Malwarebytes

DECEMBER 18, 2023

The targeted system contained customer names, phone numbers, and email addresses among other customer account metadata, including system logs for one customer. In emails sent to MongoDB customers, MongoDB advises users to be alert about phishing and social engineering attacks that might use the leaked customer metadata to gain credibility.

Data breaches 100

Data breaches Social Engineering Phishing Authentication 100

SecureWorld News

NOVEMBER 9, 2021

The popular trading app Robinhood has just been hit with a major data breach affecting millions of its users. The company says an unauthorized third party socially engineered a customer support employee while talking on the phone, obtaining access to some customer support systems.

Social Engineering 81

Social Engineering Engineering Data breaches Banking 81

CyberSecurity Insiders

AUGUST 2, 2021

Florida Department of Economic Opportunity (DEO) has hit the news headlines for becoming a victim of a cyber attack that led to data breach of over 57,900 claimant accounts seeking unemployment benefits. Meanwhile, a digital advertising company named Reindeer from New York is trending on Google for accidental data exposure.

Data breaches 145

Data breaches Engineering Identity Theft Social Engineering 145

Identity IQ

JUNE 1, 2023

The Rise of AI Social Engineering Scams IdentityIQ In today’s digital age, social engineering scams have become an increasingly prevalent threat. In fact, last year, scams accounted for 80% of reported identity compromises to the Identity Theft Resource Center (ITRC). Spear phishing attacks.

Social Engineering 52

Social Engineering Scams Engineering Identity Theft 52

Security Affairs

NOVEMBER 24, 2020

The threat actors were able to modify DNS settings by tricking GoDaddy employees into handing over the control of the targeted domains with social engineering attacks. “This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. .” Pierluigi Paganini.

Social Engineering 100

Social Engineering Engineering DNS Data breaches 100

Security Affairs

JANUARY 23, 2023

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers. The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach , the incident exposed the data of 133 customers. reads the notice published by the company.

Data breaches 84

Data breaches Accountability Social Engineering Small Business 84

CyberSecurity Insiders

JANUARY 30, 2023

JD Sports, Britain’s online retailer of branded sportswear, has reportedly become a victim of a cyber attack that leaked information of over 10 million customers. Accessed information includes data related to phone numbers, email accounts, addresses, names, the location where the order was delivered, and the final 4 digits of bank cards.

Data breaches 109

Data breaches Retail Identity Theft Social Engineering 109

Identity IQ

DECEMBER 20, 2023

2023: A Year of Record-Breaking Data Breaches IdentityIQ This past year has been an eye-opening year in the realm of digital security. Data breaches reached an all-time high, leaving a trail of identity theft cases. Behind the statistics, a disturbing trend emerged: data theft and extortion-only attacks rose sharply.

Data breaches 72

Data breaches Identity Theft Cybercrime Social Engineering 72

Hot for Security

MARCH 29, 2021

Have you ever wondered why your email address and other information appeared in a data breach impacting a platform you never signed up for? You probably don’t recall creating an account on the Verifications.io and River City Media data breaches. and River City Media data breaches.

Data breaches 116

Data breaches Media Marketing Social Engineering 116

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 87

Data breaches Social Engineering Phishing Accountability 87

Malwarebytes

MARCH 21, 2023

The National Basketball Association (NBA) has notified its fans they may be affected by a data breach in a third-party service the organization uses. The NBA sent out emails to a number of its followers noting that while names and email addresses have been compromised, no other personally identifiable information was breached.

Data breaches 81

Data breaches Passwords Social Engineering Phishing 81

Malwarebytes

JUNE 15, 2022

At least 69,000 people have been impacted by a data breach at Kaiser Permanente, a long-running managed healthcare consortium. The latest in a long-running series of healthcare attacks, the road to stolen data began on April 5 this year with an email compromise. The direct path to data.

Healthcare 88

Healthcare Data breaches Social Engineering Identity Theft 88

Security Affairs

DECEMBER 1, 2022

Data breaches can be devastating for organizations, these are 3 of the worst incidents that could have been prevented. Data breaches can be devastating for organizations and even entire countries. Eliminating the risk of a data breach is nearly impossible, but some things can be done to reduce it significantly.

