IT Governance

JUNE 30, 2022

Welcome to our June 2022 review of data breaches and cyber attacks. Data breaches. million) Brazilian retailer Fast Shop confirms cyber attack (unknown) ADM Associates announces security incident (unknown) Guardian Fueling Technologies has been hacked (unknown) Pape-Dawson Engineers, Inc. Cyber attacks. Ransomware.

Data breaches 136

Data breaches Ransomware Personal data Blockchain 136

IT Governance

JUNE 1, 2022

Welcome to our May 2022 review of data breaches and cyber attacks. Data breaches. We identified 77 security incidents during the month, resulting in 49,782,129 compromised records. You can find the full list below, with incidents affecting UK organisations listed in bold. Cyber attacks. Ransomware. Financial information.

Data breaches 126

Data breaches Ransomware Phishing Education 126

IT Governance

DECEMBER 5, 2023

IT Governance’s research has found the following for November 2023: 470 publicly disclosed security incidents. 519,111,354 records known to be breached. You’ll also be able to download this in the near future, along with the month’s data (and our sources). This blog provides analysis of the data we’ve collected.

Data breaches 113

Data breaches Ransomware Access Security 113

IT Governance

JULY 1, 2021

We found a comparatively low 9,780,931 breached records from publicly disclosed security incidents in June 2021. It’s simply the case that in the majority of cases, the breached organisation didn’t reveal how much data was compromised, either because it didn’t know or wasn’t obliged to reveal it publicly. Data breaches.

Data breaches 130

Data breaches Ransomware Computer and Electronics Retail 130

IT Governance

JULY 13, 2021

Welcome to our second quarterly review of security incidents for 2021, in which we take a closer look at the information gathered in our monthly list of cyber attacks and data breaches. IT Governance discovered 377 security incidents between April and June 2021, which accounted for 1,224,539,395 breached records.

Data breaches 98

Data breaches Retail Ransomware Government 98

IT Governance

DECEMBER 1, 2021

Data breaches. If you find yourself facing a cyber security disaster, IT Governance is here to help. Data breaches. In the meantime, you can find the full list of security incidents below, with those affecting UK organisations listed in bold. Cyber attacks. Ransomware. Financial information. In other news….

Data breaches 141

Data breaches Ransomware Computer and Electronics Healthcare 141

IT Governance

SEPTEMBER 1, 2022

In a month that saw the former US president accused of misappropriating classified government documents, there were also a spate of malicious insiders compromising their employer’s systems. Data breaches. announces security breach (unknown) The Country Club at Woodfield, Inc. Cyber attacks. Ransomware. In other news….

Data breaches 116

Data breaches Ransomware Energy and Utilities Phishing 116

IT Governance

JULY 1, 2020

The only saving grace for the organisation – which didn’t do itself any favours by initially denying the story and threatening to sue people who reported on it – is that the leaked database comprised a list of records from past data breaches. Amtrak resets user passwords after Guest Rewards data breach (unknown).

Data breaches 140

Data breaches Ransomware Retail Personal data 140

IT Governance

FEBRUARY 26, 2020

Decathlon, the world’s largest sporting goods retailer, has suffered a massive data breach, affecting 123 million customer and employee records. It contained information from the retailer’s Spanish businesses and potentially its UK stores. What’s at risk?

Retail 131

Retail Phishing Data breaches Education 131

IT Governance

APRIL 12, 2023

Welcome to our first quarterly review of security incidents for 2023, in which we take a closer look at the information gathered in our monthly list of data breaches and cyber attacks. Overview IT Governance discovered 310 security incidents between January and March 2023, which accounted for 349,171,305 breached records.

Data breaches 59

Data breaches Ransomware Government Encryption 59

IT Governance

APRIL 2, 2020

With organisations across the globe turned upside down by the COVID-19 pandemic, there has never been a worse time to suffer a data breach or cyber attack. As always, incidents affecting UK organisations are listed in bold , and you can find more information on the most notable breaches by subscribing to our Weekly Round-up.

