Security Affairs

APRIL 15, 2024

Cisco Duo warns that a data breach involving one of its telephony suppliers exposed multifactor authentication (MFA) messages sent by the company via SMS and VOIP to its customers. Then they used the access to download a set of MFA SMS message logs belonging to customers’ Duo accounts.

Data breaches 114

Data breaches Social Engineering Engineering Authentication 114

SecureWorld News

APRIL 2, 2024

After weeks of denial, AT&T has finally acknowledged a massive data breach impacting 73 million current and former customer accounts. The telecom giant had initially claimed that a large trove of personal data leaked on the Dark Web did not originate from their systems. million former account holders."

Data breaches 88

Data breaches Identity Theft Authentication Accountability 88

Security Affairs

APRIL 12, 2024

Roku announced that 576,000 accounts were compromised in a new wave of credential stuffing attacks. Roku announced that 576,000 accounts were hacked in new credential stuffing attacks, threat actors used credentials stolen from third-party platforms. Then, they enter those accounts to abuse permissions, siphoning out data, or both.

Accountability 108

Accountability Passwords Data breaches Authentication 108

Malwarebytes

APRIL 2, 2024

Malwarebytes VP of Consumer Privacy, Oren Arar, describes the AT&T breach as “especially risky” because much of the type of data that’s been exposed. While AT&T has made this determination, it is not yet known whether the data in those fields originated from AT&T or one of its vendors.

Data breaches 144

Data breaches Passwords Phishing Accountability 144

Security Affairs

APRIL 10, 2024

AT&T confirmed that the data breach impacted 51 million former and current customers and is notifying them. AT&T revealed that the recently disclosed data breach impacts more than 51 million former and current customers and is notifying them. It was leaked online today.” said vx-underground.

Data breaches 99

Data breaches Telecommunications Identity Theft Hacking 99

Malwarebytes

MARCH 5, 2024

In a subsequent update, American Express explained that it was not a service provider, but a merchant processor that suffered the breach. The account information of some card holders may have fallen into the wrong hands. The accessed information includes account numbers, names, and card expiration dates.

Data breaches 110

Data breaches Passwords Accountability Identity Theft 110

SecureWorld News

DECEMBER 7, 2023

New revelations have shed light on the extensive fallout of the 23andMe data breach, which exposed the personal information of a staggering 6.9 This significant update comes almost two months after the genetic testing company initially reported a breach affecting 14,000 individuals. million users. An additional 1.4

Data breaches 107

Data breaches Passwords Data privacy Accountability 107

Security Affairs

FEBRUARY 23, 2024

Australian telecommunications provider Tangerine disclosed a data breach that impacted roughly 230,000 individuals. Tangerine suffered a data breach that exposed the personal information of roughly 230,000 individuals. ” reads the statement published by the company. ”continues the statement.

Data breaches 93

Data breaches Telecommunications Banking Mobile 93

Malwarebytes

DECEMBER 18, 2023

The targeted system contained customer names, phone numbers, and email addresses among other customer account metadata, including system logs for one customer. MongoDB said there is no evidence of unauthorized access to Atlas clusters since that would require compromise of the separate Atlas cluster authentication system.

Data breaches 99

Data breaches Social Engineering Phishing Authentication 99

Malwarebytes

SEPTEMBER 22, 2023

Some T-Mobile customers logged into their accounts on Wednesday to find another customer’s billing and account information showing on their online dashboards. T-Mobile denied there was an attack, but confirmed there had been a data leak. “There was no cyberattack or breach at T-Mobile. So, stay tuned!

Mobile 114

Mobile Data breaches Accountability Passwords 114

Approachable Cyber Threats

APRIL 17, 2023

Risk Level 3 Data breaches are a significant concern here in the digital age. With technology advancing rapidly, hackers have been using various methods to gain sensitive information from unsuspecting individuals, organizations, and you. million victims were impacted by a data breach in 2022 alone.

Data breaches 97

Data breaches Identity Theft Passwords Scams 97

Security Affairs

NOVEMBER 20, 2023

The Canadian government discloses a data breach after threat actors hacked two of its contractors. “On October 19 th , 2023, Brookfield Global Relocation Services (BGRS) informed the Government of Canada of a breach involving Government of Canada information held by BGRS and SIRVA Canada systems.”

