article thumbnail

Decathlon Spain data leak exposed Spanish employees’ data & more

Security Affairs

Experts from vpnMentor have uncovered a leaking, active database containing over 123 million records belonging to the sporting goods retailer Decathlon Spain (and possibly Decathlon UK as well). The unsecure archive is greater than 9GB in size and was published on an ElasticSearch server. ” reads the post published by vpnMentor.

article thumbnail

440M records found online in unprotected database belonging to Estée Lauder

Security Affairs

Estée L auder is an American multinational manufacturer and marketer of p restige skincare, makeup, fragrance and hair care p roducts, it owns multiple brands, distributed internationally through both digital commerce and retail channels. The archive included audit logs containing a large number of email addresses in each document. .

Archiving 109
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

2021 data breach exposed data of 70 Million Luxottica customers

Security Affairs

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. Luxottica Group S.p.A. Its best known brands are Ray-Ban, Persol, and Oakley.

article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. Another domain with the Google Analytics code US-2665744 was sscompany[.]net. form [sic] hackers on public networks.”

Analytics 211
article thumbnail

The Week in Cyber Security and Data Privacy: 4 – 10 March 2024

IT Governance

According to a listing on a popular hacking forum, the database includes customers’ names, email addresses, hashed passwords, and more. Source (New) Retail Italy Yes 436,932 Toner-dumping.de The claim is yet to be verified. Data breached: 36 million records. TB Paysign, Inc.

article thumbnail

The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024

IT Governance

Affected information includes users’ names, email addresses, IP addresses and encrypted passwords. TB LDLC Source (New) Retail France Yes 1,500,000 APROA Source (New) Professional services Argentina Yes 1,197,562 Petrus Resources Ltd. The threat actor, KryptonZambie, listed a 5.93

article thumbnail

TA505 is expanding its operations

Security Affairs

The threat group is also known for its recent attack campaign against Bank and Retail business sectors, but the latest evidence indicates a potential expansion of its criminal operation to other industries too. exe” sample actually is a Self Extracting Archive (SFX/SFA) containing four files designed to be extracted in the %TEMP% folder.

IT 67