IT Governance

JULY 11, 2022

Welcome to our second quarterly review of security incidents for 2022, in which we take a closer look at the information gathered in our monthly list of data breaches and cyber attacks. IT Governance discovered 237 security incidents between April and June 2022, which accounted for 99,019,967 breached records.

Data breaches 105

Data breaches Ransomware Phishing Government 105

IT Governance

JUNE 1, 2022

Welcome to our May 2022 review of data breaches and cyber attacks. Data breaches. If you’re facing a cyber security disaster, IT Governance is here to help. We identified 77 security incidents during the month, resulting in 49,782,129 compromised records. Cyber attacks. Ransomware. Financial information.

Data breaches 126

Data breaches Ransomware Phishing Education 126

IT Governance

JULY 1, 2021

And don’t forget to subscribe to our Weekly Round-up to receive the latest industry news and advice – including our Q2 review of data breaches and cyber attacks, based on these lists, which will be published in early July. Data breaches. If you find yourself facing a cyber security disaster, IT Governance is here to help.

Data breaches 130

Data breaches Ransomware Computer and Electronics Retail 130

IT Governance

DECEMBER 5, 2023

Data Breach Dashboard For a quick, one-page overview of this month’s findings, please use our Data Breach Dashboard: Note: From this month, zero-day vulnerabilities are excluded from the ‘unpatched or misconfigured’ category. This blog provides analysis of the data we’ve collected.

Data breaches 113

Data breaches Ransomware Access Security 113

IT Governance

DECEMBER 1, 2021

Data breaches. If you find yourself facing a cyber security disaster, IT Governance is here to help. Data breaches. In the meantime, you can find the full list of security incidents below, with those affecting UK organisations listed in bold. Cyber attacks. Ransomware. Financial information. In other news….

Data breaches 141

Data breaches Ransomware Computer and Electronics Healthcare 141

IT Governance

JULY 13, 2021

Welcome to our second quarterly review of security incidents for 2021, in which we take a closer look at the information gathered in our monthly list of cyber attacks and data breaches. IT Governance discovered 377 security incidents between April and June 2021, which accounted for 1,224,539,395 breached records.

Data breaches 98

Data breaches Retail Ransomware Government 98

IT Governance

SEPTEMBER 1, 2022

In a month that saw the former US president accused of misappropriating classified government documents, there were also a spate of malicious insiders compromising their employer’s systems. Data breaches. announces security breach (unknown) The Country Club at Woodfield, Inc. Data breaches. Cyber attacks.

Data breaches 116

Data breaches Ransomware Energy and Utilities Phishing 116

IT Governance

JULY 1, 2020

The only saving grace for the organisation – which didn’t do itself any favours by initially denying the story and threatening to sue people who reported on it – is that the leaked database comprised a list of records from past data breaches. Amtrak resets user passwords after Guest Rewards data breach (unknown).

Data breaches 140

Data breaches Ransomware Retail Personal data 140

IT Governance

FEBRUARY 26, 2020

Decathlon, the world’s largest sporting goods retailer, has suffered a massive data breach, affecting 123 million customer and employee records. It contained information from the retailer’s Spanish businesses and potentially its UK stores.

Retail 131

Retail Phishing Data breaches Education 131

IT Governance

APRIL 12, 2023

Welcome to our first quarterly review of security incidents for 2023, in which we take a closer look at the information gathered in our monthly list of data breaches and cyber attacks. Overview IT Governance discovered 310 security incidents between January and March 2023, which accounted for 349,171,305 breached records.

Data breaches 59

Data breaches Ransomware Government Encryption 59

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC.

Data breaches 95

Data breaches Security MDM Ransomware 95

IT Governance

JANUARY 4, 2021

We’ll have a separate post looking at the year’s data breaches and cyber attacks in more detail, but in the meantime, you can find the full list of December’s incidents below. Data breaches. That brings the total for 2020 to more than 20 billion. As usual, incidents affecting UK organisations are in bold. Cyber attacks.

