• Search for:
    22 Feb, 2022
    Report: Missouri Governor’s Office Responsible for Teacher Data Leak
    Cybersecurity , , , , , , , ,

    Missouri Governor Mike Parson made headlines last year when he vowed to criminally prosecute a journalist for reporting a security flaw in a state website that exposed personal information of more than 100,000 teachers. But Missouri prosecutors now say they… Read More » …

    Read MoreReport: Missouri Governor’s Office Responsible for Teacher Data Leak

    16 Feb, 2022
    Red Cross Hack Linked to Iranian Influence Operation?
    Cybersecurity , , , , , , , , , , , , , ,

    A network intrusion at the International Committee for the Red Cross (ICRC) in January led to the theft of personal information on more than 500,000 people receiving assistance from the group. KrebsOnSecurity has learned that the email address used by a cybercriminal actor who offered to sell the stolen ICRC data also was used to register multiple domain names the FBI says are tied to a sprawling media influence operation originating from Iran. …

    Read MoreRed Cross Hack Linked to Iranian Influence Operation?

    14 Dec, 2021
    Inside Ireland’s Public Healthcare Ransomware Scare
    Cybersecurity , , , , , , , , ,

    The accounting firm PricewatersCoopers recently published lessons learned from the disruptive and costly ransomware attack in May 2021 on Ireland’s public health system. The unusually candid post-mortem found that nearly two months elapsed between the initial intrusion and the launching of the ransomware. It also found affected hospitals had tens of thousand of outdated Windows 7 systems, and that the health system’s IT administrators failed to respond to multiple warning signs that a massive attack was imminent. …

    Read MoreInside Ireland’s Public Healthcare Ransomware Scare

    28 Oct, 2021
    Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018
    Cybersecurity , , , , , ,

    In December 2018, bling vendor Signet Jewelers fixed a weakness in their Kay Jewelers and Jared websites that exposed the order information for all of their online customers. This week, Signet subsidiary Zales.com updated its website to remediate a nearly identical customer data exposure. …

    Read MoreZales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018

    18 Aug, 2021
    T-Mobile: Breach Exposed SSN/DOB of 40M+ People
    Cybersecurity ,

    T-Mobile warned Monday that a data breach has exposed the names, date of birth, Social Security number and driver’s license/ID information of more than 40 million current, former or prospective customers. The acknowledgment came less than 48 hours after millions of the stolen T-Mobile customer records went up for sale in the cybercrime underground. …

    Read MoreT-Mobile: Breach Exposed SSN/DOB of 40M+ People

    16 Aug, 2021
    T-Mobile Investigating Claims of Massive Data Breach
    Cybersecurity , , , , , ,

    Communications giant T-Mobile said today it is investigating the extent of a data breach that hackers claim has exposed sensitive personal data on 100 million T-Mobile USA customers, in many cases including the name, Social Security number, address, date of birth, phone number, security PINs and details that uniquely identify each customer’s mobile device. …

    Read MoreT-Mobile Investigating Claims of Massive Data Breach

    8 Jul, 2021
    Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software
    Cybersecurity , , , , , , , , , , , , , ,

    Last week cybercriminals deployed ransomware to 1,500 organizations that provide IT security and technical support to many other companies. The attackers exploited a vulnerability in software from Kaseya, a Miami-based company whose products help system administrators manage large networks remotely. Now it appears Kaseya’s customer service portal was left vulnerable until last week to a data-leaking security flaw that was first identified in the same software six years ago. …

    Read MoreKaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

    12 Apr, 2021
    ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users
    Cybersecurity , , ,

    Someone is selling account information for 21 million customers of ParkMobile, a mobile parking app that’s popular in North America. The stolen data includes customer email addresses, phone numbers, license plate numbers, hashed passwords and mailing addresses. …

    Read MoreParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users

    6 Apr, 2021
    Are You One of the 533M People Who Got Facebooked?
    Cybersecurity , , , , , ,

    Ne’er-do-wells leaked personal data — including phone numbers — for some 553 million Facebook users this week. Facebook says the data was collected before 2020 when it changed things to prevent such information from being scraped from profiles. To my mind, this just reinforces the need to remove mobile phone numbers from all of your online accounts wherever feasible. Meanwhile, if you’re a Facebook product user and want to learn if your data was leaked, there are easy ways to find out. …

    Read MoreAre You One of the 533M People Who Got Facebooked?

    4 Apr, 2021
    Ubiquiti All But Confirms Breach Response Iniquity
    Cybersecurity ,

    For four days this past week, Internet-of-Things giant Ubiquiti failed to respond to requests for comment on a whistleblower’s allegations that the company had massively downplayed a “catastrophic” two-month breach ending in January to save its stock price, and that Ubiquiti’s insinuation that a third-party was to blame was a fabrication. I was happy to add their eventual public response to the top of Tuesday’s story on the whistleblower’s claims, but their statement deserves a post of its own because it actually confirms and reinforces those claims. …

    Read MoreUbiquiti All But Confirms Breach Response Iniquity