IT Governance

JULY 13, 2021

Welcome to our second quarterly review of security incidents for 2021, in which we take a closer look at the information gathered in our monthly list of cyber attacks and data breaches. When comparing breaches over time, the total number of breaches is a more useful figure as it is less prone to anomalies. Download now.

Data breaches 98

Data breaches Retail Ransomware Government 98

IT Governance

FEBRUARY 26, 2020

Decathlon, the world’s largest sporting goods retailer, has suffered a massive data breach, affecting 123 million customer and employee records. It contained information from the retailer’s Spanish businesses and potentially its UK stores. The researchers even suggested that some employees could be in physical danger.

Retail 131

Retail Phishing Data breaches Education 131

IT Governance

OCTOBER 9, 2018

We’ve talked a lot recently about the financial effects of data breaches and how you should respond to incidents , but that still leaves the question of how data breaches occur. This blog looks at some real-world examples of some of the most common causes of data breaches and explains how they occurred.

Data breaches 96

Data breaches Ransomware Phishing Retail 96

erwin

FEBRUARY 14, 2019

The rate at which organizations have adopted data-driven strategies means there are a wealth of digital transformation examples for organizations to draw from. All this despite challenges from upstarts like AirB2B, HomeAway and Couchsurfing plus a data breach at Marriott/Starwood that exposed the data of 500 million customers.

Digital transformation 75

Digital transformation Customer Experience Data breaches Retail 75

Security Affairs

NOVEMBER 8, 2020

A data breach suffered by Luxottica has exposed the personal and health information of patients of LensCrafters, Target Optical, and EyeMed. The exposed financial data includes budgets, marketing forecast analysis, and other sensitive data. SecurityAffairs – hacking, data breach). Luxottica Group S.p.A.

Data breaches 79

Data breaches Insurance Retail Ransomware 79

IT Governance

JUNE 19, 2019

The GDPR (General Data Protection Regulation) requires organisations to conduct a DPIA (data protection impact assessment) whenever processing is ‘likely to result in a high risk’ to the rights and freedoms of individuals. Before we crack on with our examples, we should explain how you can identify high-risk data processing activities.

GDPR 73

GDPR Personal data Risk Data breaches 73

Thales Cloud Protection & Licensing

AUGUST 7, 2018

August is two-thirds of the way through year, and we have already seen a number of serious, far-reaching data breaches making headlines, some occurred in 2018, and some from 2017 that are now being disclosed. retail sector needs to come to terms with some bad news. retail sector needs to come to terms with some bad news.

Data breaches 63

Data breaches Retail IT Communications 63

Krebs on Security

AUGUST 10, 2022

For instance, if I were signing up at example.com, I might give my email address as krebsonsecurity+example@gmail.com. Then, I simply go back to my inbox and create a corresponding folder called “Example,” along with a new filter that sends any email addressed to that alias to the Example folder.

Security 204

Security Data breaches Passwords Retail 204

Krebs on Security

MAY 11, 2020

Diebold Nixdorf , a major provider of automatic teller machines (ATMs) and payment technology to banks and retailers, recently suffered a ransomware attack that disrupted some operations. The 35,000-employee company also produces point-of-sale systems and software used by many retailers.

Ransomware 334

Ransomware Retail Sales Data breaches 334

IT Governance

OCTOBER 9, 2018

The notice went on to say: [Given] the way [the personal data] was captured and displayed, [it] would not be readily available or searchable, but [the Information Commissioner] considers that a motivated individual could locate and extract the data in a more permanent way, for example by way of screenshot.

Data breaches 65

Data breaches Personal data Libraries Information Security 65

IT Governance

JULY 27, 2018

The electrical retailer admitted to a breach involving 5.9 That makes it the biggest breach involving a British organisation. Meanwhile, US-based department store Macy’s recently disclosed a data breach involving an unknown number of card details. But that’s small fry compared to what happened at Dixons Carphone.

Data breaches 66

Data breaches Paper Retail Manufacturing 66

Thales Cloud Protection & Licensing

MARCH 14, 2023

It’s estimated that more than 20% of retail sales will come from eCommerce in 2023 (rising to nearly 25% in 2026), illustrating the magnitude of digital transactions. It’s not only consumers and retailers taking notice of this trend, of course. Privacy and data protection are not the only things consumers expect from a retailer.

