Daniel Miessler

MAY 19, 2021

Breach : An incident that results in the confirmed disclosure—not just potential exposure—of data to an unauthorized party. This year they analyzed 79,635 incidents, 29,207 met their quality standards, and 5,258 were confirmed data breaches. Ransomware doubled from 5% of breaches to 10% in 2020.

Data breaches 192

Data breaches Social Engineering Ransomware Phishing 192

Security Affairs

NOVEMBER 22, 2021

GoDaddy suffered a data breach that impacted up to 1.2 GoDaddy discloses a data breach that impacted up to 1.2 million of its customers, threat actors breached the company’s Managed WordPress hosting environment. ” said Demetrius Comes, GoDaddy’s Chief Information Security Officer.

Data breaches 141

Data breaches Passwords Accountability Information Security 141

Security Affairs

MAY 3, 2021

Which are the most common causes of a Data Breach and how to prevent It? Data breaches are highly damaging and equally embarrassing for businesses and consumers. If you look at Verizon’s 2020 Data Breach Investigations Report, you can find some of the most common causes of data breaches.

Data breaches 144

Data breaches Social Engineering Engineering Network Security 144

Security Affairs

SEPTEMBER 5, 2023

The nonprofit organization Freecycle Network (Freecycle.org) confirmed that it has suffered a data breach that impacted more than 7 million users. The security breach was discovered on August 30, exposed data includes usernames, User IDs, email addresses and passwords.

Data breaches 132

Data breaches Passwords Phishing Hacking 132

Security Affairs

APRIL 29, 2024

The Los Angeles County Department of Health Services reported a data breach that exposed thousands of patients’ personal and health information. The Los Angeles County Department of Health Services disclosed a data breach that impacted thousands of patients.

Data breaches 140

Data breaches Phishing Hacking Cybercrime 140

Security Affairs

OCTOBER 18, 2023

Taiwanese manufacturer D-Link confirmed a data breach after a threat actor offered for sale on BreachForums stolen data. The global networking equipment and technology company D-Link confirmed a data breach after a threat actor earlier this month offered for sale on the BreachForums platform the stolen data.

Data breaches 139

Data breaches Phishing Manufacturing Hacking 139

Security Affairs

JUNE 12, 2021

McDonald’s fast-food chain disclosed a data breach, hackers have stolen information belonging to customers and employees from the US, South Korea, and Taiwan. “The company said no customer data was breached in the U.S., and that the employee data exposed wasn’t sensitive or personal.

Data breaches 145

Data breaches Cyber Attacks Marketing Phishing 145

Security Affairs

MAY 13, 2025

This week, a cyber update published by the company on its website confirmed the data breach: “To proactively manage the incident, we immediately took steps to protect our systems and engaged leading cyber security experts. The attackers encrypted VMware ESXi virtual machines used by the company. ” reads the update.

Data breaches 60

Data breaches Cyber Attacks Passwords Social Engineering 60

Security Affairs

OCTOBER 23, 2023

The City of Philadelphia discloses a data breach that resulted from a cyber attack that took place on May 24 and that compromised City email accounts. In 2020, the City disclosed a significant email breach , that resulted from a successful phishing attack on an employee.

Data breaches 133

Data breaches Identity Theft Accountability Scams 133

Security Affairs

OCTOBER 11, 2023

Airline Air Europa disclosed a data breach and warned customers to cancel their credit cards after threat actors accessed their card information. Source: Twitter Financial data exposed in the security incident includes credit card details (card numbers, expiration dates, and the CVV (Card Verification Value) code).

Data breaches 127

Data breaches Banking Phishing Hacking 127

Security Affairs

APRIL 15, 2024

Cisco Duo warns that a data breach involving one of its telephony suppliers exposed multifactor authentication (MFA) messages sent by the company via SMS and VOIP to its customers. The security breach occurred on April 1, 2024, the threat actors used a Provider employee’s credentials that illicitly obtained through a phishing attack.

