hack of an Accellion FTA server of a third-party vendor. The security breach was first reported by BleepingComputer that also shared a copy of the data breach notification letter sent to the impacted customers.

Data breaches 121

Data breaches Hacking Banking Financial Services 121

Security Affairs

NOVEMBER 12, 2020

The popular children’s online playground Animal Jam has suffered a data breach that affected more than 46 million accounts. Animal Jam has suffered a data breach impacting 46 million accounts belonging to children and parents who signed up for the game. . million monthly active users. million monthly active users.

Data breaches 121

Data breaches Accountability Passwords Encryption 121

Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach that exposed customers’ network information (CPNI), including phone numbers and calls records. T-Mobile has disclosed a data breach exposing customers’ account’s information. ” reads the statement published by the company. Pierluigi Paganini.

Data breaches 134

Data breaches Mobile Telecommunications Wireless 134

Security Affairs

AUGUST 18, 2021

Yesterday T-Mobile confirmed a data breach but announced that it was still investigating the extent of the security breach. The company announced to have started a “deep technical review of the situation across our systems to identify the nature of any data that was illegally accessed.” Pierluigi Paganini.

Data breaches 100

Data breaches Mobile Telecommunications Wireless 100

Security Affairs

MARCH 16, 2020

In the meantime, if you have any further questions please drop us a direct message, call us on 01329 750 630, or visit our FAQs webpage [link] — Aerial Direct (@Aerial_Direct) March 13, 2020. To reassure you, the database did not include any passwords or financial details, such as bank account number or credit card information.”

Data breaches 105

Data breaches Telecommunications Passwords Advertising 105

Security Affairs

JUNE 30, 2020

A threat actor is selling databases containing data belonging to 14 different companies he claimed were hacked in 2020. The databases are available for sale on multiple hacker forums, the all includes usernames and hashed passwords. Company # of records Alleged Breach Date DarkThrone 282,825 June 2020 Efun 2.2

Data breaches 138

Data breaches Hacking Passwords Risk 138

Security Affairs

JUNE 13, 2023

The availability of the archive was reported by the data breach notification service Have I Been Pwned , which notified Zecks. According to HIBP, the records in the database contain names, addresses, phone numbers, email addresses, usernames, and passwords stored as unsalted SHA-256 hashes. ” reported HIBP.

Data breaches 85

Data breaches Passwords Cybercrime Encryption 85

Security Affairs

JANUARY 15, 2020

P&N Bank discloses data breach, customer account information, balances exposed. The Australian P&N Bank is notifying its customers a data breach that has exposed personally identifiable information (PII) and sensitive account data. SecurityAffairs – hacking, data breach).

Data breaches 57

Data breaches Banking Cyber Attacks Accountability 57

Security Affairs

APRIL 14, 2020

Quidd , an online marketplace for trading stickers, cards, toys, and other collectibles, discloses a data breach in has suffered in 2019. Quidd , the online marketplace for trading stickers, cards, toys, and other collectibles, discloses a data breach in has suffered in 2019, it is also recommending users to change their passwords.

Accountability 140

Accountability Hacking Data breaches Passwords 140

Security Affairs

MARCH 16, 2020

Last week, Open Exchange Rates disclosed a data breach that exposed the personal information and hashed passwords for customers of its API service. ” reads the data breach notification. ” @troyhunt pic.twitter.com/HfAwV7gtVq — Sylvia van Os (@SylvieLorxu) March 12, 2020. .”

Data breaches 105

Data breaches Passwords Advertising Accountability 105

Security Affairs

MARCH 7, 2023

The LastPass data breach was caused by the failure to update Plex on the home computer of one of the company updates. The security breach suffered by LastPass was caused by the failure to update Plex on the home computer of one of its engineers. ” reads the advisory published by Plex.

Software 97

Software Hacking Data breaches Media 97

Security Affairs

DECEMBER 11, 2020

The streaming service added that exposed data included Spotify account registration information such as user display name and password, email address, date of birth, and gender. SecurityAffairs – hacking, data leak). We apologize for any inconvenience this may cause” continues the notice. Pierluigi Paganini.

Passwords 100

Passwords Accountability Hacking Data breaches 100

Security Affairs

DECEMBER 31, 2021

The Have I Been Pwned data breach notification service now includes credentials for 441K accounts that were stolen by RedLine malware. The Have I Been Pwned data breach notification service now allows victims of the RedLine malware to check if their credentials have been stolen. Pierluigi Paganini.

Accountability 132

Accountability Malware Data breaches Passwords 132

Security Affairs

JUNE 2, 2021

This leak exposed users’ email addresses, IP addresses, Facebook data, and more to potential attack. The leaked data numbers in the millions and was accessible to anyone who possessed the link. There was no need for a password or login credentials to access the information, and the data was not encrypted.

Data breaches 108

Data breaches Accountability Mobile Phishing 108

Security Affairs

SEPTEMBER 21, 2020

Over 500,000 Activision accounts may have been hacked in a new data breach that the gaming firm suffered on September 20. More than 500,000 Activision accounts may have compromised as a result of a data breach suffered by the gaming firm on September 20, reported the eSports site Dexerto. Yeah, it's legit guys.

