Krebs on Security

JULY 29, 2021

Every time there is another data breach, we are asked to change our password at the breached entity. Here’s a closer look at what typically transpires in the weeks or months before an organization notifies its users about a breached database.

Passwords 363

Passwords Password Management Phishing Scams 363

Security Affairs

MARCH 31, 2020

Marriott disclosed a new security breach detected at the end of February 2020 that could impact up to 5.2 Marriott International discloses a data breach that exposed the personal information of roughly 5.2 million hotel guests, the incident was detected at the end of February 2020. million of its guests.

Data breaches 144

Data breaches Passwords Advertising Accountability 144

Security Affairs

NOVEMBER 22, 2021

GoDaddy suffered a data breach that impacted up to 1.2 GoDaddy discloses a data breach that impacted up to 1.2 million of its customers, threat actors breached the company’s Managed WordPress hosting environment. The original WordPress Admin password that was set at the time of provisioning was exposed.

Data breaches 141

Data breaches Passwords Accountability Information Security 141

Malwarebytes

OCTOBER 4, 2021

Millions of Neiman Marcus customers have had their personal and financial information exposed in a data breach. million customers of Neiman Marcus Group stores, specifically Neiman Marcus and Last Call, are being notified about the data breach by email. According to the press release 4.6 What information was stolen?

Data breaches 141

Data breaches Passwords Password Management Accountability 141

Security Affairs

APRIL 11, 2020

San Francisco International Airport (SFO) disclosed a data breach, its websites SFOConnect.com and SFOConstruction.com were hacked last month. In March hackers compromised two websites of San Francisco International Airport (SFO) and now it disclosed a data breach. ” continues the data breach notice.

Data breaches 145

Data breaches Hacking Telecommunications Advertising 145

CSO Magazine

APRIL 15, 2021

Pop quiz: What has been the most popular — and therefore least secure — password every year since 2013? If you answered “password,” you’d be close. Qwerty” is another contender for the dubious distinction, but the champion is the most basic, obvious password imaginable: “123456.”

Passwords 145

Passwords Data breaches 145

Security Affairs

NOVEMBER 1, 2020

A data breach broker is selling account databases containing a total of 34 million user records stolen from 17 companies. The threat actor is advertising the stolen data since October 28 on a hacker forum. Only RedMart, after being informed by Bleeping computer, disclosed a security breach. Source Bleeping Computer.

Data breaches 145

Data breaches Accountability Advertising Passwords 145

Security Affairs

NOVEMBER 16, 2023

Samsung Electronics disclosed a data breach that exposed customer personal information to an unauthorized individual. Samsung Electronics suffered a data breach that exposed the personal information of some of its customers to an unauthorized individual. ” reads the data breach notification sent to the customers.

Data breaches 139

Data breaches eCommerce Hacking Passwords 139

Krebs on Security

NOVEMBER 5, 2024

At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). put him on a terror watch list after he traveled to Syria in 2017.

Cybercrime 277

Cybercrime Mobile Media Hacking 277

Security Affairs

OCTOBER 17, 2022

Australian retail giant Woolworths disclosed a data breach that impacted approximately 2.2 Bad news for the customers of the MyDeal online marketplace, the Australian retail giant Woolworths disclosed a data breach that impacted approximately 2.2 Also, no customer account passwords were accessed. million of them.

Data breaches 136

Data breaches Retail Passwords Accountability 136

Security Affairs

AUGUST 3, 2020

Havenly, a Denver-Based company, that realized an interior designer marketplace has disclosed a data breach that impacted 1.3 The US-based interior design web site Havenly has disclosed a data breach after the known threat actor ShinyHunters has leaked for free the databases of multiple companies on a hacker forum.

Data breaches 135

Data breaches Accountability Passwords Advertising 135

Security Affairs

JANUARY 30, 2021

US wireless carrier UScellular discloses data breach, personal information of customers may have been exposed and their phone numbers ported. US wireless carrier UScellular discloses a data breach that exposed personal information of its customers. ” reads the USCellular data breach notification.

Data breaches 144

Data breaches Wireless Retail Accountability 144

Security Affairs

DECEMBER 14, 2020

The startup started reporting the security incident to its customers that had their data accidentally exposed online, only users who registered on its platform before or on March 17, 2020, were impacted. The company pointed out that financial information either passwords were not exposed. SecurityAffairs – hacking, data leak).