Data breaches 143

Data breaches Ransomware Energy and Utilities Phishing 143

IT Governance

JANUARY 4, 2021

We’ll have a separate post looking at the year’s data breaches and cyber attacks in more detail, but in the meantime, you can find the full list of December’s incidents below. Data breaches. That brings the total for 2020 to more than 20 billion. As usual, incidents affecting UK organisations are in bold. Cyber attacks.

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

IT Governance

DECEMBER 1, 2020

The majority of those came from a credential-stuffing attack targeting Spotify and a data leak at the messaging app GO SMS Pro, which you can learn more about below. Here is our complete list of November’s cyber attacks and data breaches. Data breaches. Data breaches. Cyber attacks. Ransomware.

Data breaches 137

Data breaches Ransomware e-Discovery Personal data 137

IT Governance

JANUARY 25, 2019

Home improvement retailer B&Q has suffered a data breach affecting 70,000 of its… well, not customers, exactly. The breached database contained a list of people who had been caught stealing products from B&Q stores. How did it inform the data subjects that their data was being processed?

Data breaches 111

Data breaches GDPR Passwords Retail 111

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC.

Data breaches 98

Data breaches Security MDM Ransomware 98

IT Governance

APRIL 1, 2021

Don’t be fooled by the fact that we only recorded 20,995,371 breached records in March; it was one of the leakiest months we’ve ever seen, with 151 recorded incidents. By comparison, there was a seemingly Lilliputian 82 recorded breaches in January and 118 in February. Data breaches. Cyber attacks. Ransomware. Ransomware.

Data breaches 130

Data breaches Ransomware Manufacturing e-Delivery 130

IT Governance

MAY 7, 2024

Plus, a further 3,029,461 known records newly breached Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 395 GB.

Data breaches 59

Data breaches Education Manufacturing Retail 59

Thales Cloud Protection & Licensing

DECEMBER 11, 2018

As I was starting to write this blog, yet another retail program data breach occurred, for Marriott’s Starwood loyalty program. But it looks like my own personal data has been breached – again. To make a long story short – the top reason that they didn’t invest in data security was “lack of perceived need” at 52%.

Retail 66

Retail Data breaches Encryption Mining 66

IT Governance

OCTOBER 9, 2018

We’ve talked a lot recently about the financial effects of data breaches and how you should respond to incidents , but that still leaves the question of how data breaches occur. This blog looks at some real-world examples of some of the most common causes of data breaches and explains how they occurred.

Data breaches 96

Data breaches Ransomware Phishing Retail 96

IT Governance

DECEMBER 6, 2018

A recent survey by Ping Identity shows that customers move away from brands that have suffered data breaches. Data breaches are now a common occurrence – big-name brands affected in 2018 include FIFA , British Airways , Vision Direct , Eurostar and Marriott. Of that segment, 34% experienced financial loss.

Data breaches 104

Data breaches GDPR Risk Information Security 104

IT Governance

NOVEMBER 21, 2018

An unknown number of Amazon customers reported yesterday and today that they had received an email from the online retail giant (see below). The post Amazon’s data breach email looks like a phishing scam appeared first on IT Governance Blog. Can you see the problem? No idea – but I certainly hope so.

Data breaches 75

Data breaches Phishing Retail Government 75

IT Governance

JUNE 14, 2018

Little more than three years since its previous security incident, electronics retailer Dixons Carphone has admitted to a data breach compromising 5.9 million personal records – making it the biggest online data breach in UK history. million customer cards and 1.2

Data breaches 80

Data breaches GDPR Retail Compliance 80

IT Governance

SEPTEMBER 27, 2018

It’s time for the month’s list of breaches and cyber attacks, and it’s a big one. The list tells me one thing: organisations need to get themselves ready for a data breach. The list tells me one thing: organisations need to get themselves ready for a data breach. Data Breach.

