Data Breach Today

JANUARY 9, 2018

Dave DeWalt, former CEO of McAfee and FireEye, identifies the next generation of cybersecurity threats in the latest edition of the ISMG Security Report. Also featured: an analysis of the recent news of the Meltdown and Spectre microprocessor flaws and the POS malware attack on retailer Forever 21.

Retail 128

Retail Cybersecurity Security 128

Thales Cloud Protection & Licensing

DECEMBER 20, 2017

We’re now seeing big data play an increasing role in how retail sales and payments are being tailored to individual consumer’s preferences, and providers are adopting and integrating smarter, more efficient ways of completing the path-to-purchase. Three-Domain Secure (3DS) 2.0 The emphasis on securing platforms.

Security 83

Security Retail Marketing Digital transformation 83

Security Affairs

SEPTEMBER 19, 2018

Magecart hackers have stolen customers’ credit card data from the computer hardware and consumer electronics retailer Newegg. The Magecart cybercrime group is back, this time the hackers have stolen customers’ credit card data from the computer hardware and consumer electronics retailer Newegg. Pierluigi Paganini.

Retail 80

Retail Computer and Electronics Data breaches Security 80

Thales Cloud Protection & Licensing

DECEMBER 11, 2018

As I was starting to write this blog, yet another retail program data breach occurred, for Marriott’s Starwood loyalty program. What I’d originally planned to write about was a topic that directly applies – why retailers of all stripes are not investing in data security. But none of these reasons rose to the top in retail.

Retail 66

Retail Data breaches Encryption Mining 66

Thales Cloud Protection & Licensing

JANUARY 25, 2018

This morning we announced, in tandem with our partner 451 Research, the Global Edition of the 2018 Thales Data Threat Report. This year’s report documents these twin drivers, what organizations are doing about the problems and best practice recommendations for how IT security stances should change to meet both needs. Big Data – 99%.

Digital transformation 96

Digital transformation Blockchain Security Encryption 96

Security Affairs

AUGUST 9, 2021

The Australian Cyber Security Centre (ACSC) warns of a surge of LockBit 2.0 The Australian Cyber Security Centre (ACSC) warns of an escalation in LockBit 2.0 Experts warn of active exploitation of the CVE-2018-13379 , a security bug heavily exploited by LockBit to breach networks. ransomware. in Australia since 2020.

Ransomware 113

Ransomware Retail Security Manufacturing 113

Security Affairs

MAY 2, 2023

Threat actors are attempting to exploit a five-year-old authentication bypass issue, tracked as CVE-2018-9995 (CVSS score of 9.8), in TBK DVR devices. The CVE-2018-9995 flaw is due to an error when handling a maliciously crafted HTTP cookie. At this time, the vendor has yet to release security patches to address the flaw.

Authentication 98

Authentication Retail Education Marketing 98

Hunton Privacy

AUGUST 11, 2020

On August 5, 2020, the French Data Protection Authority (the “CNIL”) announced that it has levied a fine of €250,000 on French online shoe retailer, Spartoo, for various infringements of the EU General Data Protection Regulation (“GDPR”). Spartoo is a French-based company specializing in online shoe sales.

Retail 114

Retail GDPR IT Personal data 114

Data Matters

FEBRUARY 13, 2018

On February 7, 2018, the Office of Compliance Inspections and Examinations (OCIE) of the U.S. Securities and Exchange Commission (the Commission) released its annual National Exam Program Examination Priorities (Exam Priorities). 1 As has been widely reported, the Exam Priorities’ general focus areas include: retail investors.

Compliance 60

Compliance Retail Cybersecurity Risk 60

IT Governance

JUNE 25, 2018

We all know by now that, on 25 May 2018, the General Data Protection Regulation (GDPR) came into effect. There are many opportunities within retail, leisure and hospitality for tailored offers and promotions to improve business. You must ensure appropriate security, integrity and confidentiality. So, what are the key facts?

Retail 71

Retail GDPR IT Compliance 71

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020. Millets, Blacks, Scotts and MilletSport.”

Data breaches 95

Data breaches e-Delivery Passwords Retail 95

Security Affairs

AUGUST 6, 2021

As of 2018, Ermenegildo Zegna operated 480 retail stores (267 of which company-owned) across the world. The revenge of the company was €1.159 billion as 2018. The RansomEXX gang has been active since 2018 under the name Defray, in June 2020 the group rebranded as RansomEXX. Pierluigi Paganini.