Hacking 107

Hacking Data breaches Accountability Passwords 107

Security Affairs

JULY 14, 2020

Auctions platform LiveAuctioneers admitted to have suffered a data breach that likely impacted approximately 3.4 Auctions platform LiveAuctioneers disclosed a a data breach that might have impacted approximately 3.4 ” reads the data breach notification published by the company. million users.

Hacking 100

Hacking Data breaches Identity Theft Advertising 100

Security Affairs

NOVEMBER 15, 2020

Retail giant The North Face has reset the passwords for some of its customers in response to a successful credential stuffing attack. Outdoor retail giant The North Face has forced a password reset for a number of its customers following a successful credential stuffing attack that took place on October 8th and 9th.

Passwords 116

Passwords Retail Data breaches Accountability 116

SecureWorld News

NOVEMBER 24, 2021

And it was more than two months before they realized the breach had happened. From there, the hacker was able to steal customer numbers and emails, the Wordpress Admin password, and other sensitive details from clients who had both active and inactive Wordpress sites. GoDaddy responds to data breach. customer numbers.

Data breaches 87

Data breaches Passwords CISO Media 87

Security Affairs

SEPTEMBER 23, 2020

The database containing personal information of over 600,000 clients of the US fitness chain Town Sports was exposed on the Internet. US fitness chain Town Sports has suffered a data breach, a database belonging to the company containing the personal information of over 600,000 people was exposed on the Internet.

Data breaches 91

Data breaches Phishing Passwords Advertising 91

Security Affairs

MAY 15, 2020

Data appears to come from past data breaches, the oldest one dates back as 2012 while the latest one dates April 2020. cyber #cybersecurity @BleepinComputer #malware pic.twitter.com/CtnppIyhxn — Cyble (@AuCyble) May 14, 2020. million phone numbers that are part of Dubsmash data breach that occurred in 2018.

Data breaches 103

Data breaches Advertising Passwords Hacking 103

Security Affairs

APRIL 20, 2020

Over 267 million Facebook profiles are offered for sale on dark web sites and hacker forums, the dump is offered for £500 ($623) and doesn’t include passwords. Hackers are offering for sale over 267 million Facebook profiles for £500 ($623) on dark web sites and hacker forums, the archive doesn’t include passwords.

Data breaches 145

Data breaches Passwords Advertising Phishing 145

Security Affairs

FEBRUARY 27, 2021

The telecommunications giant T-Mobile disclosed a data breach after some of its customers were apparently affected by SIM swap attacks. The telecommunications provider T-Mobile has disclosed a data breach after it became aware that some of its customers were allegedly victims of SIM swap attacks. Pierluigi Paganini.

Mobile 92

Mobile Telecommunications Data breaches Identity Theft 92

Security Affairs

FEBRUARY 24, 2020

Slickwraps has disclosed a data breach that impacted over 850,000 user accounts, data were accidentally exposed due to security vulnerabilities. The data leak was disclosed last week, on February 21 the company that customer records were accidentally exposed online via an exploit. .”

Accountability 93

Accountability Data breaches Passwords Advertising 93

Security Affairs

JANUARY 3, 2021

com service that had been previously selling access to data from data breaches. WeLeakInfo.com was a data breach notification service that was allowing its customers to verify if their credentials been compromised in data breaches. ” reads the announcement published by the UK NCA.

Data breaches 112

Data breaches Cybercrime Cyber Attacks Advertising 112

Security Affairs

JUNE 28, 2020

” “We use Facebook and LinkedIn for account login and do not store any passwords on our system. If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. We do not store any credit card or payment related information on our servers.”

Media 141

Media Hacking Passwords Data breaches 141

Security Affairs

NOVEMBER 24, 2020

.” Credential stuffing attacks involve botnets to try stolen login credentials usually obtained through phishing attacks and data breaches. This kind of attacks is very efficient due to the bad habit of users of reusing the same password over multiple services.

Identity Theft 102

Identity Theft Accountability Passwords Phishing 102

Security Affairs

MAY 6, 2020

Hackers have breached the online learning platform Unacademy and are selling the account information for close to 22 million users. Online learning platform Unacademy has suffered a data breach after a hacker gained access to their database and started selling the account information for close to 22 million users.

Accountability 102

Accountability Hacking Data breaches Advertising 102

Krebs on Security

NOVEMBER 16, 2023

In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb threats.

Cybercrime 212

Cybercrime Hacking Data breaches Banking 212

Security Affairs

JULY 28, 2020

Million March 26th, 2020 Yes Dave.com 7 Million July 2020 * Yes Drizly.com 2.4 Million July 2020 * No GGumim.co.kr Million March 2020 * Yes Havenly.com 1.3 Million June 2020 * No Hurb.com 20 Million N/A Yes Indabamusic.com 475 Thousand N/A No Ivoy.mx com 3 Million July 2020 * No Scentbird.com 5.8

Passwords 129

Passwords Advertising Education Banking 129