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

IT Governance

APRIL 2, 2020

With organisations across the globe turned upside down by the COVID-19 pandemic, there has never been a worse time to suffer a data breach or cyber attack. Data breaches. Nursing home probed after leaving disabled patients’ data on street (36). Detectives investigate data breach at Jefferson Co.

Data breaches 143

Data breaches Ransomware Energy and Utilities Phishing 143

IT Governance

DECEMBER 1, 2020

The majority of those came from a credential-stuffing attack targeting Spotify and a data leak at the messaging app GO SMS Pro, which you can learn more about below. Here is our complete list of November’s cyber attacks and data breaches. Data breaches. Data breaches. Cyber attacks. Ransomware.

Data breaches 137

Data breaches Ransomware e-Discovery Personal data 137

IT Governance

JANUARY 25, 2019

Home improvement retailer B&Q has suffered a data breach affecting 70,000 of its… well, not customers, exactly. The breached database contained a list of people who had been caught stealing products from B&Q stores. The post 70,000 affected in B&Q data breach appeared first on IT Governance Blog.

Data breaches 111

Data breaches GDPR Passwords Retail 111

IT Governance

APRIL 1, 2021

But there were dozens of other cyber attacks and data breaches where the organisation either didn’t know or reveal the extent of the damage. Data breaches. We typically expect ambiguity when it comes to ransomware, because organisations are locked out of their files and can’t calculate what’s been affected. Cyber attacks.

Data breaches 130

Data breaches Ransomware Manufacturing e-Delivery 130

Thales Cloud Protection & Licensing

DECEMBER 11, 2018

As I was starting to write this blog, yet another retail program data breach occurred, for Marriott’s Starwood loyalty program. What I’d originally planned to write about was a topic that directly applies – why retailers of all stripes are not investing in data security. This had me asking a simple question – Why?

Retail 66

Retail Data breaches Encryption Mining 66

IT Governance

OCTOBER 9, 2018

We’ve talked a lot recently about the financial effects of data breaches and how you should respond to incidents , but that still leaves the question of how data breaches occur. This blog looks at some real-world examples of some of the most common causes of data breaches and explains how they occurred.

Data breaches 96

Data breaches Ransomware Phishing Retail 96

IT Governance

SEPTEMBER 27, 2018

The list tells me one thing: organisations need to get themselves ready for a data breach. Data Breach. Chegg resets 40 million user passwords after data breach. NewsNow suffers security breach – passwords should be considered compromised. Perth Mint data breach bigger than thought.

Data breaches 111

Data breaches Passwords Ransomware Phishing 111

IT Governance

DECEMBER 6, 2018

A recent survey by Ping Identity shows that customers move away from brands that have suffered data breaches. Data breaches are now a common occurrence – big-name brands affected in 2018 include FIFA , British Airways , Vision Direct , Eurostar and Marriott. Of that segment, 34% experienced financial loss.

Data breaches 104

Data breaches GDPR Risk Information Security 104

IT Governance

NOVEMBER 21, 2018

An unknown number of Amazon customers reported yesterday and today that they had received an email from the online retail giant (see below). The post Amazon’s data breach email looks like a phishing scam appeared first on IT Governance Blog. Can you see the problem?

Data breaches 75

Data breaches Phishing Retail Government 75

IT Governance

JUNE 14, 2018

Little more than three years since its previous security incident, electronics retailer Dixons Carphone has admitted to a data breach compromising 5.9 million personal records – making it the biggest online data breach in UK history. million customer cards and 1.2

Data breaches 80

Data breaches GDPR Retail Compliance 80

IT Governance

NOVEMBER 12, 2018

In September, British Airways announced it had suffered a data breach that compromised the personal and financial data of more than 380,000 customers. Is your organisation prepared for a data breach? The post BA data breach: 565,000 customers may have been affected appeared first on IT Governance Blog.