Data breaches 111

Data breaches Passwords Ransomware Phishing 111

IT Governance

NOVEMBER 12, 2018

In September, British Airways announced it had suffered a data breach that compromised the personal and financial data of more than 380,000 customers. This revelation is an additional blow to the airline: not only did it suffer a breach but it also didn’t fully realise the extent of the attack. Then and now.

Data breaches 102

Data breaches GDPR Personal data Communications 102

Security Affairs

JUNE 16, 2023

Oil and Gas giant Shell has confirmed that it is one of the victims of the recent large-scale ransomware campaign conducted by the Clop gang exploiting a MOVEit zero-day vulnerability Threat actors are actively exploiting the zero-day vulnerability, tracked as CVE-2023-34362 , to steal data from organizations worldwide.

Ransomware 88

Ransomware Data breaches Retail Government 88

IT Governance

APRIL 23, 2019

The Supreme Court has given Morrisons permission to appeal a ruling that found the supermarket liable for a data breach caused by a malicious insider. Morrisons argued that it wasn’t responsible for Skelton’s actions and that it had taken all the necessary precautions to secure employees’ data. Does Morrisons stand a chance?

Data breaches 82

Data breaches Insurance GDPR Compliance 82

IBM Big Data Hub

APRIL 24, 2024

An online retailer always gets users’ explicit consent before sharing customer data with its partners. A navigation app anonymizes activity data before analyzing it for travel trends. One cannot overstate the importance of data privacy for businesses today.

Data Privacy 88

Data Privacy Privacy GDPR Personal data 88

Thales Cloud Protection & Licensing

MARCH 14, 2023

It’s estimated that more than 20% of retail sales will come from eCommerce in 2023 (rising to nearly 25% in 2026), illustrating the magnitude of digital transactions. It’s not only consumers and retailers taking notice of this trend, of course. Privacy and data protection are not the only things consumers expect from a retailer.

Privacy 71

Privacy Retail Customer Experience B2C 71

IT Governance

OCTOBER 9, 2018

This data was “erroneously captured” during a three-second portion of the video, when a page from an open ring binder containing the information briefly appeared on screen. At the time of the breach, reports claimed that data on the stick also included the Queen’s travel itinerary. How did the data breach occur?

Data breaches 65

Data breaches Personal data Libraries Information Security 65

IT Governance

FEBRUARY 14, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: >33,000,000 people’s data. Data breached: 19,718,687 records. Data breached: 13,300,750 people’s data.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 Data breached: 41,500,000 records. They accessed 41.5

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Thales Cloud Protection & Licensing

OCTOBER 10, 2022

We live in a digital world in which we engage with significant social, government, retail, business and entertainment services now delivered without any direct human service management. Breaches of data are no longer the big news items they once were; they happen so often that it they are no longer deemed newsworthy.

Personal data 71

Personal data Data breaches Government Authentication 71

IT Governance

NOVEMBER 23, 2023

The public data set on the ICO (Information Commissioner’s Office) website shows that data security isn’t necessarily better for financial organisations. Although the total number of data breaches – or rather, in those reported – decreased by 24% between 2019 and 2022 in the finance sector, the number of incidents increased by 99%.

Risk 104

Risk Data breaches Authentication Financial Services 104

Krebs on Security

FEBRUARY 1, 2024

government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct cryptocurrency exchange FTX , which had just filed for bankruptcy on that same day. 11, 2022 after they SIM-swapped an AT&T customer by impersonating them at a retail store using a fake ID. 11-12, 2022.

Blockchain 236

Blockchain Ransomware Retail Analytics 236

Security Affairs

MARCH 4, 2023

FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0

Security 82

Security Ransomware Data breaches Retail 82

IT Governance

OCTOBER 19, 2018

If these could have been used to identify individuals, this would have constituted a personal data breach under the EU GDPR (General Data Protection Regulation). It has also contacted the Information Commissioner’s Office, which “confirmed that this was not a data breach and no personal data was compromised”.

Retail 65

Retail Data breaches Personal data GDPR 65

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Security 106

Security Ransomware Data breaches IoT 106