Data breaches 140

Data breaches Social Engineering Authentication Engineering 140

Security Affairs

MAY 28, 2024

Dutch bank ABN Amro discloses data breach following a ransomware attack hit the third-party services provider AddComm. Dutch bank ABN Amro disclosed a data breach after third-party services provider AddComm suffered a ransomware attack. The bank also warns clients to stay alert to phishing messages.

Data breaches 137

Data breaches Banking Ransomware Phishing 137

Security Affairs

OCTOBER 15, 2021

IT and consulting giant Accenture confirmed a data breach after the ransomware attack conducted by LockBit operators in August 2021. Global IT consultancy giant Accenture discloses a data breach after the LockBit ransomware attack that hit the company in August 2021. Follow me on Twitter: @securityaffairs and Facebook.

Data breaches 131

Data breaches Ransomware Backups Hacking 131

Security Affairs

APRIL 4, 2022

Threat actors gained access to internal tools of the email marketing giant MailChimp to conduct phishing attacks against crypto customers. During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported.

Phishing 137

Phishing Data breaches Cryptocurrency Social Engineering 137

Security Affairs

DECEMBER 13, 2020

Subway UK confirmed the hack of a marketing system that was used to send out phishing messages to deliver malware to the customers. Hackers have compromised a marketing system in Subway UK and used it to send out phishing messages to deliver malware to the customers. The system does not hold any bank or credit card details.”

Marketing 144

Marketing Phishing Hacking Data breaches 144

Security Affairs

AUGUST 21, 2021

The US Cybersecurity and Infrastructure Security Agency (CISA) released guidance on how to prevent data breaches resulting from ransomware attacks. The post US CISA releases guidance on how to prevent ransomware data breaches appeared first on Security Affairs. ” reads CISA’s guideline.

Data breaches 122

Data breaches Ransomware Backups Technology 122

Security Affairs

JANUARY 22, 2024

Adaptive phishing campaigns are emerging as an increasingly sophisticated threat in the cybersecurity landscape. The phenomenon This phenomenon represents an evolution of traditional phishing tactics, as attackers seek to overcome defenses using more personalized and targeted approaches.

Phishing 134

Phishing Education Social Engineering Media 134

Security Affairs

AUGUST 22, 2021

T-Mobile data breach could be worse than initially thought, an update to the investigation reveals that over 54 million individuals were impacted. T-Mobile data breach could be worse than initially thought, according to an update to the investigation over 54 million customers had their data compromised.

Data breaches 123

Data breaches Mobile Accountability Phishing 123

Security Affairs

JUNE 17, 2024

The County of Los Angeles’ Department of Public Health (DPH) disclosed a data breach that impacted more than 200,000 individuals. The LA County’s Department of Public Health announced that the personal information of more than 200,000 was compromised after a data breach that occurred between February 19 and February 20, 2024.

Data breaches 104

Data breaches Phishing Insurance Accountability 104

Security Affairs

JULY 19, 2024

The company warns that the stolen data can be used to carry out scams, phishing attacks, and identity theft against Australians.

Data breaches 132

Data breaches Unstructured Data Healthcare Identity Theft 132

Malwarebytes

JULY 24, 2024

TracFone has to undergo annual assessments—including by independent third parties—of its information security program. Employees and certain third parties are to receive privacy and security awareness training. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. Take your time.

Data breaches 93

Data breaches Wireless Passwords Phishing 93

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 104

Data breaches Social Engineering Phishing Accountability 104

CyberSecurity Insiders

MAY 4, 2023

Therefore, computer admins are being warned to be aware of phishing emails, malicious downloads, and be wary of other social engineering attacks. According to sources, a hack has exposed data of over 780,000 children who were patients of Brightline. The data breach took place on January 30th, 2023, impacting about 783,600 people.

Information Security 99

Information Security Healthcare Social Engineering Ransomware 99

Security Affairs

AUGUST 8, 2023

The UK Electoral Commission suffered a data breach that exposed voters’ personal information between 2014 and 2022. The UK Electoral Commission disclosed a data breach that exposed the personal information of voters in the United Kingdom between 2014 and 2022. ” concludes the notification. .”