Data breaches 102

Data breaches GDPR Personal data Communications 102

Security Affairs

JUNE 16, 2023

Recently another data breach made the headlines, the hack of the payroll services provider Zellis. One of Zellis’s customers, the British health and beauty retailer and pharmacy chain Boots also confirmed to have been impacted by the attack. At this time the number of installs located in the UK is 127.

Ransomware 93

Ransomware Data breaches Retail Government 93

IT Governance

APRIL 23, 2019

The Supreme Court has given Morrisons permission to appeal a ruling that found the supermarket liable for a data breach caused by a malicious insider. This incident shows how complex liability can be regarding data breaches. Why have the courts found Morrisons liable?

Data breaches 82

Data breaches Insurance GDPR Compliance 82

Thales Cloud Protection & Licensing

MARCH 14, 2023

It’s estimated that more than 20% of retail sales will come from eCommerce in 2023 (rising to nearly 25% in 2026), illustrating the magnitude of digital transactions. It’s not only consumers and retailers taking notice of this trend, of course. Privacy and data protection are not the only things consumers expect from a retailer.

Privacy 71

Privacy Retail Customer Experience B2C 71

IBM Big Data Hub

APRIL 24, 2024

An online retailer always gets users’ explicit consent before sharing customer data with its partners. A navigation app anonymizes activity data before analyzing it for travel trends. Learn how IBM OpenPages Data Privacy Management can improve compliance accuracy and reduce audit time.

Data Privacy 58

Data Privacy Privacy GDPR Personal data 58

IT Governance

OCTOBER 9, 2018

In total, the memory stick contained more than 1,000 files, but just 1% of the contents comprised personal data. At the time of the breach, reports claimed that data on the stick also included the Queen’s travel itinerary. How did the data breach occur? However, the ICO hasn’t confirmed this.

Data breaches 65

Data breaches Personal data Libraries Information Security 65

Thales Cloud Protection & Licensing

OCTOBER 10, 2022

Consumers have their Say about Protection of Personal Data – Call for More Stringent Controls. We live in a digital world in which we engage with significant social, government, retail, business and entertainment services now delivered without any direct human service management. Governments need to take action.

Personal data 71

Personal data Data breaches Government Authentication 71

IT Governance

FEBRUARY 14, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: >33,000,000 people’s data. Data breached: 19,718,687 records. Data breached: 13,300,750 people’s data.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 Data breached: 41,500,000 records. They accessed 41.5

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Security Affairs

MARCH 4, 2023

FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0

Security 88

Security Ransomware Data breaches Retail 88

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Security 107

Security Ransomware Data breaches IoT 107

IT Governance

OCTOBER 19, 2018

If these could have been used to identify individuals, this would have constituted a personal data breach under the EU GDPR (General Data Protection Regulation). It has also contacted the Information Commissioner’s Office, which “confirmed that this was not a data breach and no personal data was compromised”.

Retail 65

Retail Data breaches Personal data GDPR 65

IT Governance

NOVEMBER 23, 2023

The public data set on the ICO (Information Commissioner’s Office) website shows that data security isn’t necessarily better for financial organisations. Although the total number of data breaches – or rather, in those reported – decreased by 24% between 2019 and 2022 in the finance sector, the number of incidents increased by 99%.

Risk 104

Risk Data breaches Authentication Financial Services 104

Krebs on Security

FEBRUARY 1, 2024

government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct cryptocurrency exchange FTX , which had just filed for bankruptcy on that same day. 11, 2022 after they SIM-swapped an AT&T customer by impersonating them at a retail store using a fake ID. 11-12, 2022.

Blockchain 223

Blockchain Ransomware Retail Analytics 223

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. Third-party governance. Like other competitive GRC solutions, it speeds the process of aggregating and mining data, building reports, and managing files.

Compliance 57

Compliance Risk Government Retail 57