Massive Brazilian Data Breach

Schneier on Security

I think this is the largest data breach of all time: 220 million people. Lots more stories are in Portuguese

T-Mobile Data Breach

Schneier on Security

It’s a big one : As first reported by Motherboard on Sunday, someone on the dark web claims to have obtained the data of 100 million from T-Mobile’s servers and is selling a portion of it on an underground forum for 6 bitcoin, about $280,000.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OpenSubtitles data breach impacted 7 million subscribers

Security Affairs

OpenSubtitles has suffered a data breach, the maintainers confirmed that the incident impacted 7 Million subscribers. OpenSubtitles is a popular subtitles websites, it suffered a data breach that affected 6,783,158 subscribers.

Barnes & Noble Experiences Major Data Breach

Adam Levin

Barnes & Noble has confirmed a data breach following a cyberattack that took many of their services offline. . The email also indicated that customer transaction histories may have been compromised, meaning that information about their purchases may be included in the breached data.

T-Mobile suffered a new data breach

Security Affairs

T-Mobile discloses a new data breach that impacted a “very small number of customers” who were victim of SIM swap attacks. T-Mobile has suffered another security breach, threat actors gained access to the accounts of “a small number of” customers.’.

Carnival Announces Data Breach Following Ransomware Attack

Adam Levin

Carnival Corporation, the largest cruise ship company in the world, announced that it had experienced a data breach following a ransomware attack on their systems. The post Carnival Announces Data Breach Following Ransomware Attack appeared first on Adam Levin.

Data Breach Numbers, Costs and Impacts All Rise in 2021

Lohrman on Security

By almost any measure, the breadth, depth and impact of data breaches have dramatically increased during the COVID-19 pandemic. Here’s a roundup of the numbers

Leveraging Least Privilege in Data Breach Management

Security Boulevard

The post Leveraging Least Privilege in Data Breach Management appeared first on Sonrai Security. The post Leveraging Least Privilege in Data Breach Management appeared first on Security Boulevard.

The Unattributable "db8151dd" Data Breach

Troy Hunt

It's about a data breach with almost 90GB of personal information in it across tens of millions of records - including mine. My delving into the breach began back in Feb with a tweet: I'm trying to trace down the origin of a *massive* breach someone sent me.

T-Mobile Investigating Claims of Massive Data Breach

Krebs on Security

On Sunday, Vice.com broke the news that someone was selling data on 100 million people, and that the data came from T-Mobile. A sales thread tied to the allegedly stolen T-Mobile customer data. ” Data Breaches IntelSecrets IRDev John Erin Binn T-Mobile Und0xxed V0rtex

Data Breaches, Class Actions and Ambulance Chasing

Troy Hunt

This post has been brewing for a while, but the catalyst finally came after someone (I'll refer to him as Jimmy) recently emailed me regarding the LOQBOX data breach from 2020. As far as breaches go, it was a bit of a non-event. How many places did his personal data then flow to?

FCC Proposes Stricter Regulations for Data Breach Disclosure 

Security Boulevard

The Federal Communications Commission (FCC) has proposed stricter requirements for companies to disclose data breaches. The post FCC Proposes Stricter Regulations for Data Breach Disclosure appeared first on Security Boulevard.

MGM Data Breach Affects Over 10 Million Customers

Adam Levin

MGM Resorts confirmed the leaked data as being the result of a data breach that occurred last year. We are confident that no financial, payment card or password data was involved in this matter.”. Data Security Data breach Technology featured data breach hotel mgm

IBM Cost of a Data Breach study: average Cost of Data Breach exceeds $4.2M

Security Affairs

The ‘Cost of a Data Breach’ report commissioned by IBM Security states that the cost of a data breach exceeded $4.2 The study highlights the significant impact of the ongoing pandemic on the cost of data breaches and the effort to contain them.

Hospitality Chain McMenamins discloses data breach after ransomware attack

Security Affairs

Hospitality chain McMenamins disclosed a data breach after a recent ransomware attack. Hospitality chain McMenamins discloses a data breach after a ransomware attack that took place on December 12. The good news is that customer financial data was not affected.