Data breaches 98

Data breaches Identity Theft Cyber Attacks Risk 98

Security Affairs

DECEMBER 1, 2022

Data breaches can be devastating for organizations, these are 3 of the worst incidents that could have been prevented. Data breaches can be devastating for organizations and even entire countries. Eliminating the risk of a data breach is nearly impossible, but some things can be done to reduce it significantly.

Data breaches 107

Data breaches Passwords Social Engineering Encryption 107

Security Affairs

JANUARY 23, 2023

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers. The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach , the incident exposed the data of 133 customers.

Data breaches 98

Data breaches Accountability Social Engineering Small Business 98

Webroot

MARCH 3, 2025

During this time, many government agencies and consumer protection organizations come together to help educate consumers on how to keep their personal and financial information secure. The growing risks to your data During the third quarter of 2024, data breaches exposed more than 422 million records worldwide.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020.

Data breaches 98

Data breaches Retail Passwords Scams 98

The Last Watchdog

OCTOBER 24, 2022

Employee security awareness is the most important defense against data breaches. Related: Leveraging security standards to protect your company. It involves regularly changing passwords and inventorying sensitive data. As such, you should limit the amount of information that employees have access to.

Security Awareness 214

Security Awareness Data breaches Passwords Cybersecurity 214

Security Affairs

DECEMBER 8, 2024

warn of PRC-linked cyber espionage targeting telecom networks U.S. Hackers stole millions of dollars from Uganda Central Bank International Press Newsletter Cybercrime INTERPOL financial crime operation makes record 5,500 arrests, seizures worth over USD 400 million Hackers Stole $1.49

Artificial Intelligence 102

Artificial Intelligence Spyware Hacking Ransomware 102

Security Affairs

FEBRUARY 18, 2023

. “According to information we have received, their apparent goal is to infect websites and servers with malware for phishing campaigns, malware distribution and other malicious activities.” million customers , and March 2020, which exposed data of 28,000 customers.

Data breaches 98

Data breaches Malware Cyber Attacks Manufacturing 98

Security Affairs

MARCH 19, 2023

The NBA (National Basketball Association) disclosed a data breach after a third-party firm providing a newsletter service was breached. The NBA (National Basketball Association) is notifying followers of a data breach after a third-party company providing a newsletter service was breached.

Data breaches 98

Data breaches Hacking Passwords Phishing 98

Security Affairs

MAY 28, 2023

Swiss electrification and automation technology giant ABB confirmed it has suffered a data breach after a ransomware attack. The attacks began with a spam/phishing email containing malicious URL links. ABB has more than 105,000 employees and has $29.4 billion in revenue for 2022.

Data breaches 98

Data breaches Ransomware Hacking VPN 98

Security Affairs

MAY 27, 2025

In mid-May, the company disclosed a data breach after the April security incident and revealed that threat actors had stolen sensitive customer data. For some of our customers, bank account numbers (for pre-authorized payment) may also have been impacted, if this information was provided by these customers.

Energy and Utilities 82

Energy and Utilities Ransomware Data breaches Accountability 82

Security Affairs

NOVEMBER 17, 2024

that reboots locked devices Ymir ransomware, a new stealthy ransomware grow in the wild Amazon discloses employee data breach after May 2023 MOVEit attacks A new fileless variant of Remcos RAT observed in the wild A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine U.S.

Cryptocurrency 111

Cryptocurrency Hacking Malware Data breaches 111

Security Affairs

JULY 5, 2025

Sanctions Russia’s Aeza Group for aiding crooks with bulletproof hosting Qantas confirms customer data breach amid Scattered Spider attacks CVE-2025-6554 is the fourth Chrome zero-day patched by Google in 2025 U.S.

Data breaches 60

Data breaches Spyware Cybercrime Malware 60

Security Affairs

NOVEMBER 3, 2024

Chinese threat actors use Quad7 botnet in password-spray attacks FBI arrested former Disney World employee for hacking computer menus and mislabeling allergy info Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide PTZOptics cameras zero-days actively exploited in the wild New LightSpy spyware (..)

Cryptocurrency 109

Cryptocurrency Hacking Phishing Cyber Attacks 109