Privacy 71

Privacy Retail Customer Experience B2C 71

Krebs on Security

MARCH 29, 2019

based hospitality firm Earl Enterprises said a data breach involving malware installed on its point-of-sale systems allowed cyber thieves to steal card details from customers between May 23, 2018 and March 18, 2019. In a statement posted to its Web site today, Orlando, Fla. and Mixology in Los Angeles.

Sales 240

Sales Data breaches Retail IT 240

IT Governance

APRIL 10, 2019

For example, you might be asked to provide a password and answer a secret question. Although you can use any factor with strong authentication, it generally refers to two knowledge factors, such as our example of a password and secret question. A more common example is PayPal, which provides an analogous service.

Data breaches 67

Data breaches Authentication Passwords Access 67

Thales Cloud Protection & Licensing

NOVEMBER 25, 2021

Many retailers and shipping services are planning to hire temporary workers for the upcoming holiday season. That’s 50,000 more seasonal employees than the retailer brought in at the end of 2020, noted CNBC. In the retail sector specifically, a data breach cost organizations an average of $3.27

Access 71

Access Retail Authentication Risk 71

Thales Cloud Protection & Licensing

NOVEMBER 20, 2022

As the holiday season approaches, many retail, hospitality, logistics, and food manufacturing organizations hire seasonal workers to meet increasing demand. The Bureau of Labor Statistics reports a 7% job rise in the retail industry. The solution must be capable of protecting both on-premises and in-the-cloud apps and data.

Access 71

Access Retail Security Authentication 71

Krebs on Security

AUGUST 3, 2018

.” ICBA Bancard is the payments subsidiary of the Independent Community Bankers of America , a organization representing more than 5,700 financial institutions that has been fairly vocal about holding retailers accountable for credit card breaches over the years.

Data breaches 150

Data breaches Retail Risk Marketing 150

Thales Cloud Protection & Licensing

JANUARY 26, 2021

The Verizon DBIR 2020 report indicates that financially motivated attacks against retailers have moved away from Point of Sale (POS) devices and controllers, towards web applications. As the infrastructure changes, the adversaries change along with it to take the easiest path to data. Fraud and scams move to the web.

Security 143

Security Retail Authentication Big data 143

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

Virtually every major financial institution, retailer, and scores of payment processors have been the victims of data breaches, incurring both financial and reputational damage. According to the 2022 Thales Data Threat Report – Financial Services Edition , 52% of U.S. million, second only to healthcare.

Compliance 77

Compliance Financial Services Data breaches Encryption 77

IT Governance

NOVEMBER 23, 2023

The public data set on the ICO (Information Commissioner’s Office) website shows that data security isn’t necessarily better for financial organisations. Although the total number of data breaches – or rather, in those reported – decreased by 24% between 2019 and 2022 in the finance sector, the number of incidents increased by 99%.

Risk 104

Risk Data breaches Authentication Financial Services 104

Security Affairs

DECEMBER 21, 2022

CyberNews researchers reported that Ecco, a global shoe manufacturer and retailer, exposed millions of documents. Ecco, a global shoe manufacturer and retailer, exposed millions of documents. Our research team discovered an exposed instance hosting a trove of data for Ecco. Original post @ [link].

Retail 100

Retail Manufacturing Sales Phishing 100

ForAllSecure

FEBRUARY 2, 2021

A 2019 Ponemon study revealed that the cost of a data breach is $4.88 In recent years, there has been a global imperative for organizations to take better care of protecting customers -- whether it’s their data or their safety. GDPR is a prominent example. In September 2017, Equifax faced a data breach.

Retail 52

Retail Data breaches Cybersecurity Paper 52

ForAllSecure

FEBRUARY 2, 2021

A 2019 Ponemon study revealed that the cost of a data breach is $4.88 In recent years, there has been a global imperative for organizations to take better care of protecting customers -- whether it’s their data or their safety. GDPR is a prominent example. In September 2017, Equifax faced a data breach.

Retail 52

Retail Data breaches Cybersecurity Paper 52

IT Governance

NOVEMBER 14, 2018

A data processor is the organisation that does the legwork; it processes the information on the controller’s behalf. For example, a marketing executive at a retailer hires a company to conduct a survey on shoppers’ browsing habits. Responsibilities of the data processor. Sounds simple enough.