Data breaches 93

Data breaches Passwords Social Engineering Encryption 93

Malwarebytes

AUGUST 22, 2022

When an organization experiences a massive data breach, it knows (at least) that it needs to inform the federal government about the cybersecurity incident, get law enforcement involved, and then inform its clients and affiliates. Source: Chasseur Group). She then realized she was about to be scammed.

Social Engineering 87

Social Engineering Engineering Banking Scams 87

CyberSecurity Insiders

MAY 4, 2023

Therefore, computer admins are being warned to be aware of phishing emails, malicious downloads, and be wary of other social engineering attacks. According to sources, a hack has exposed data of over 780,000 children who were patients of Brightline.

Information Security 99

Information Security Healthcare Social Engineering Ransomware 99

Adam Levin

JULY 10, 2020

2020 is on the path to becoming a record-breaking year for data breaches and compromised personal data. billion records have already been exposed, and that’s only accounting for the first quarter of 2020. million records): Personal information, including names, email addresses, birthdates and passport numbers if over 10.6

Data breaches 252

Data breaches Social Engineering Antivirus Scams 252

Security Affairs

OCTOBER 30, 2018

Hackers breached the Orange County, Calif. branch of the Girl Scouts of America, potentially exposing personal information for 2,800 members and their families. According to the Girl Scouts of Orange County, an unknown threat actor gained access to an email account operated by the organization and used it to send messages.

Data breaches 79

Data breaches Social Engineering Advertising Insurance 79

The Hacker News

AUGUST 9, 2022

Customer engagement platform Twilio on Monday disclosed that a "sophisticated" threat actor gained "unauthorized access" using an SMS-based phishing campaign aimed at its staff to gain information on a "limited number" of accounts.

Phishing 95

Phishing Data breaches Social Engineering Engineering 95

Malwarebytes

MARCH 16, 2022

CafePress waited seven months to publicly disclose a 2019 breach, and only did so after it had been reported in the news. According to the complaint by the FTC this was made possible because CafePress failed to implement reasonable security measures to protect the sensitive information of buyers and sellers stored on its network.

Data breaches 121

Data breaches Passwords Authentication Social Engineering 121

The Last Watchdog

AUGUST 19, 2021

TMobile has now issued a formal apology and offered free identity theft recovery services to nearly 48 million customers for whom the telecom giant failed to protect their sensitive personal information. At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons.

Mobile 306

Mobile Data breaches Authentication Accountability 306

Security Affairs

DECEMBER 17, 2023

MongoDB on Saturday announced it is investigating a cyberattack that exposed customer account metadata and contact information. The cyber attack was discovered on December 13, 2023, and led to the exposure of customer account metadata and contact information. We detected suspicious activity on Wednesday (Dec.

Social Engineering 118

Social Engineering Data breaches Cyber Attacks Accountability 118

SecureWorld News

JANUARY 4, 2022

Broward Health, a large healthcare system in South Florida, disclosed a data breach that impacts more than 1.3 Broward Health also engaged an experienced data review specialist to conduct an extensive review of the data, which determined that your personal medical information was included in data accessed by the intruder.

Data breaches 78

Data breaches Healthcare Identity Theft Social Engineering 78

Security Boulevard

JUNE 26, 2023

Unfortunately, the increasing reliance on digital systems and capabilities has also attracted an ever-growing number of malicious actors seeking to defraud businesses through phishing , social engineering , or ransomware attacks. The end result of these types of cyber attacks are often highly public and damaging data breaches.

Data breaches 52

Data breaches Healthcare Telecommunications Financial Services 52

Malwarebytes

DECEMBER 19, 2022

SevenRooms, a “guest experience and retention platform” for food establishments and hospitality organisations, has confirmed it has fallen victim to a third party vendor data breach. SevenRooms confirmed to Bleeping Computer that the data, samples of which were posted on the forum on 15th December, is real.

Data breaches 86

Data breaches Social Engineering Banking Marketing 86

Security Affairs

APRIL 14, 2024

Crooks manipulate GitHub’s search results to distribute malware BatBadBut flaw allowed an attacker to perform command injection on Windows Roku disclosed a new security breach impacting 576,000 accounts LastPass employee targeted via an audio deepfake call TA547 targets German organizations with Rhadamanthys malware CISA adds D-Link multiple (..)