Data breaches 111

Data breaches Government Hacking Backups 111

Malwarebytes

JANUARY 15, 2024

As is often the case these days, it turns out that the cyberincident was very likely a ransomware attack that included a data breach. Ransomware operators typically steal data from the compromised systems to use as extra leverage against the victim. The company has not so far specified the type of data that may have been stolen.

Data breaches 104

Data breaches Identity Theft Passwords Ransomware 104

Security Affairs

SEPTEMBER 24, 2023

educational nonprofit organization National Student Clearinghouse disclosed a data breach that impacted approximately 900 US schools. “On May 31, 2023, the Clearinghouse was informed by our third-party software provider, Progress Software, of a cybersecurity issue involving the provider’s MOVEit Transfer solution.

Data breaches 110

Data breaches Education Ransomware Software 110

Security Affairs

SEPTEMBER 3, 2022

Electronics giant Samsung has confirmed a new data breach after some of its US systems were compromised in July. After the attack that hit the company in late July 2022, Samsung disclosed a data breach. At the same time, Social Security or credit card numbers were not exposed in the security breach.

Data breaches 144

Data breaches Hacking Authentication Cybersecurity 144

Approachable Cyber Threats

APRIL 17, 2023

Category Awareness, Guides Risk Level Data breaches are a significant concern here in the digital age. With technology advancing rapidly, hackers have been using various methods to gain sensitive information from unsuspecting individuals, organizations, and you. million victims were impacted by a data breach in 2022 alone.

Data breaches 98

Data breaches Identity Theft Passwords Scams 98

The Last Watchdog

JULY 24, 2023

Accessing vital information to complete day-to-day tasks at our jobs still requires using a password-based system at most companies. In fact, according to Verizon’s most recent data breach report, approximately 80 percent of all breaches are caused by phishing and stolen credentials. They are simply not good enough.

Authentication 245

Authentication Passwords Phishing Social Engineering 245

Identity IQ

JANUARY 16, 2023

LifeLock Data Breach Compromises Thousands! Recently, thousands of Norton LifeLock customer accounts were compromised in a data breach. Credential stuffing is a type of data breach where hackers use previously stolen lists of information, such as usernames and passwords, to gain unauthorized access to accounts.

Data breaches 105

Data breaches Identity Theft Password Management Passwords 105

Security Affairs

AUGUST 24, 2022

The company disclosed a data breach after threat actors have access to a limited subset of data stored in a compromised database. Exposed data includes emails, usernames, and encrypted passwords. The company is urging all users to immediately reset account passwords and log out of all devices connected to its service.

Data breaches 106

Data breaches Passwords Media Accountability 106

Malwarebytes

FEBRUARY 19, 2024

CISA (the Cybersecurity & Infrastructure Security Agency) has issued a cybersecurity advisory after the discovery of documents containing host and user information of a state government organization’s network environment—including metadata—on a dark web brokerage site. Restrict the use of multiple administrator accounts for one user.

Accountability 77

Accountability VPN Authentication Phishing 77

CyberSecurity Insiders

MARCH 22, 2022

Going deep into the details, CafePress’s former owner, Residual Pumpkin Entity, was storing critical customer data such as social security numbers, passwords and other account related info in plain text and not with any authentication.

Data breaches 127

Data breaches Retail Identity Theft Authentication 127

The Last Watchdog

AUGUST 19, 2021

TMobile has now issued a formal apology and offered free identity theft recovery services to nearly 48 million customers for whom the telecom giant failed to protect their sensitive personal information. At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons.

Mobile 306

Mobile Data breaches Authentication Accountability 306

Malwarebytes

JULY 25, 2022

Word is spreading of a compromise claimed to have accessed around 69 million user accounts. Data claimed to have been taken includes: Usernames Names Email address Date of birth Zip code Date of Birth Gender Country Registration email. In 2020, there were claims of ways to potentially gain access to user accounts.

Data breaches 80

Data breaches Accountability Passwords Password Management 80

Hot for Security

MARCH 29, 2021

Have you ever wondered why your email address and other information appeared in a data breach impacting a platform you never signed up for? You probably don’t recall creating an account on the Verifications.io and River City Media data breaches. platform or River City Media. That’s because you didn’t.

