Threatpost

DECEMBER 9, 2020

retailers have vulnerabilities which pose an “imminent” cyber-threat, including Amazon, Costco, Kroger and Walmart. As just one symptom, 83 percent of the Top 30 U.S.

Retail 116

Retail IT Risk Cybersecurity 116

IT Governance

JANUARY 30, 2024

Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 2 PB. TB Four Hands Source (New) Manufacturing USA Yes 1.5 TB Four Hands Source (New) Manufacturing USA Yes 1.5

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

IT Governance

NOVEMBER 23, 2020

Amid the mad dash for bargains and inevitable stories of shop-floor brawls, Black Friday brings with it a spike in cyber security threats, as cyber criminals take advantage of people desperate for bargains. As a rule, it’s never advisable to buy things online using public Wi-Fi, because you can’t be sure that the connection is secure.

Phishing 137

Phishing Sales Retail Passwords 137

Security Affairs

MARCH 4, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! If you want to also receive for free the newsletter with the international press subscribe here. FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M

Security 92

Security Ransomware Data breaches Retail 92

Hunton Privacy

AUGUST 11, 2020

On August 5, 2020, the French Data Protection Authority (the “CNIL”) announced that it has levied a fine of €250,000 on French online shoe retailer, Spartoo, for various infringements of the EU General Data Protection Regulation (“GDPR”).

Retail 114

Retail GDPR IT Personal data 114

Security Affairs

AUGUST 9, 2021

The Australian Cyber Security Centre (ACSC) warns of a surge of LockBit 2.0 The Australian Cyber Security Centre (ACSC) warns of an escalation in LockBit 2.0 in Australia since 2020. Experts warn of active exploitation of the CVE-2018-13379 , a security bug heavily exploited by LockBit to breach networks. ransomware.

Ransomware 110

Ransomware Retail Security Manufacturing 110

IT Governance

JULY 1, 2020

The first half of 2020 ended on a familiarly bad note, with 92 security incidents accounting for at least 7,021,195,399 breached records. Duluth student alerted school district about security breach (unknown). University of Missouri Health Care discloses 2019 security incident (unknown). hack (350,000).

Data breaches 140

Data breaches Ransomware Retail Personal data 140

Security Affairs

NOVEMBER 29, 2020

Every week the best security articles from Security Affairs free for you in your email box. The post Security Affairs newsletter Round 291 appeared first on Security Affairs. A new round of the weekly SecurityAffairs newsletter arrived! Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Security 95

Security Data breaches Ransomware Retail 95

Security Affairs

MAY 20, 2023

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. The investigation into the security breach is still ongoing. “We Luxottica Group S.p.A.

Data breaches 96

Data breaches Retail Sales Ransomware 96

IT Governance

APRIL 9, 2024

Kid Security breached again: children’s live GPS locations exposed on the Internet Last November , the parental control app Kid Security, which allows parents to monitor and control their children’s online safety, was found to have exposed more than 300 million records via misconfigured Elasticsearch and Logstash instances.

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

Security Affairs

SEPTEMBER 14, 2020

Giant office retail company Staples disclosed a data breach, threat actors accessed some of its customers’ order data. Staples, the office retail giant, disclosed a data breach, it notified its customers that their order data have been accessed by threat actors without authorization. Pierluigi Paganini.

Data breaches 142

Data breaches Retail Access IT 142

Data Matters

FEBRUARY 20, 2020

Securities and Exchange Commission’s (SEC) Office of Compliance Inspections and Examinations (OCIE) and the Financial Industry Regulatory Authority (FINRA) recently published their examination priorities (together, the Examination Priorities) for the 2020 calendar year. Protection of Retail Investors .

Retail 68

Retail Compliance Marketing Risk 68

Data Matters

JANUARY 24, 2020

Securities and Exchange Commission’s (SEC) Office of Compliance Inspections and Examinations (OCIE) and the Financial Industry Regulatory Authority (FINRA) recently published their examination priorities (together, the Examination Priorities) for the 2020 calendar year. Protection of Retail Investors .

Cybersecurity 68

Cybersecurity Retail Compliance Marketing 68

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020. Millets, Blacks, Scotts and MilletSport.”