Data breaches 104

Data breaches Social Engineering Malware Hacking 104

Identity IQ

MAY 30, 2023

How Do You Know if Your Information Is On the Dark Web? It’s where illegal activities, like buying and selling drugs, weapons, and stolen personal information, take place. If you’re not familiar with the dark web, you might be wondering what it is, how information gets there, and what happens if your data is involved.

Identity Theft 52

Identity Theft Social Engineering Passwords Data breaches 52

Security Affairs

OCTOBER 21, 2023

The portal allows law enforcement agencies to request data relating to users (IP, phones, DMs, device info) or request the removal of posts and the ban of accounts. The threat actor is offering access for $700, and it appears it can have more than one existing account for the portal. ” Gal told Security Affairs.

Social Engineering 133

Social Engineering Identity Theft Accountability Engineering 133

Security Boulevard

JANUARY 7, 2022

“We informed a very small number of customers that the SIM card assigned to a mobile number on their account may have been illegally reassigned or limited account information was viewed,” a T-Mobile spokesperson told BleepingComputer last week in response to questions about a new T-Mobile data breach.

Mobile 122

Mobile Social Engineering Data breaches Accountability 122

Hacker's King

JUNE 27, 2023

Have you ever wondered how organizations gather information about individuals, companies, or even potential threats? Open intelligence (OSINT) is the art of collecting and analyzing public information to gain valuable insights. It provides valuable information for risk assessment.

Media 52

Media Data breaches Social Engineering Risk 52

Security Affairs

JANUARY 8, 2024

Leaving these files open to anyone exposes critical data and provides threat actors with various attack options. file exposed information that attackers could employ for lateral movement within the ministry’s systems, potentially escalating to anything from account takeover to a ransomware attack. What MIM data was exposed?

Government 123

Government Identity Theft Social Engineering Encryption 123

Security Affairs

FEBRUARY 26, 2021

Data Breach: WizCase team uncovered a massive data leak containing private information about Turkish Citizens through a misconfigured Amazon S3 bucket. Document included in every court case, showing personal information about the victim. How Did the Data Breach Happen? What’s Going On?

Data breaches 95

Data breaches Insurance Identity Theft Education 95

Security Affairs

NOVEMBER 3, 2023

HAR files can also contain sensitive data, including authentication information. The attackers gained access to Okta’s customer support system by leveraging a service account stored in the system itself. The service account was granted permissions to view and update customer support cases. ” continues the post.

Data breaches 121

Data breaches Social Engineering Accountability Authentication 121

SecureWorld News

SEPTEMBER 15, 2020

Now the Department of Veteran's Affairs (VA) is sending breach notification letters to tens of thousands of veterans impacted by a recent data breach. What do we know about the VA data breach against veterans? How large was the VA data breach? How large was the VA data breach?

Data breaches 52

Data breaches Social Engineering Financial Services Government 52

CyberSecurity Insiders

FEBRUARY 17, 2023

The details of over 14,000 employees were sent to 100s of NHS Managers and 24 external accounts creating a possibility of identity thefts and social engineering attacks such as phishing.

Cyber Attacks 129

Cyber Attacks Identity Theft Insurance Social Engineering 129

Security Boulevard

APRIL 7, 2024

Episode 324 features discussions on a significant AT&T data breach affecting 73 million customers and a sophisticated thread jacking attack targeting a journalist.

Data breaches 69

Data breaches Accountability Social Engineering Data privacy 69

Zigrin Security

OCTOBER 11, 2023

In today’s digital age, the threat of data breaches is a constant concern. Therefore, it is crucial to understand what hackers are planning to do with your data and take proactive measures to protect it. Cybercriminals can profit by stealing sensitive information and selling it on the dark web to other criminals.

Cyber threats 52

Cyber threats Penetration Testing Passwords Backups 52

Malwarebytes

OCTOBER 9, 2023

Information belonging to as many as seven million 23andMe customers has been put up for sale on criminal forums following a credential stuffing attack against the genomics company. Accessing accounts on a website by using lists of usernames and passwords exposed on another is known as "credential stuffing", and it's both common and effective.

Passwords 136

Passwords Accountability Scams Social Engineering 136