Ransomware 120

Ransomware Archiving Retail Manufacturing 120

Krebs on Security

AUGUST 16, 2018

Terpin alleges that crooks stole almost $24 million worth of cryptocurrency after fraudulently executing a “SIM swap” on his mobile phone account at AT&T in early 2018. Terpin claims an investigation by AT&T into the 2018 breach found that an employee at an AT&T store in Norwich, Conn.

Security 223

Security Authentication Passwords Phishing 223

Thales Cloud Protection & Licensing

MARCH 14, 2023

It’s estimated that more than 20% of retail sales will come from eCommerce in 2023 (rising to nearly 25% in 2026), illustrating the magnitude of digital transactions. It’s not only consumers and retailers taking notice of this trend, of course. Privacy and data protection are not the only things consumers expect from a retailer.

Privacy 71

Privacy Retail Customer Experience B2C 71

Krebs on Security

DECEMBER 18, 2018

Virtually all companies like to say they take their customers’ privacy and security seriously, make it a top priority, blah blah. That’s because very few of the world’s biggest companies list any security executives in their highest ranks. banks) would have this role in their executive leadership team.

Security 215

Security Marketing Cybersecurity Data breaches 215

Krebs on Security

DECEMBER 3, 2018

The parent firm of bling retailers Jared and Kay Jewelers has fixed a bug in the Web sites of both companies that exposed the order information for all of their online customers. Data exposures like these are some of the most common yet preventable for online retailers.

Retail 200

Retail Phishing Information Security IT 200

Security Affairs

AUGUST 22, 2018

Hackers claim to have stolen the personal details of almost 20,000 Superdrug customers who shopped online at the cosmetics retailer. The British Superdrug is the last victim of a security breach, hackers claim to have stolen the personal details of almost 20,000 people who shopped online at the cosmetics retailer.

Retail 45

Retail Data breaches Passwords Access 45

Thales Cloud Protection & Licensing

APRIL 22, 2024

This trend remained constant from 2016 to 2018. From 2018 to 2023, bad bot traffic increased dramatically, rising from 20.4% in 2018 to an all-time high of 32% in 2023. However, by 2015, bad bot traffic had fallen to its lowest historical level of 18.6%, mainly due to increased human traffic from China, India, and Indonesia.

Digital transformation 71

Digital transformation Retail Access Encryption 71

Security Affairs

APRIL 23, 2019

Bad news for fitness and bodybuilding passionates, the popular online retailer Bodybuilding.com announced that hackers have broken into its systems. The popular online retailer website Bodybuilding.com announced last week that hackers have broken into its systems. ” reads the announcement published on the website.

Passwords 72

Passwords Security Retail Personal data 72

Security Affairs

DECEMBER 22, 2019

The best news of the week with Security Affairs. Online Retailer LightInTheBox exposes unsecured DB containing 1.3TB of web server logs. Negative opinion of Italy security committee Copasir on Huawei, ZTE 5G solutions. Watch out, hackers are targeting CVE-2018-0296 Cisco fixed in 2018. Pierluigi Paganini.

Security 57

Security Ransomware Passwords Data breaches 57

Security Affairs

OCTOBER 8, 2023

Cybersecurity researchers at Human Security discovered a global network of consumer products, dubbed BADBOX, with firmware backdoors installed and sold through a compromised hardware supply chain. ” reads the report published by Human Security. The only way to remove the threat is to wipe the smartphone and reinstall the OS.

e-Discovery 145

e-Discovery Retail Manufacturing Security 145

Data Matters

FEBRUARY 19, 2018

On February 7, 2018, the SEC’s Office of Compliance Inspections and Examinations (OCIE) released its 2018 National Exam Program Examination Priorities (2018 Exam Priorities) and, once again, identified cybersecurity as one of its main areas of focus.

Cybersecurity 60

Cybersecurity Risk Compliance Marketing 60

Security Affairs

FEBRUARY 10, 2022

The FBI reported that US citizens have lost more than $68 million to SIM swapping attacks in 2021, the number of complaints since 2018 and associated losses have increased almost fivefold. Set strict security protocols enabling employees to effectively verify customer credentials before changing their numbers to a new device.

Authentication 96

Authentication Passwords Retail Education 96

Security Affairs

NOVEMBER 18, 2019

Cyber security firm Venafi announced it has uncovered lookalike domains with valid TLS certificates that appear to target major retailers. is a private cybersecurity company that develops software to secure and protect cryptographic keys and digital certificates. retailers with over 49,500 typosquatted domains.

