Security Affairs

NOVEMBER 23, 2023

American retailer and distributor of automotive parts and accessories AutoZone discloses a data breach after a MOVEit attack. AutoZone is an American retailer and distributor of automotive parts and accessories. The company is one of the largest aftermarket automotive parts and accessories retailers in the United States.

Data breaches 110

Data breaches Retail Education Ransomware 110

Security Affairs

SEPTEMBER 14, 2020

Giant office retail company Staples disclosed a data breach, threat actors accessed some of its customers’ order data. Staples, the office retail giant, disclosed a data breach, it notified its customers that their order data have been accessed by threat actors without authorization.

Data breaches 134

Data breaches Retail Access IT 134

Security Affairs

JANUARY 30, 2021

US wireless carrier UScellular discloses data breach, personal information of customers may have been exposed and their phone numbers ported. US wireless carrier UScellular discloses a data breach that exposed personal information of its customers. ” reads the USCellular data breach notification.

Data breaches 141

Data breaches Retail Passwords Access 141

Security Affairs

JANUARY 19, 2024

American global apparel and footwear company VF Corp revealed that the December data breach impacted 35.5 The incident interrupted retail store inventory replenishment and delayed order fulfillment. million customers. VF Corporation is an American global apparel and footwear company that owns 13 brands.

Data breaches 114

Data breaches Passwords Retail Insurance 114

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. Volvo’s retailer in Brazil, Dimas Volvo, leaked sensitive files through its website. website, belonging to an independent Volvo retailer in the Santa Catarina region of Brazil.

Retail 91

Retail Manufacturing Communications Passwords 91

Security Affairs

MAY 20, 2023

Luxottica has finally confirmed the 2021 data breach that exposed the personal information of 70 million customers. BleepingComputer first reported the news, and Luxottica confirmed that the data breach is the result of a new security incident suffered by a third-party contractor that was managing its customer data.

Data breaches 88

Data breaches Retail Sales Ransomware 88

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020.

Data breaches 90

Data breaches e-Delivery Passwords Retail 90

Hunton Privacy

AUGUST 13, 2020

Earlier this year, The Retail Equation, a loss prevention service provider, and Sephora were hit with a class action lawsuit in which the plaintiff claimed Sephora improperly shared consumer data with The Retail Equation without consumers’ knowledge or consent. Code § 1798.150).

Retail 144

Retail Privacy Data breaches Communications 144

Security Affairs

JANUARY 4, 2022

UScellular, one of the largest wireless carriers in the US, has disclosed a data breach after the hack suffered in December 2021. UScellular has disclosed a data breach after the attack that compromised the company’s billing system in December 2021. ” reads the data breach notification letter.

Data breaches 112

Data breaches Retail Access Communications 112

IT Governance

JANUARY 9, 2023

Welcome to our review of security incidents for 2022, in which we take a closer look at the information gathered in our monthly lists of data breaches and cyber attacks. IT Governance discovered 1,063 security incidents in 2022, which accounted for 480,014,323 breached records. That represents an 14.8%

Data breaches 126

Data breaches Ransomware Government Passwords 126

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data.

Data breaches 91

Data breaches Retail Passwords Access 91

Security Affairs

JUNE 17, 2021

The securWizCase experts found a major breach that affected the popular online retailer Cosmolog Kozmetik. WizCase’s security team, led by Ata Hakç?l, l, has found a major breach in popular online retailer Cosmolog Kozmetik’s database. Hundreds of thousands of users were compromised in the breach.

Data breaches 106

Data breaches Retail Privacy Sales 106

Security Affairs

OCTOBER 20, 2021

While the threat actors claimed to have obtained information on customers, login credentials for retailers and distributors, and corporate and financial documents, the company pointed out only employees’ data was exposed. SecurityAffairs – hacking, data breach). Pierluigi Paganini.

