article thumbnail

Online Retailer LightInTheBox exposes unsecured DB containing 1.3TB of web server logs

Security Affairs

LightInTheBox is a Chinese online retailer trading on the New York Stock Exchange, most of its customers are in North America and Europe. The data leak was discovered by VPNmentor in late November, data in the archive was “unsecured and unencrypted”, and accessible from anyone via a web browser. TB of data, totaling over 1.5

Retail 59
article thumbnail

2021 data breach exposed data of 70 Million Luxottica customers

Security Affairs

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. Luxottica Group S.p.A. Its best known brands are Ray-Ban, Persol, and Oakley.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Decathlon Spain data leak exposed Spanish employees’ data & more

Security Affairs

Experts from vpnMentor have uncovered a leaking, active database containing over 123 million records belonging to the sporting goods retailer Decathlon Spain (and possibly Decathlon UK as well). The unsecure archive is greater than 9GB in size and was published on an ElasticSearch server. ” reads the post published by vpnMentor.

article thumbnail

TA505 is expanding its operations

Security Affairs

The threat group is also known for its recent attack campaign against Bank and Retail business sectors, but the latest evidence indicates a potential expansion of its criminal operation to other industries too. exe” sample actually is a Self Extracting Archive (SFX/SFA) containing four files designed to be extracted in the %TEMP% folder.

IT 70
article thumbnail

GUEST ESSAY: Did you know these 5 types of digital services are getting rich off your private data?

The Last Watchdog

However, many fail to realize that any information surrounding your location is stored and archived, and then often times sold to a third party who wants to use that information for a wide variety of reasons. He has over 15 years of experience with information security, cybersecurity and risk management.

Privacy 174
article thumbnail

The Week in Cyber Security and Data Privacy: 5 – 11 February 2024

IT Governance

GB City of Clemson, South Carolina Source New Public USA Yes 21,056 DGX-Dependable Hawaiian Express Source New Professional services USA Yes 20 GB Verdimed Source New Agricultural Spain Yes 19 GB Watchmax Source New Retail UK Yes 15,000 Del-Tron Precision Source New Manufacturing India Yes 8.9 GB Signature Performance, Inc.

article thumbnail

Rent a hacker: Group-IB uncovers corporate espionage group RedCurl

Security Affairs

Since then, it has conducted 26 targeted attacks on commercial organizations alone, including companies in the fields of construction , finance , consulting , retail , banking , insurance , law ,and travel. To deliver the payload, RedCurl used archives, links to which were placed in the email body and led to legitimate cloud storage services.

Cloud 141