Data breaches 145

Data breaches Backups Software Passwords 145

Security Affairs

MAY 13, 2020

Magellan Health Inc announced it was the victim of a ransomware attack that took place on April 11, 2020, the company also confirmed that hackers have stolen personal information from one of its corporate servers. ” reads the data breach notice issued by the company. Magellan Health Inc. Pierluigi Paganini.

Data breaches 144

Data breaches Healthcare Ransomware Identity Theft 144

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data.

Data breaches 125

Data breaches Retail Passwords Accountability 125

Daniel Miessler

MAY 19, 2020

TOPIC: In this episode, Daniel takes a look at the 2020 Verizon Data Breach Investigations Report. Verizon’s Breach Report is one of the best infosec reports out there, and I’m always excited when I hear it’s been released. The top 2 breach threat actions were Phishing and Use of Stolen Creds.

Data breaches 130

Data breaches Phishing Malware Hacking 130

The Last Watchdog

AUGUST 19, 2021

Often inadvertent data breaches stem from a well-meaning employee trying to meet the needs of clients but without the technical systems to facilitate. I’m going to speculate that the sudden shift to work-from-home in 2020 has led to quick decisions to meet immediate needs.

Mobile 235

Mobile Data breaches Authentication Accountability 235

Security Affairs

JUNE 18, 2021

The supermarket chain Wegmans US Wegmans discloses a data breach, customers information was exposed on the Internet due to a misconfiguration issue. Exposed data include customers’ names, addresses, phone numbers, birth dates, Shoppers Club numbers, as well as e-mail addresses and Wegmans.com account passwords.

Data breaches 114

Data breaches Passwords Accountability Marketing 114

Security Affairs

NOVEMBER 12, 2020

The popular children’s online playground Animal Jam has suffered a data breach that affected more than 46 million accounts. Animal Jam has suffered a data breach impacting 46 million accounts belonging to children and parents who signed up for the game. . million monthly active users. million monthly active users.

Data breaches 141

Data breaches Accountability Passwords Encryption 141

Security Affairs

JUNE 2, 2020

.” On Sunday, while the turmoil was continuing in the US, alleged members of the group (@PowerfulArmyGR, @namatikure) announced on Pastebin that the site was hacked and leaked the database of email and passwords. In other words, this is data that's already out there in other breaches, at least the email addresses are.

Data breaches 141

Data breaches DDOS Passwords Advertising 141

Security Affairs

MARCH 16, 2020

In the meantime, if you have any further questions please drop us a direct message, call us on 01329 750 630, or visit our FAQs webpage [link] — Aerial Direct (@Aerial_Direct) March 13, 2020. To reassure you, the database did not include any passwords or financial details, such as bank account number or credit card information.”

Data breaches 138

Data breaches Telecommunications Passwords Advertising 138

Security Affairs

MARCH 6, 2020

Virgin Media discloses a data breach that exposed the personal information of roughly 900,000 of its customers. Virgin Media discloses a data breach that exposed the personal information of approximately 900,000 customers (names, home, and email addresses and phone numbers ). million subscribers at December 31, 2019.

Data breaches 138

Data breaches Media Wireless Advertising 138

SecureWorld News

MARCH 24, 2022

Now, headlines about ransomware, cyberattacks, and data breaches pour into social media feeds as steady as a river flows. SecureWorld News takes a look at some of the largest data breaches to ever occur. Top 10 most significant data breaches. Yahoo data breach (2013). Who attacked: no attacker.

Data breaches 129

Data breaches Passwords Accountability Government 129

Security Affairs

MAY 3, 2021

Which are the most common causes of a Data Breach and how to prevent It? Data breaches are highly damaging and equally embarrassing for businesses and consumers. If you look at Verizon’s 2020 Data Breach Investigations Report, you can find some of the most common causes of data breaches.

Data breaches 144

Data breaches Social Engineering Engineering Network Security 144

Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach that exposed customers’ network information (CPNI), including phone numbers and calls records. T-Mobile has disclosed a data breach exposing customers’ account’s information. ” reads the statement published by the company. Pierluigi Paganini.