Data breaches 96

Data breaches e-Delivery Passwords Retail 96

DLA Piper Privacy Matters

JULY 25, 2022

Organisations, including retailers, may collect biometric information via CCTV for a variety of reasons, including to build profiles of the individuals entering their stores, identify returning shoppers or to identify specific individuals that have previously been removed from their premises. The OAIC’s full statement is available here.

Retail 98

Retail Customer Experience Privacy Compliance 98

IT Governance

APRIL 2, 2020

Australia’s Defence Force Recruiting systems were taken offline after security breach (unknown). South African utility provider Eskom is still feeling effects of a cyber security incident (unknown). Wichita State University notifies students and staff of a security incident (1,762). Financial information.

Data breaches 143

Data breaches Ransomware Energy and Utilities Phishing 143

IT Governance

JANUARY 4, 2021

What else would you expect from the final month of 2020 than the highest number of publicly disclosed incidents we’ve ever recorded? We logged 134 security incidents in December, which accounted for 148,354,955 breached records. That brings the total for 2020 to more than 20 billion. aw (unknown). Ransomware.

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

Security Affairs

NOVEMBER 2, 2020

JM Bullion, the online retailer of products made of precious metals (i.e. JM Bullion has sent a ‘ Notice of Data Security Incident ‘ to its customers, the security breach took place on February 18, 2020, when its staff discovered a malicious script on its website. Published by Reddit user r/Silverbugs.

Data breaches 118

Data breaches Retail Security IT 118

Security Affairs

JANUARY 30, 2021

million customers in 426 markets in 23 states as of the second quarter of 2020. The company detected the security breach on January 6, 2021, and determined that the intrusion took place early this year, on January 4th, 2021. UScellular also changed users’ and user Authorized Contacts’ PIN and security question/answer. “We

Data breaches 138

Data breaches Retail Passwords Access 138

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data. Approximately 4.6

Data breaches 99

Data breaches Retail Passwords Access 99

IT Governance

DECEMBER 1, 2020

We recorded 103 cyber security incidents in November, which accounted for 586,771,602 leaked records. The post List of data breaches and cyber attacks in November 2020 – 586 million records breached appeared first on IT Governance UK Blog. Here is our complete list of November’s cyber attacks and data breaches.

Data breaches 137

Data breaches Ransomware e-Discovery Personal data 137

Krebs on Security

JUNE 30, 2020

Global lockdowns from COVID-19 have resulted in far fewer fraudsters willing or able to visit retail stores to use their counterfeit cards, and the decreased demand has severely depressed prices in the underground for purloined card data. An ad for a site selling stolen payment card data, circa March 2020. Image: Gemini Advisory.

Sales 297

Sales Retail Marketing Security 297

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. The NAIC adopted the revised SAT in February 2020, and since that time, several states, including Idaho, Iowa, Kentucky, Ohio and Rhode Island, have begun efforts to adopt the revisions.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

Collibra

APRIL 11, 2023

Retail is a dynamic and competitive market. In addition to the traditional brick-and mortar-stores, the retail business today includes online and mobile stores. The right kind of data can drive great innovations in retail. This blog outlines what bad data means and how you can stop it from hurting your retail business.

Retail 86

Retail Sales Compliance Marketing 86

Security Affairs

OCTOBER 10, 2020

TA505 hacking group has been active since 2014 focusing on Retail and banking sectors. Security experts from cyber-security firm Prevailion reported that TA505 has compromised more than 1,000 organizations. We’re seeing more activity leveraging the CVE-2020-1472 exploit (ZeroLogon). states Microsoft.

Authentication 122

Authentication Retail Passwords Ransomware 122

Security Affairs

DECEMBER 3, 2023

The malware was used in attacks against multiple industries, including education, real estate, retail, non-profit organizations, telecom companies, and governments. The analysis of the C2 infrastructure revealed that it dates back to 2020.