Update on Ubiquiti Data Breach: Insider Suspected

Security Boulevard

It is no secret that data breaches have become a ubiquitous problem, and some would even say, commonplace. The post Update on Ubiquiti Data Breach: Insider Suspected appeared first on Sonrai Security.

California Pizza Kitchen discloses a data breach

Security Affairs

American pizza chain California Pizza Kitchen (CPK) suffered a data breach that might have exposed personal information of its employees. According to a data breach notification sent to the impacted employees, the security breach was discovered on September 15.

How Your Organization Can Prevent Data Breaches

Security Boulevard

To prevent data breaches, you need to correlate events across multiple threat surfaces. The post How Your Organization Can Prevent Data Breaches appeared first on Radware Blog. The post How Your Organization Can Prevent Data Breaches appeared first on Security Boulevard.

New GoDaddy data breach impacted 1.2 million customers

Security Affairs

GoDaddy suffered a data breach that impacted up to 1.2 GoDaddy discloses a data breach that impacted up to 1.2 million of its customers, threat actors breached the company’s Managed WordPress hosting environment. SecurityAffairs – hacking, data breach).

Over 3.7 million accounts were compromised in the FlexBooker data breach

Security Affairs

The appointment scheduling service FlexBooker discloses a data breach that impacted over 3.7 Stolen data are now available for sale on multiple cybercrime forums. The company already notified local authorities and sent a data breach notification to the impacted customers.

The U.K. Labour Party discloses a data breach

Security Affairs

Labour Party discloses a data breach after a ransomware attack hit a service provider that is managing its data. Labour Party discloses a data breach after a service provider that manages its data was hit by a ransomware attack. The U.K.

Ubiquiti discloses a data breach

Security Affairs

American technology company Ubiquiti Networks is disclosed a data breach and is notifying its customers via email. The company is not aware of any access to any databases that were containing user data. The post Ubiquiti discloses a data breach appeared first on Security Affairs.

UScellular discloses the second data breach in a year

Security Affairs

UScellular, one of the largest wireless carriers in the US, has disclosed a data breach after the hack suffered in December 2021. UScellular has disclosed a data breach after the attack that compromised the company’s billing system in December 2021.

NASA Announces Data Breach

Adam Levin

The US National Aeronautics and Space Administration has announced that it experienced a data breach in October. In an internal memo sent to employees, the agency disclosed that its “cybersecurity personnel began investigating a possible compromise of NASA servers,” and that they had “determined that information from one of the servers containing Social Security numbers and other PII data of current and former NASA employees may have been compromised.”.

Worst AWS Data Breaches of 2021

Security Boulevard

Data breaches remain a challenge despite an increase in cybersecurity awareness and investments. The post Worst AWS Data Breaches of 2021 appeared first on Sonrai Security. The post Worst AWS Data Breaches of 2021 appeared first on Security Boulevard.

How Not to Acknowledge a Data Breach

Krebs on Security

I’m not a huge fan of stories about stories, or those that explore the ins and outs of reporting a breach. But occasionally I feel obligated to publish such accounts when companies respond to a breach report in such a way that it’s crystal clear they wouldn’t know what to do with a data breach if it bit them in the nose, let alone festered unmolested in some dark corner of their operations.

MGM Data Breach Ten Times Larger Than Initially Reported

Adam Levin

The discovery of a database for sale on the dark web suggests the 2019 data breach of MGM Resorts was significantly larger than initially reported. The records themselves were aggregated from previous data breaches and leaks.

The Unattributable "Lead Hunter" Data Breach

Troy Hunt

That's me who's pwned again because my personal data has just turned up in yet another incident from a source I can't attribute. So, data first, here's what they have on me: Similar deal to last time in that it was an exposed Elasticsearch instance and it was sent over to me by Dehashed.

Robinhood data breach exposes 7 Million users’ information

Security Affairs

Robinhood disclosed a security breach, an unidentified threat actor gained unauthorized access to approximately 7 million customer records. The company disclosed a data breach, a threat actor gained access to the personal information of approximately 7 million customers.

Phishing, Ransomware Driving Wave of Data Breaches

Security Boulevard

Data compromises have increased every month this year except May. If that trend continues, or even if there is only an average of 141 new compromises per month for the next six months, the total will still exceed the previous high of 1,632 breaches set in 2017.

