IT Governance

JULY 1, 2020

The first half of 2020 ended on a familiarly bad note, with 92 security incidents accounting for at least 7,021,195,399 breached records. Australian activewear retailer In Sport infected with ransomware (unknown). Retailers Intersport and Claire’s suffer payment card skimming attack (unknown).

Data breaches 140

Data breaches Ransomware Retail Personal data 140

IT Governance

JANUARY 9, 2020

The retail and hospitality industries will continue to have their POS equipment targeted. Despite the rise in sophisticated attacks, 2020 will continue to see newbies and unskilled attackers using toolkits from the dark web to launch scams (such as sexploitation), and phishing and ransomware attacks.

Security 98

Security IoT Phishing Ransomware 98

Schneier on Security

FEBRUARY 7, 2020

Ten years ago, I wrote an essay : "Security in 2020." Well, it's finally 2020. I think I did pretty well. Here's what I said back then: There's really no such thing as security in the abstract. Security can only be defined in relation to something else. You're secure from something or against something. The first is consumerization.

Security 138

Security Communications Access Artificial Intelligence 138

Security Affairs

MAY 20, 2023

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. On September 18, 2020, Luxottica was hit by a ransomware attack that took place on September 18.

Data breaches 95

Data breaches Retail Sales Ransomware 95

Security Affairs

OCTOBER 18, 2020

“The group’s shifting monetization methods—from point-of-sale (POS) malware in 2018, to ransomware in 2019, and hybrid extortion in 2020—is part of a larger trend in which criminal actors have increasingly focused on post-compromise ransomware deployment and data theft extortion.” ” reads the analysis published by FireEye.

Ransomware 130

Ransomware IT Healthcare Phishing 130

Security Affairs

SEPTEMBER 14, 2020

Giant office retail company Staples disclosed a data breach, threat actors accessed some of its customers’ order data. Staples, the office retail giant, disclosed a data breach, it notified its customers that their order data have been accessed by threat actors without authorization.

Data breaches 141

Data breaches Retail Access IT 141

DLA Piper Privacy Matters

JULY 25, 2022

Organisations, including retailers, may collect biometric information via CCTV for a variety of reasons, including to build profiles of the individuals entering their stores, identify returning shoppers or to identify specific individuals that have previously been removed from their premises. The OAIC’s full statement is available here.

Retail 98

Retail Customer Experience Privacy Compliance 98

Security Affairs

DECEMBER 3, 2023

The malware was used in attacks against multiple industries, including education, real estate, retail, non-profit organizations, telecom companies, and governments. The analysis of the C2 infrastructure revealed that it dates back to 2020. The authors of the malware made small modifications to the source code to evade detection.

Retail 131

Retail Education Communications Government 131

Data Protection Report

JANUARY 13, 2021

against a mid-size online retailer who allegedly violated the EU General Data Protection Regulation (GDPR) by monitoring their employees using CCTV. AG” (the Retailer) at the end of 2020. AG” (the Retailer) at the end of 2020. The Retailer should, instead, have considered milder measures (e.g.

Retail 113

Retail GDPR IT Access 113

IT Governance

APRIL 2, 2020

India-based electronics retailer Vijay Sales made to pay for misconfigured database (unknown). The post List of data breaches and cyber attacks in March 2020 – 832 million records breached appeared first on IT Governance UK Blog. Cyber attacks. Tesco issues customers new cards after credential-stuffing attack (600,000).

Data breaches 143

Data breaches Ransomware Energy and Utilities Phishing 143

IT Governance

JANUARY 4, 2021

What else would you expect from the final month of 2020 than the highest number of publicly disclosed incidents we’ve ever recorded? That brings the total for 2020 to more than 20 billion. The post List of data breaches and cyber attacks in December 2020 – 148 million records breached appeared first on IT Governance UK Blog.

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

IBM Big Data Hub

MARCH 8, 2024

Some forecasts suggest online retail might be responsible for half of all retail revenues by next year. In what McKinsey refers to as “the e-commerce catch-22,” many retailers with significant growth in ecommerce sales through 2020 and 2021 saw their margins decline.

Retail 89

Retail e-Discovery Artificial Intelligence Marketing 89

IT Governance

DECEMBER 1, 2020

The post List of data breaches and cyber attacks in November 2020 – 586 million records breached appeared first on IT Governance UK Blog. The post List of data breaches and cyber attacks in November 2020 – 586 million records breached appeared first on IT Governance UK Blog.