Retail 75

Retail Encryption Phishing Authentication 75

Security Affairs

MARCH 20, 2019

Security experts at riskIQ revealed today that another two organizations were victims of Magecart crime gang, the bedding retailers MyPillow and Amerisleep. Security experts at RiskIQ announced that the two bedding retailers MyPillow and Amerisleep were victims of the Magecart cybercrime gang. Pierluigi Paganini.

Retail 86

Retail Security IT 86

Krebs on Security

APRIL 18, 2019

According to records maintained by Farsight Security , that address is home to a number of other likely phishing domains: securemail.pcm.com.internal-message[.]app. microsoftonline-secure-login[.]com. microsoftonline-secure-login[.]com. microsoftonline-secure-login[.]com. microsoftonline-secure-login[.]com.

IT 187

IT Retail Phishing Access 187

IT Governance

NOVEMBER 23, 2018

Although the ONS (Office for National Statistics) reported that retail sales fell to a six-month low in October because of reduced levels of disposable income, Black Friday is predicted to create a £10 billion shopping spree in the UK that will continue until Christmas Eve. Maintaining processes in the rush. Stay ahead of the criminals.

Retail 58

Retail Security Data breaches Sales 58

Security Affairs

DECEMBER 27, 2018

Security firm Group-IB has estimated that the market volume of illegal online sales of alcohol in Russia exceeded 30 million USD in 2018, i.e. almost 5.8 Such schemes are used by both resellers who sell alcohol online bought from major retailers as well as fraudsters who sell counterfeit products. The intoxicating Internet.

Sales 69

Sales Marketing Search queries Manufacturing 69

Security Affairs

NOVEMBER 11, 2020

Kvashuk is a Ukrainian citizen living in Renton, Washngton, was responsible for helping test Microsoft’s online retail sales platform. The man was involved in the testing of Microsoft’s online retail sales platform and abused testing access to steal “currency stored value” (CSV) such as digital gift cards. million in restitution.

Retail 110

Retail Sales Access IT 110

Schneier on Security

OCTOBER 13, 2021

The plaintiffs claim that Cloudflare contributes to the underlying copyright infringement by providing infringers with caching, content delivery, and security services. It’s a matter of going after those with deep pockets.

Retail 103

Retail Manufacturing IT Security 103

Security Affairs

APRIL 18, 2019

Security experts at CyberInt uncovered a new campaign of a Russian financially motivated threat actor tracked as TA505. “CyberInt researchers have been tracking various activities following the spear-phishing campaign targeting large US-based retailers detected in December 2018.”

Retail 75

Retail Phishing Ransomware Access 75

The Last Watchdog

NOVEMBER 13, 2018

And innovation is percolating among newer entrants, like PerimeterX, Shape Security and Signal Sciences. This week a new entrant in this field, Cequence Security , formally launched what it describes as a “game-changing” application security platform. Shifting security challenge.

Security 140

Security Digital transformation B2C B2B 140

IT Governance

SEPTEMBER 27, 2018

There were also a few more reported ransomware incidents than normal, some of which saw the victims paying the fine – something most security professionals advise against. NewsNow suffers security breach – passwords should be considered compromised. privacy officials look into data breach involving bankrupt computer retailer.

Data breaches 111

Data breaches Passwords Ransomware Phishing 111

Hunton Privacy

OCTOBER 19, 2022

On October 12, 2022, New York Attorney General Letitia James announced that her office had secured a $1.9 million penalty from e-commerce retailer Zoetop, owner of SHEIN and ROMWE, following an improperly handled data breach. In addition to paying New York $1.9

Data breaches 64

Data breaches Passwords Retail Cybersecurity 64

Krebs on Security

AUGUST 3, 2018

banks issue credit cards to their account holders, said a Web site misconfiguration exposed the names, addresses, dates of birth and Social Security numbers of thousands of people who applied for cards between early March 2017 and mid-July 2018. TCM Bank , a company that helps more than 750 small and community U.S.

Data breaches 152

Data breaches Retail Risk Marketing 152

Security Affairs

FEBRUARY 10, 2022

With this, they deceived the employees of phone stores to obtain duplicate SIM cards and, in this way, have access to the bank’s security confirmation messages. In this way they could operate in online banking and access bank accounts to empty them after receiving security confirmation messages from the banks.”

Authentication 111

Authentication Passwords Retail Access 111

Hunton Privacy

AUGUST 6, 2021

On July 30, 2021, the UK High Court handed down its judgment in the case of Warren v DSG Retail Ltd [2021] EWHC 2168 (QB), determining that the claimant could not seek damages on the basis of misuse of personal information, breach of confidence or common law negligence following a data breach. That fine is under appeal.

Data breaches 116

Data breaches Retail Sales Personal data 116