Hackers need less than a minute to perform a successful data breach. It will be over before you can even finish your cup of coffee. Unfortunately, it can take companies several weeks to realize they were the victim of a malware attack. That’s what happened to Pepsi Bottling Ventures. Pepsi …
Reddit Cybersecurity Incident
Reddit, a popular social news site, disclosed that it was hacked on Sunday night (pacific time). The company announced on February 9th in a posting that they first became aware of the incident that happened on February 5th. It refers to it as “sophisticated phishing” targeting Reddit employees. According to …
Search Engine Yandex Suffers Massive Leak
Russian search engine Yandex offers a slew of online services to replace Google, Netflix, Spotify, Amazon, and Uber. However, a recent Yandex data leak contains nearly 50 gigabytes of data with leaked files, including information ranging from API (application programming interface) keys to search engine behaviors. Information released by the …
Recent T-Mobile Data Breach Affects Google Fi Customers
Google Fi users have received emails regarding a recent data breach at T-Mobile. From November 2022 through January 2023, hackers were able to obtain unauthorized access to data for 37 million T-Mobile customers. Google Fi, a wireless plan, uses T-Mobile networks to provide wireless service to customers. Google Fi wireless …
Data Breach at GoTo: Encrypted Customer Information Compromised
On January 23, 2023, GoTo released a statement detailing an update to the ongoing data breach investigation. Business owners should pay attention to this incident and its implications for their security practices. Details of the Hack: According to GoTo’s statement, the attack was first confirmed on November 30, 2022, involving …
PayPal Hack: 35,000 Accounts Compromised in Credential Stuffing Attack
On December 20, 2022, PayPal, one of the most widely used online payment platforms, confirmed that 35,000 users’ accounts had been compromised due to a security breach. An unauthorized party viewed and potentially obtained some personal information of PayPal customers between December 6, 2022, and December 8, 2022. As soon …
T-Mobile Data Breach Impacts Millions
The mobile phone provider recently announced that a data breach had impacted 37 million T-Mobile accounts. In a Form 8-K filing with the US Securities and Exchange Commission, T-Mobile said they realized an authorized entity obtained data via a single API on January 5, 2023. Unlike other data breach cases …
Twitter Data of 235 Million Accounts Leaked
A dataset purportedly comprising the email addresses and phone numbers of over 400 million Twitter users just a few weeks ago was listed for sale on the hacker forum Breached Forums. The information was initially released on December 23, 2022, by a hacker going by the handle “Ryushi.” The attacker …
LastPass Security Breach: Encrypted Passwords at Risk
LastPass, a popular password manager, announced that an unauthorized party accessed the company’s archived backups of its production data on a third-party cloud-based storage service. According to the company’s investigation, a threat actor accessed the cloud storage environment in August 2022 with information obtained from an earlier incident. Although the …
DraftKings Data Breach Exposes Personal Information of 68,000 Customers
In late November 2022, sports betting firm DraftKings announced that it had suffered a data breach affecting approximately 68,000 customers. The company stated that the breach resulted from a credential stuffing attack, in which attackers obtained credentials from a third-party source and attempted to use them to access DraftKings accounts. …