GDPR 107

GDPR Retail Data collection Personal data 107

Krebs on Security

APRIL 18, 2019

The subdomains listed above suggest the attackers may also have targeted American retailer Sears ; Green Dot , the world’s largest prepaid card vendor; payment processing firm Elavon ; hosting firm Rackspace ; business consulting firm Avanade ; IT provider PCM ; and French consulting firm Capgemini , among others. internal-message[.]app.

IT 182

IT Retail Phishing Access 182

IT Governance

JUNE 1, 2023

Welcome to our new-look list of data breaches and cyber attacks. So, each month, we’ll update this page with the latest figures and links, so be sure to bookmark it to keep an eye out for the latest data breach news. His research also revealed that the stolen data contains 305 lines of data, including 74.4

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

IT Governance

JUNE 8, 2023

We’ve looked at sources such as IBM’s Cost of a Data Breach Report , Verizon’s 2023 DBIR (Data Breaches and Investigations Report) and Proofpoint’s The State of Phishing report , and found 50 essential stats to reveal the threat that phishing plays – plus we have an extra statistic to explain how you can prevent attacks.

Phishing 111

Phishing Data breaches Communications Ransomware 111

erwin

APRIL 11, 2019

In fact, organizations should expect increasing pressure on lawmakers to introduce new data protection regulations. A number of high-profile data breaches and scandals have increased public awareness of the issue. For example, many retailers have robust, data-driven e-commerce operations that are international.

GDPR 100

GDPR e-Discovery Compliance Metadata 100

eSecurity Planet

MARCH 31, 2022

This guide breaks down the different types of phishing attacks and provides examples to help organizations better prepare their staff to deal with them. They may be targeted, like spear phishing, but they may also be more general, appearing to come from their bank or Amazon, for example. Common Examples of Phishing Attacks.

Phishing 121

Phishing Cybersecurity Ransomware Security 121

Security Affairs

AUGUST 12, 2023

This London-based business provides facility management & security services to organizations such as the UK’s National Health Service (NHS), HM Revenue & Customs, various UK boroughs and councils, British retailer WHSmith , and other organizations.

Retail 93

Retail Encryption Access Security 93

IT Governance

DECEMBER 20, 2022

Cyber criminals continued to wreak havoc, with the likes of Twitter , Uber and Neopets all reporting mammoth data breaches. In total, we have so far reported more than 1,000 data breaches in 2022, with almost half a billion breached records. Did anyone purchase the apparently stolen data?

Security 132

Security Data breaches Ransomware Military 132

Krebs on Security

JUNE 27, 2019

One security expert at a PCM customer who was recently notified about the incident said the intruders appeared primarily interested in stealing information that could be used to conduct gift card fraud at various retailers and financial institutions. earlier this year.

Cloud 239

Cloud Retail Access Government 239

Security Affairs

AUGUST 21, 2019

As people have growing opportunities to shop online, the chances for hackers to carry out lucrative cyberattacks in the retail sector also go up. Statistics from 2016 showed that the average cost per compromised retail record was $172. People are becoming less tolerant of retailers that have widescale data breaches.

Cybersecurity 83

Cybersecurity Retail Manufacturing Data breaches 83

Security Affairs

DECEMBER 22, 2019

From iPhone to NT AUTHORITYSYSTEM – exploit ‘Printconfig dll with a real-world example. A thief stole hard drives containing Facebook payroll data from a car. Online Retailer LightInTheBox exposes unsecured DB containing 1.3TB of web server logs. A new round of the weekly newsletter arrived!

Security 57

Security Ransomware Passwords Data breaches 57

Krebs on Security

DECEMBER 18, 2018

For example, 73 percent of the top 100 companies listed a chief of human resources (or “chief people officer”), and about one-third included a chief marketing officer. Prior to announcing its breach last year, a CISO or CSO was noticeably absent from the ranks of Equifax’s Corporate Leadership page.

Security 210

Security Marketing Cybersecurity Data breaches 210

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR applies to any organization that processes the personal data of European residents, regardless of where that organization is based. A data controller is any organization, group, or person that collects personal data and determines how it is used.

GDPR 80

GDPR Compliance Personal data Privacy 80

Adam Levin

NOVEMBER 17, 2020

It’s worth noting that there’s no reason a legitimate retailer would need that last one — the skeleton key to your identity — to process a purchase.). Shop at reputable and recognizable retailers. If you’re shopping at a retailer that is new to you, research the company’s standing on the Better Business Bureau website.

Retail 97

Retail e-Delivery Passwords Phishing 97