Data breaches 145

Data breaches Mobile Telecommunications Accountability 145

Krebs on Security

APRIL 6, 2021

Ne’er-do-wells leaked personal data — including phone numbers — for some 553 million Facebook users this week. Facebook says the data was collected before 2020 when it changed things to prevent such information from being scraped from profiles. — rely on that number for password resets.

Mobile 358

Mobile Accountability Passwords Authentication 358

Malwarebytes

FEBRUARY 14, 2025

Over the years Zacks has suffered a few data breaches. In 2023, data allegedly belonging to Zacks containing 8,615,098 records was leaked online. The most recent data in this database is from May 2020. This would be the 2nd (hacked back in 2020) major data breach for Zacks.

Accountability 77

Accountability Data breaches Passwords Phishing 77

Malwarebytes

JUNE 14, 2024

In 2020, Truist provided financial services to about 12 million consumer households. The online handle of the seller immediately raised the suspicion that this was yet another Snowflake related data breach. Every breach is different, so check with the vendor to find out what’s happened and follow any specific advice they offer.

Data breaches 107

Data breaches Banking Passwords Phishing 107

Krebs on Security

JUNE 15, 2024

.” In a SIM-swapping attack, crooks transfer the target’s phone number to a device they control and intercept any text messages or phone calls sent to the victim — including one-time passcodes for authentication, or password reset links sent via SMS.

Hacking 336

Hacking Cybercrime Phishing Passwords 336

Troy Hunt

JULY 21, 2020

The tl;dr is that someone with a BeerAdvocate account was convinced the service had been pwned as they'd seen evidence of an email address and password they'd used on the service being abused. Someone had registered a new Netflix account with my email / password associated with my BeerAdvocate account. Not even a password manager.

Passwords 338

Passwords Accountability Password Management Backups 338

CyberSecurity Insiders

MARCH 22, 2022

Going deep into the details, CafePress’s former owner, Residual Pumpkin Entity, was storing critical customer data such as social security numbers, passwords and other account related info in plain text and not with any authentication. In Sept’2020, PlanetArt acquired CafePress from its former parent company Shutterfly or Snapfish. .

Data breaches 127

Data breaches Retail Identity Theft Authentication 127

Security Affairs

NOVEMBER 25, 2021

Recently disclosed data breach impacted several of its brands, including Domain Factory, Heart Internet, Host Europe, Media Temple, tsoHost and 123Reg. Recently GoDaddy has disclosed a data breach that impacted up to 1.2 million of its customers, threat actors breached the company’s Managed WordPress hosting environment.

Data breaches 109

Data breaches Passwords Media Internet 109

Adam Levin

DECEMBER 16, 2020

If 2020 taught us anything, it’s to expect the unexpected–and do the best we can in a rapidly changing world. Don’t re-use passwords: Yes, keeping track of passwords for all of your accounts can be a chore, but using the same password means that one breached account can be used to others that use the same user credentials.

VPN 245

VPN Antivirus Passwords Backups 245

CyberSecurity Insiders

OCTOBER 13, 2021

Problems arise for businesses when they base their access management programs entirely around passwords, however. Such programs overlook the burden that passwords can cause to users as well as to IT and security teams. Passwords: An unsustainable business cost. Users have too many passwords to remember on their own.

Passwords 141

Passwords Accountability Data breaches Authentication 141

Krebs on Security

SEPTEMBER 5, 2023

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. The vulnerability exploited by the intruders was patched back in 2020, but the employee never updated his Plex software.

Cryptocurrency 362

Cryptocurrency Passwords Encryption Accountability 362

Webroot

MAY 3, 2022

Passwords have become a common way to access and manage our digital lives. Having a password allows you to securely access your information, pay bills or connect with friends and family on various platforms. However, having a password alone is not enough. Your passwords also need to be managed and protected.

Passwords 131

Passwords Identity Theft Password Management Antivirus 131

Hot for Security

MARCH 26, 2021

Fact: In November 2020, a database containing over 200 million usernames and passwords was leaked in the infamous Cit0day breach. According to researchers, the leak included both new and previously breached login credentials from over 23,600 websites. Was your data exposed in the Cit0day breach?

Data breaches 106

Data breaches Passwords Accountability Advertising 106