Data breaches 137

Data breaches Ransomware e-Discovery Personal data 137

Security Affairs

NOVEMBER 2, 2020

JM Bullion, the online retailer of products made of precious metals (i.e. JM Bullion has sent a ‘ Notice of Data Security Incident ‘ to its customers, the security breach took place on February 18, 2020, when its staff discovered a malicious script on its website. Published by Reddit user r/Silverbugs.

Data breaches 119

Data breaches Retail Security IT 119

Thales Cloud Protection & Licensing

JANUARY 10, 2022

In the latest episode of Thales Security Sessions podcast , I was asked by Neira Jones to join Simon Keates, Head of Strategy and Payment Security at Thales and share my thoughts about the major security and organizational challenges retailers and other financial services organizations are facing. Pandemic has changed us all.

Retail 126

Retail Security Financial Services Authentication 126

The Last Watchdog

APRIL 7, 2021

In mid-2020, Microsoft estimated that some 150 million people actually use their passwordless logons each month, and that’s just on Windows laptops and PCs. Financial institutions and online retailers have been the earlier adopters of passwordless solutions, for obvious reasons. Ease of integration, 76 percent. Cost, 66 percent.

Authentication 147

Authentication Digital transformation IT Passwords 147

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. The NAIC adopted the revised SAT in February 2020, and since that time, several states, including Idaho, Iowa, Kentucky, Ohio and Rhode Island, have begun efforts to adopt the revisions.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

Collibra

APRIL 11, 2023

Retail is a dynamic and competitive market. In addition to the traditional brick-and mortar-stores, the retail business today includes online and mobile stores. The right kind of data can drive great innovations in retail. This blog outlines what bad data means and how you can stop it from hurting your retail business.

Retail 76

Retail Sales Compliance Marketing 76

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data. Pierluigi Paganini.

Data breaches 97

Data breaches Retail Passwords Access 97

Krebs on Security

JUNE 30, 2020

Global lockdowns from COVID-19 have resulted in far fewer fraudsters willing or able to visit retail stores to use their counterfeit cards, and the decreased demand has severely depressed prices in the underground for purloined card data. An ad for a site selling stolen payment card data, circa March 2020. Image: Gemini Advisory.

Sales 307

Sales Retail Marketing Security 307

Security Affairs

JANUARY 30, 2021

million customers in 426 markets in 23 states as of the second quarter of 2020. Then threat actors tricked UScellular employees working in retail stores into downloading and installing malicious software. US wireless carrier UScellular discloses a data breach that exposed personal information of its customers. ” reads the notice.

Data breaches 139

Data breaches Retail Passwords Access 139

Thales Cloud Protection & Licensing

JANUARY 26, 2021

The Verizon DBIR 2020 report indicates that financially motivated attacks against retailers have moved away from Point of Sale (POS) devices and controllers, towards web applications. Figure 1: Web application breaches in the Retail industry. Source: Verizon DBIR 2020. Fraud and scams move to the web. Stolen credentials.

Security 143

Security Retail Authentication Big data 143

Security Affairs

NOVEMBER 4, 2020

Toy industry giant Mattel announced that it has suffered a ransomware attack that took place on July 28th, 2020, and impacted some of its business operations. The company filed a 10-Q form with the Securities and Exchange Commission (SEC), Mattel disclosed that it suffered a ransomware attack on July 28th, 2020.

Ransomware 116

Ransomware Retail Encryption IT 116

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020. Millets, Blacks, Scotts and MilletSport.”

Data breaches 95

Data breaches e-Delivery Passwords Retail 95

Hunton Privacy

OCTOBER 16, 2021

Notably, the settlement was reached in or around November 2020, with the Motion for Preliminary Approval filed on November, 22, 2020, which is six months before the U.S. According to plaintiffs’ attorneys, this settlement is the largest TCPA class action settlement in Massachusetts state history.

Retail 110

Retail IT Marketing 110

Security Affairs

NOVEMBER 20, 2020

Egregor has been actively distributed since September 2020 and has so far hit at least 69 big companies in 16 countries. of victims) and Retail (14.5%). Would you like to learn more about ransomware operations and TTPs in 2020, register now for Group-IB’s signature Threat Hunting and Intelligence conference, CyberCrimeCon.