Data breaches 97

Data breaches Sales Retail Ransomware 97

Security Affairs

JANUARY 15, 2023

The Canadian Liquor Control Board of Ontario (LCBO), the largest beverage alcohol retailer in the country, disclosed Magecart attack. Canadian Liquor Control Board of Ontario (LCBO), the largest beverage alcohol retailer in the country, disclosed a Magecart attack on January 10, 2023. Pierluigi Paganini.

Retail 88

Retail Sales Passwords Cybersecurity 88

Security Affairs

JUNE 5, 2023

The BBC and British Airways were both impacted by the data breach suffered by the payroll provider Zellis. As a result of the cyber attack on the payroll provider Zellis, the personal data of employees at the BBC and British Airways has been compromised and exposed.

Data breaches 75

Data breaches Retail Cybersecurity Personal data 75

Security Affairs

JANUARY 21, 2020

The US-based children’s clothing maker Hanna Andersson has disclosed a data breach that affected its customers. The US-based children’s clothing maker and online retailer Hanna Andersson discloses a data breach, attackers planted an e-skimmer on its e-commerce platform. Pierluigi Paganini.

Data breaches 104

Data breaches Retail Cloud Insurance 104

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. BleepingComputer contacted Schneider Electric which confirmed the data breach. The attack impacted the services of Schneider Electric’s Resource Advisor cloud platform causing outages.

Ransomware 127

Ransomware Data breaches Digital transformation Encryption 127

Hunton Privacy

OCTOBER 19, 2022

On October 12, 2022, New York Attorney General Letitia James announced that her office had secured a $1.9 million penalty from e-commerce retailer Zoetop, owner of SHEIN and ROMWE, following an improperly handled data breach. In addition to paying New York $1.9

Data breaches 64

Data breaches Passwords Retail Cybersecurity 64

IT Governance

JUNE 14, 2018

Little more than three years since its previous security incident, electronics retailer Dixons Carphone has admitted to a data breach compromising 5.9 million personal records – making it the biggest online data breach in UK history. million customer cards and 1.2 It’s not too late to comply with the GDPR .

Data breaches 80

Data breaches GDPR Retail Compliance 80

Hunton Privacy

MAY 20, 2021

On May 18, 2021, New York Attorney General (“AG”) Letitia James announced a settlement agreement with Filters Fast LLC (“Filters Fast”) over a data breach that compromised personal information of approximately 324,000 consumers nationwide, including over 16,500 New York state residents.

Data breaches 78

Data breaches Retail Security IT 78

IT Governance

DECEMBER 6, 2018

A recent survey by Ping Identity shows that customers move away from brands that have suffered data breaches. Data breaches are now a common occurrence – big-name brands affected in 2018 include FIFA , British Airways , Vision Direct , Eurostar and Marriott. Of that segment, 34% experienced financial loss.

Data breaches 104

Data breaches GDPR Risk Information Security 104

IT Governance

OCTOBER 9, 2018

We’ve talked a lot recently about the financial effects of data breaches and how you should respond to incidents , but that still leaves the question of how data breaches occur. This blog looks at some real-world examples of some of the most common causes of data breaches and explains how they occurred.

Data breaches 96

Data breaches Ransomware Phishing Retail 96

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC.

Data breaches 98

Data breaches Security MDM Ransomware 98

Security Affairs

NOVEMBER 8, 2020

A data breach suffered by Luxottica has exposed the personal and health information of patients of LensCrafters, Target Optical, and EyeMed. The exposed financial data includes budgets, marketing forecast analysis, and other sensitive data. SecurityAffairs – hacking, data breach). Pierluigi Paganini.

Data breaches 75

Data breaches Insurance Retail Ransomware 75

Hunton Privacy

APRIL 27, 2021

As reported on the Hunton Retail Law Blog , on April 26, 2021, the U.S. Court of Appeals for the Second Circuit affirmed the dismissal on Article III standing grounds of a data breach class action predicated on an alleged increased risk of identity theft. McMorris v. Carlos Lopez & Assocs. , 19-4310, 2021 WL 1603808 (2d Cir.

