article thumbnail

Uber agrees to pay $148 million in massive 2016 data breach settlement

Security Affairs

Uber agrees to $148 million settlement with US States and the District of Columbia over the massive 2016 data breach that exposed personal data of 57 million of its users. For example, the share for the Illinois state is $8.5 ” continues the AP. million, each affected driver will receive $100. Pierluigi Paganini.

article thumbnail

This Service Helps Malware Authors Fix Flaws in their Code

Krebs on Security

There aren’t a lot of public examples of this anti-malware activity, in part because it wades into legally murky waters. ” From 2013 to 2016, upO was a major player on Exploit[.]in For roughly one year beginning in 2016, Lebron was a top moderator on Exploit. One of many articles Lebron published on Krober[.]biz

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Uber Data Breach Results in Corporate Cooperation and Executive Conviction

Data Matters

However, in November 2016—mere days after testifying before the FTC in its ongoing investigation of the 2014 breach—hackers contacted Sullivan to inform him of a vulnerability they had discovered that permitted the extraction of a large volume of Uber’s data. In response, Uber disclosed the breach publicly, and to the FTC, in November 2017.

article thumbnail

How Phishers Are Slinking Their Links Into LinkedIn

Krebs on Security

Here’s one example from Jan. 3 example that leads to a phish targeting Amazon customers. Way back in 2016, security firm Fortinet blogged about LinkedIn’s redirect being used to promote phishing sites and online pharmacies. Urlscan also found this phishing scam from Jan. 12 that uses Slinks to spoof the U.S.

Phishing 318
article thumbnail

FBI Arrests Alleged Owner of Deer.io, a Top Broker of Stolen Accounts

Krebs on Security

An example seller’s panel at deer.io. For example, one early adopter of deer.io Firsov also tweeted about competing in and winning several “capture the flag” hacking competitions, including the 2016 and 2017 CTF challenges at Positive Hack Days (PHDays), an annual security conference in Moscow.

Sales 291
article thumbnail

NJ AG Smacks Practice With Hefty Fine for Vendor Breach

Data Breach Today

Settlement Spotlights Vendor Risks, Plus State Enforcement Trends The New Jersey state attorney general has smacked a medical practice with a $418,000 penalty for a 2016 HIPAA breach involving a vendor's misconfigured server. The case is the latest example of the risks posed by vendors.

Risk 101
article thumbnail

E-Mail Leaves an Evidence Trail

Schneier on Security

For example, Manafort provided the bank with doctored [profit and loss statements] for [Davis Manafort Inc.] for both 2015 and 2016, overstating its income by millions of dollars. The doctored 2016 DMI P&L was inflated by Manafort by more than $3.5 Manafort then sent the falsified 2016 DMI P&L.pdf to Lender D.

Paper 134