Ransomware 122

Ransomware Retail Encryption Manufacturing 122

Security Affairs

OCTOBER 10, 2020

TA505 hacking group has been active since 2014 focusing on Retail and banking sectors. We’re seeing more activity leveraging the CVE-2020-1472 exploit (ZeroLogon). — Microsoft Security Intelligence (@MsftSecIntel) October 6, 2020. — Microsoft Security Intelligence (@MsftSecIntel) October 6, 2020.

Authentication 122

Authentication Retail Passwords Ransomware 122

Data Matters

AUGUST 20, 2020

On August 14, 2020, California’s Office of Administrative Law approved and filed with the California Secretary of State final regulations implementing the California Consumer Privacy Act. retail) or for those businesses that operate solely offline and also operate a website. See 11 Cal.

Privacy 68

Privacy Paper Retail Compliance 68

Security Affairs

NOVEMBER 11, 2020

Kvashuk is a Ukrainian citizen living in Renton, Washngton, was responsible for helping test Microsoft’s online retail sales platform. The man was involved in the testing of Microsoft’s online retail sales platform and abused testing access to steal “currency stored value” (CSV) such as digital gift cards. Attorney Brian T.

Retail 109

Retail Sales Access IT 109

Security Affairs

AUGUST 9, 2021

Most of the attacks have been reported in July, the organizations hit by the ransomware gang operate in professional services, construction, manufacturing, retail, and food industries. in Australia since 2020. . in Australia since 2020. ” states the advisory.

Ransomware 111

Ransomware Retail Security Manufacturing 111

Security Affairs

APRIL 6, 2020

Below the timeline of the discovery: Date discovered: January 2020 Date Key Ring and AWS contacted: 18th February 2020 Date of Action: 20th February 2020. Experts also found CSV files storing membership lists and reports for some of North American retail brands. ” continues the report.

Retail 107

Retail Encryption Insurance Passwords 107

Security Affairs

NOVEMBER 15, 2020

Retail giant The North Face has reset the passwords for some of its customers in response to a successful credential stuffing attack. Outdoor retail giant The North Face has forced a password reset for a number of its customers following a successful credential stuffing attack that took place on October 8th and 9th.

Passwords 119

Passwords Retail Data breaches Access 119

Security Affairs

AUGUST 6, 2021

As of 2018, Ermenegildo Zegna operated 480 retail stores (267 of which company-owned) across the world. The RansomEXX gang has been active since 2018 under the name Defray, in June 2020 the group rebranded as RansomEXX. Zegna is one of the most famous Italian luxury fashion houses.

Ransomware 118

Ransomware Archiving Retail Manufacturing 118

Security Affairs

OCTOBER 28, 2020

Steelcase is a US-based furniture company that produces office furniture, architectural and technology products for office environments and the education, health care and retail industries. billion in 2020. “On October 22, 2020, Steelcase Inc. . “On October 22, 2020, Steelcase Inc. ” reads the 8-K form.

Ransomware 106

Ransomware Computer and Electronics Manufacturing Mining 106

Krebs on Security

MARCH 9, 2023

Constella Intelligence , a service that indexes information exposed by public database leaks, shows this email address was used to register an account at the clothing retailer romwe.com, using the password “ 123456xx.” Companies House records show Godbex was dissolved in 2020. Federal Bureau of Investigation (FBI).

Access 245

Access Passwords Sales Retail 245

Krebs on Security

JANUARY 6, 2022

Norton 360 , one of the most popular antivirus products on the market today, has installed a cryptocurrency mining program on its customers’ computers. But many Norton users complain the mining program is difficult to remove, and reactions from longtime customers have ranged from unease and disbelief to, “Dude, where’s my crypto?

Mining 330

Mining Computer and Electronics Blockchain Marketing 330

Hunton Privacy

JANUARY 15, 2020

As reported on our Hunton Retail Law Resource blog, on January 7, 2020, the Federal Trade Commission announced a settlement with Mortgage Solutions FCS, Inc., As reported on our Hunton Retail Law Resource blog, on January 7, 2020, the Federal Trade Commission announced a settlement with Mortgage Solutions FCS, Inc.,

Privacy 49

Privacy IT Retail Compliance 49