Retail 131

Retail Education Communications Government 131

Security Affairs

NOVEMBER 4, 2020

Toy industry giant Mattel announced that it has suffered a ransomware attack that took place on July 28th, 2020, and impacted some of its business operations. The company filed a 10-Q form with the Securities and Exchange Commission (SEC), Mattel disclosed that it suffered a ransomware attack on July 28th, 2020.

Ransomware 118

Ransomware Retail Encryption IT 118

Security Affairs

FEBRUARY 14, 2020

Nedbank bank announced on Thursday that a security breach at a third-party supplier has compromised the details of as many as 1.7 Nedbank bank disclosed on Thursday a security breach at a third-party supplier that has compromised the details of as many as 1.7 ” reads a security notice published by the bank.

Security 112

Security Marketing Retail Communications 112

Security Affairs

NOVEMBER 15, 2020

Retail giant The North Face has reset the passwords for some of its customers in response to a successful credential stuffing attack. Outdoor retail giant The North Face has forced a password reset for a number of its customers following a successful credential stuffing attack that took place on October 8th and 9th.

Passwords 119

Passwords Retail Data breaches Access 119

Security Affairs

AUGUST 6, 2021

As of 2018, Ermenegildo Zegna operated 480 retail stores (267 of which company-owned) across the world. The RansomEXX gang has been active since 2018 under the name Defray, in June 2020 the group rebranded as RansomEXX. It was founded in 1910 by Ermenegildo Zegna in Trivero, Biella Province of the Piedmont region of Northern Italy.

Ransomware 117

Ransomware Archiving Retail Manufacturing 117

Krebs on Security

JANUARY 6, 2022

“Norton creates a secure digital Ethereum wallet for each user,” the FAQ reads. “The key to the wallet is encrypted and stored securely in the cloud. “How on Earth could anyone at Norton think that adding crypto mining within a security product would be a good thing?,” ” reads a Dec.

Mining 324

Mining Computer and Electronics Blockchain Marketing 324

Security Affairs

NOVEMBER 20, 2020

Egregor has been actively distributed since September 2020 and has so far hit at least 69 big companies in 16 countries. of victims) and Retail (14.5%). Would you like to learn more about ransomware operations and TTPs in 2020, register now for Group-IB’s signature Threat Hunting and Intelligence conference, CyberCrimeCon.

Ransomware 123

Ransomware Retail Encryption Manufacturing 123

Security Affairs

NOVEMBER 11, 2020

Kvashuk is a Ukrainian citizen living in Renton, Washngton, was responsible for helping test Microsoft’s online retail sales platform. The man was involved in the testing of Microsoft’s online retail sales platform and abused testing access to steal “currency stored value” (CSV) such as digital gift cards. Attorney Brian T.

Retail 111

Retail Sales Access IT 111

Security Affairs

APRIL 6, 2020

Below the timeline of the discovery: Date discovered: January 2020 Date Key Ring and AWS contacted: 18th February 2020 Date of Action: 20th February 2020. Experts also found CSV files storing membership lists and reports for some of North American retail brands. ” continues the report. Pierluigi Paganini.

Retail 108

Retail Encryption Insurance Passwords 108

The Last Watchdog

APRIL 7, 2021

That’s the upshot of a new report, The State of Passwordless Security 2021 , put out by HYPR , a New York City-based supplier of advanced authentication systems. HYPR polled 427 IT professionals and found a high level of awareness about passwordless authenticators — and not just for enhanced security. Benefits beyond security.

Authentication 117

Authentication Digital transformation IT Passwords 117

Security Affairs

OCTOBER 28, 2020

Steelcase is a US-based furniture company that produces office furniture, architectural and technology products for office environments and the education, health care and retail industries. billion in 2020. “On October 22, 2020, Steelcase Inc. It is the largest office furniture manufacturer in the world.

Ransomware 108

Ransomware Computer and Electronics Manufacturing Mining 108

Security Affairs

JANUARY 4, 2022

million customers in 426 markets in 23 states as of the second quarter of 2020. “On December 13, 2021, UScellular detected a data security incident in ‘which unauthorized individuals illegally accessed our billing system and gained access to wireless customer accounts that contain personal information. . Pierluigi Paganini.

Data breaches 118

Data breaches Retail Access Communications 118