Data breaches 88

Data breaches Risk Retail Education 88

Hunton Privacy

FEBRUARY 7, 2020

Assuming the plaintiff does so, she might face retroactivity hurdles, given the data breach allegedly “occurred from September 16, 2019 to November 11, 2019,” and the CCPA is not expressly retroactive. On February 3, 2020, a class action lawsuit was filed that expressly references the CCPA— Barnes v. Hanna Andersson, LLC, et al.,

Data breaches 67

Data breaches Privacy Retail Security 67

IT Governance

NOVEMBER 29, 2017

What’s certainly not a good sign, however, is the number of data breaches caused by organisations’ own employees. Basic information security practices – and I really do mean basic – are ignored over and over again, and for what? Data breach. NC DHHS Reports Data Security Incident.

Data breaches 75

Data breaches Retail Privacy Phishing 75

IT Governance

OCTOBER 9, 2018

In total, the memory stick contained more than 1,000 files, but just 1% of the contents comprised personal data. At the time of the breach, reports claimed that data on the stick also included the Queen’s travel itinerary. How did the data breach occur? However, the ICO hasn’t confirmed this.

Data breaches 65

Data breaches Personal data Libraries Information Security 65

Security Affairs

FEBRUARY 19, 2024

At the time, BleepingComputer contacted Schneider Electric which confirmed the data breach. Cactus uses the Rclone tool for data exfiltration and used a PowerShell script called TotalExec, which was used in the past by BlackBasta ransomware operators, to automate the deployment of the encryption process.

Ransomware 104

Ransomware Digital transformation Encryption Retail 104

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 92

Artificial Intelligence Data breaches Security Ransomware 92

Hunton Privacy

MARCH 21, 2017

On March 17, 2017, retailer Neiman Marcus agreed to pay $1.6 million as part of a proposed settlement (the “Settlement”) to a consumer class action lawsuit stemming from a 2013 data breach that allegedly compromised the credit card data of approximately 350,000 customers.

Data breaches 56

Data breaches Retail Information Security Education 56

Security Affairs

JUNE 13, 2023

UK communications regulator Ofcom suffered a data breach after a Clop ransomware attack exploiting the MOVEit file transfer zero-day. UK’s communications regulator Ofcom disclosed a data breach after a Clop ransomware attack. At this time the number of installs located in the UK is 127.

Communications 67

Communications Data breaches Ransomware Personal data 67

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

Virtually every major financial institution, retailer, and scores of payment processors have been the victims of data breaches, incurring both financial and reputational damage. According to the 2022 Thales Data Threat Report – Financial Services Edition , 52% of U.S. million, second only to healthcare.

Compliance 78

Compliance Financial Services Data breaches Encryption 78

Security Affairs

JANUARY 6, 2022

Credential stuffing attacks involve botnets trying stolen login credentials usually obtained through phishing attacks and data breaches. ” The OAG compiled login credentials for accounts belonging to the customers of 17 well-known companies, including online retailers, restaurant chains, and food delivery services.

Retail 130

Retail Passwords Data breaches Phishing 130

Security Affairs

JANUARY 9, 2019

million settlement with The Neiman Marcus Group over a 2013 data breach. million settlement with The Neiman Marcus Group LLC over a data breach suffered by the company in 2013 and disclosed earlier 2014. Tens of state attorneys general announced a $1.5 Tens of attorneys general announced this week a $1.5

Data breaches 60

Data breaches Retail Sales Personal data 60

Security Affairs

JUNE 16, 2023

Recently another data breach made the headlines, the hack of the payroll services provider Zellis. One of Zellis’s customers, the British health and beauty retailer and pharmacy chain Boots also confirmed to have been impacted by the attack. At this time the number of installs located in the UK is 127.

Ransomware 88

Ransomware Data breaches Retail Government 88

Security Affairs

NOVEMBER 2, 2020

JM Bullion, the leading online bullion dealer in the United States, has disclosed a data breach, hackers stole customers’ credit card information. JM Bullion, the online retailer of products made of precious metals (i.e. gold, silver, copper, platinum, and palladium) has disclosed a data breach.

Data breaches 119

Data breaches Retail Security IT 119