Data breaches 116

Data breaches Media Marketing Social Engineering 116

Malwarebytes

MARCH 21, 2023

The National Basketball Association (NBA) has notified its fans they may be affected by a data breach in a third-party service the organization uses. The NBA sent out emails to a number of its followers noting that while names and email addresses have been compromised, no other personally identifiable information was breached.

Data breaches 80

Data breaches Passwords Social Engineering Phishing 80

Identity IQ

NOVEMBER 1, 2021

A hospital in Worcester, Massachusetts, disclosed an email hack of its employee email system, which may have exposed the personal information of thousands of patients. Earlier this month, UMass Memorial Health alerted patients who were affected by the hospital data breach. How to Protect Yourself After a Hospital Data Breach.

Data breaches 98

Data breaches Identity Theft Insurance Passwords 98

Identity IQ

JANUARY 19, 2021

With all that transpired over the last few months, and even with the SolarWinds cyberattack making headlines , it might be easy to forget that data breaches and hacks continue to expose the personal information of millions. This leaves victims of the data breaches vulnerable to identity theft.

Data breaches 105

Data breaches Identity Theft Small Business Passwords 105

SecureWorld News

OCTOBER 17, 2023

In the wake of the recent 23andMe data breach that impacted millions of customers, new legal action is now being pursued against the genetic testing company. Four class action lawsuits were filed in the past week on behalf of 23andMe users whose personal and health data was compromised in the breach.

Data breaches 93

Data breaches Authentication Passwords Cybersecurity 93

Security Boulevard

AUGUST 21, 2022

The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show. The post Multi-Factor Authentication Fatigue Attack, Signal Account Twilio Hack, Facebook and Instagram In-App Browser appeared first on The Shared Security Show.

Authentication 98

Authentication Accountability Hacking Ransomware 98

Security Affairs

JANUARY 20, 2023

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. PayPal announced that 34942 customers’ accounts have been compromised between December 6 and December 8. What is credential stuffing?

Data breaches 87

Data breaches Identity Theft Accountability Passwords 87

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 87

Data breaches Social Engineering Phishing Accountability 87

Malwarebytes

MARCH 16, 2022

CafePress waited seven months to publicly disclose a 2019 breach, and only did so after it had been reported in the news. According to the complaint by the FTC this was made possible because CafePress failed to implement reasonable security measures to protect the sensitive information of buyers and sellers stored on its network.

Data breaches 120

Data breaches Passwords Authentication Social Engineering 120

Krebs on Security

SEPTEMBER 13, 2023

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle “ USDoD ” had infiltrated the FBI ‘s vetted information sharing network InfraGard , and was selling the contact information for all 80,000 members. USDoD’s avatar used to be the seal of the U.S. Department of Defense.

Cybercrime 286

Cybercrime Passwords Authentication Malware 286

Approachable Cyber Threats

APRIL 17, 2023

Category Awareness, Guides Risk Level Data breaches are a significant concern here in the digital age. With technology advancing rapidly, hackers have been using various methods to gain sensitive information from unsuspecting individuals, organizations, and you. million victims were impacted by a data breach in 2022 alone.

Data breaches 52

Data breaches Identity Theft Passwords Scams 52

SecureWorld News

JANUARY 12, 2023

Twitter has provided an update on a data breach incident that occurred earlier this year, clarifying that there was no evidence that the data involved was obtained by exploiting a vulnerability in its systems. Recently, a similar attempt to sell data from 200 million Twitter-associated accounts was reported in the media.

Data breaches 80

Data breaches Passwords Accountability Media 80

Security Affairs

NOVEMBER 25, 2020

million settlement in a multi-state investigation of the data breach that the company suffered in 2014. million settlement over the 2014 data breach. In 2014, Home Depot revealed that the data breach impacted 56 million customers across the US and Canada. SecurityAffairs – hacking, Data breach).

Retail 117

Retail Data breaches Penetration Testing Password Management 117

Malwarebytes

JANUARY 6, 2022

million customers have had their user accounts compromised in credential stuffing attacks. Credential stuffing is the automated injection of stolen username and password pairs in to website login forms, in order to fraudulently gain access to user accounts. Using a forum or social media account to send phishing messages or spam.

Passwords 139

Passwords Accountability Identity Theft Password Management 139