California Hospital data breach crisis deepens

CyberSecurity Insiders

UC San Diego Health, a California based healthcare service provider, reportedly suffered a data breach early this year, and it notified the 450,000 victims from September 7th, 2021. The post California Hospital data breach crisis deepens appeared first on Cybersecurity Insiders.

Data Breach at German Supermarket Chain tegut

Security Boulevard

While done to limit the exposure of sensitive data, these measures also had side effects including gaps in their supply chain and other services that lasted for weeks. Despite these mitigation efforts, the attackers have already begun to publish company and customer data on the dark web. .

Can Web Security Tools Prevent Data Breaches?

Security Boulevard

’ Unfortunately, it was also the year that, as Forbes put it, “broke all records when it came to data lost in breaches and sheer. The post Can Web Security Tools Prevent Data Breaches? For most, 2020 will go down in history as the year of the COVID-19 pandemic.

Sontiq BreachIQ Data Breach Report: Week of Nov. 8

Security Boulevard

Each week, Sontiq uses its BreachIQ capability to identify recent notable reported data breaches. These breaches are highlighted because of the heightened identity security risks to the victims. The post Sontiq BreachIQ Data Breach Report: Week of Nov.

Sontiq BreachIQ Data Breach Report: Week of Oct. 18

Security Boulevard

Each week, Sontiq uses its BreachIQ capability to identify recent notable reported data breaches. These breaches are highlighted because of the heightened identity security risks to the victims. The post Sontiq BreachIQ Data Breach Report: Week of Oct.

GUEST ESSAY: Data breaches across the globe slowed significantly in Q4 2021 versus Q1-Q3

The Last Watchdog

After a gloomy start with its first three breach intensive quarters, 2021 has finally ended, and on a positive note. This conclusion is derived from an analysis of data taken from our data breach detection tool, Surfshark Alert , which comprises publicly available breached data sets to inform our users of potential threats. Breached accounts were analyzed according to the country’s origin, and the actual time the breach was recorded.

Accenture discloses data breach after LockBit ransomware attack

Security Affairs

IT and consulting giant Accenture confirmed a data breach after the ransomware attack conducted by LockBit operators in August 2021. Global IT consultancy giant Accenture discloses a data breach after the LockBit ransomware attack that hit the company in August 2021.

Retail giant Costco discloses data breach, payment card data exposed

Security Affairs

Costco Wholesale Corporation discloses a data breach, threat actors had access to customers’ payment card information. Retail giant Costco Wholesale Corporation notified its customers of a data breach that might have exposed their payment card information.

Accellion Data Breach Highlights Third-Party Risk

Security Boulevard

Two mega-breaches caused by third parties earlier this year, following the SolarWinds supply chain hack created a growing tsunami of third-party risk for enterprises and government organizations. The post Accellion Data Breach Highlights Third-Party Risk appeared first on Security Boulevard.

Top data breaches of 2020 – Security Affairs

Security Affairs

Data from major cyber security firms revealed that tens of billion records have been exposed in data breaches exposed in 2020. Hackers offered for sale on the dark web data belonging to 538 million Weibo users, including 172 million phone numbers.

T-Mobile confirms data breach that exposed customer personal info

Security Affairs

T-Mobile confirms a breach after threat actors claimed to have obtained records of 100 million of its customers and offered them for sale. T-Mobile has confirmed a data breach that exposed personal information from over 100 million of its US customers.

Volvo Cars suffers a data breach. Is it a ransomware attack?

Security Affairs

Swedish automotive manufacturer Volvo Cars revealed that has suffered a cyberattack that resulted in the theft of R&D data. Swedish automotive manufacturer Volvo Cars revealed that threat actors have stolen R&D data from its systems. The post Volvo Cars suffers a data breach.

Breach Clarity Data Breach Report: Week of Sept. 6

Security Boulevard

Each week, Sontiq uses its BreachIQ capability to identify recent notable reported data breaches. These breaches are highlighted because of the heightened identity security risks to the victims. The post Breach Clarity Data Breach Report: Week of Sept.