IT Governance

FEBRUARY 26, 2020

Decathlon, the world’s largest sporting goods retailer, has suffered a massive data breach, affecting 123 million customer and employee records. It contained information from the retailer’s Spanish businesses and potentially its UK stores. Customers’ email addresses and login information were also compromised. What’s at risk?

Retail 131

Retail Phishing Data breaches Education 131

Security Affairs

JANUARY 19, 2024

American global apparel and footwear company VF Corp revealed that the December data breach impacted 35.5 “Based on VF’s preliminary analysis from its ongoing investigation, VF currently estimates that the threat actor stole personal data of approximately 35.5 million customers. In 2015, the company controlled 55% of the U.S.

Data breaches 111

Data breaches Passwords Retail Insurance 111

Security Affairs

JANUARY 30, 2021

US wireless carrier UScellular discloses data breach, personal information of customers may have been exposed and their phone numbers ported. US wireless carrier UScellular discloses a data breach that exposed personal information of its customers. ” reads the USCellular data breach notification. ” reads the notice.

Data breaches 140

Data breaches Retail Passwords Access 140

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data. Approximately 4.6

Data breaches 89

Data breaches Retail Passwords Access 89

IT Governance

AUGUST 21, 2018

Data breaches. What steps will the ICO (Information Commissioner’s Office) take to ensure organisations comply with the recently enforced GDPR (General Data Protection Regulation)? Customers of the Adidas.com website may have been affected by a breach after an unauthorised party gained access to customer data.

Retail 66

Retail Data breaches GDPR Compliance 66

Hunton Privacy

AUGUST 11, 2020

On August 5, 2020, the French Data Protection Authority (the “CNIL”) announced that it has levied a fine of €250,000 on French online shoe retailer, Spartoo, for various infringements of the EU General Data Protection Regulation (“GDPR”).

Retail 114

Retail GDPR IT Personal data 114

Security Affairs

MAY 20, 2023

Luxottica has finally confirmed the 2021 data breach that exposed the personal information of 70 million customers. On May 12, the cybersecurity expert Andrea Draghetti noticed that a threat actor released data belonging to Luxottica speculating a new databreach. Luxottica Group S.p.A.

Data breaches 88

Data breaches Retail Sales Ransomware 88

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. According to a listing on a popular hacking forum, the database includes customers’ names, email addresses, hashed passwords, and more. Data breached: 36 million records.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020.

Data breaches 89

Data breaches e-Delivery Passwords Retail 89

Thales Cloud Protection & Licensing

MARCH 14, 2023

Respecting Privacy and Data Protection: World Consumer Rights Day divya Wed, 03/15/2023 - 05:44 For the last four decades, March 15th has marked World Consumer Rights Day - a campaign to raise global awareness about the needs and rights of consumers. It’s not only consumers and retailers taking notice of this trend, of course.

Privacy 71

Privacy Retail Customer Experience B2C 71

IT Governance

OCTOBER 26, 2021

Welcome to our third quarterly review of security incidents for 2021, in which we take a closer look at the information gathered in our monthly list of cyber attacks and data breaches. Meanwhile, we have seen a resurgence in the number of publicly disclosed data breaches. This represents 33% of the incidents we found. Download now.

Data breaches 130

Data breaches Retail Government Ransomware 130

Security Affairs

APRIL 23, 2019

Bad news for fitness and bodybuilding passionates, the popular online retailer Bodybuilding.com announced that hackers have broken into its systems. The popular online retailer website Bodybuilding.com announced last week that hackers have broken into its systems. ” continues the data breach notification note.

Passwords 67

Passwords Security Retail Personal data 67

Security Affairs

JUNE 17, 2021

The securWizCase experts found a major breach that affected the popular online retailer Cosmolog Kozmetik. l, has found a major breach in popular online retailer Cosmolog Kozmetik’s database. There was no need for a password or login credentials to access this information, and the data was not encrypted. What’s Happening?

Data breaches 105

Data breaches Retail Privacy Sales 105

IT Governance

MARCH 5, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 183,754,481 records. EasyPark data breach: 21.1 million data records belonging to EasyPark have been listed for sale on a hacking forum.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Data Breach Today

OCTOBER 11, 2019

23 Million Victims Across US, UK, EU and Australia Receive Breach Notifications Personalized product retailer CafePress has been hit with a lawsuit alleging that it failed to notify 23 million customers about a data breach in a timely manner or follow security best practices.

Retail 139

Retail Security Data breaches Passwords 139

Krebs on Security

APRIL 18, 2023

Flashpoint said MrMurza appears to be extensively involved in botnet activity and “drops” — fraudulent bank accounts created using stolen identity data that are often used in money laundering and cash-out schemes. The password chosen by this user was “ 1232.” relied on the passwords asus666 and 01091987h.

Passwords 225

Passwords IoT Sales Retail 225

Security Affairs

FEBRUARY 25, 2020

Experts from vpnMentor have uncovered a leaking, active database containing over 123 million records belonging to the sporting goods retailer Decathlon Spain (and possibly Decathlon UK as well). SecurityAffairs – data leak, privacy). The unsecure archive is greater than 9GB in size and was published on an ElasticSearch server.

Archiving 90

Archiving Passwords Retail Education 90

Hunton Privacy

OCTOBER 19, 2022

million penalty from e-commerce retailer Zoetop, owner of SHEIN and ROMWE, following an improperly handled data breach. In 2018, attackers targeted Zoetop and stole the credit card information, email addresses and hashed account passwords of certain Zoetop customers. In addition to paying New York $1.9

Data breaches 64

Data breaches Passwords Retail Cybersecurity 64

Krebs on Security

OCTOBER 1, 2021

From there, the attackers can reset the password for almost any online account tied to that mobile number, because most online services still allow people to reset their passwords simply by clicking a link sent via SMS to the phone number on file.

Passwords 281

Passwords Authentication Communications Retail 281

IT Governance

FEBRUARY 21, 2019

This week, we discuss a security flaw affecting 1Password, Dashlane, KeePass and LastPass; the prevalence of historic vulnerabilities in corporate IT systems; the increase in formjacking attacks; and Wendy’s $50 million data breach settlement. Each password manager also attempted to scrub secrets from memory.

Passwords 76

Passwords Data breaches Retail Government 76

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Security Affairs

APRIL 6, 2020

vpnMentor researchers discovered that the popular digital wallet application Key Ring exposed data belonging to millions of users in a huge data leak. Further investigation allowed the experts to discovered other unsecured S3 buckets belonging to the company that were also exposing sensitive data. ” continues the report.

Retail 103

Retail Encryption Insurance Passwords 103

IT Governance

JANUARY 16, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data is no longer publicly available. Data breached: >223,000,000 records. GB database includes names, email addresses, phone numbers and passwords.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

The Texas Record

NOVEMBER 1, 2017

Isn’t it fun to use different passwords for all of the dozens of accounts you use and just when you think you’ve got them memorized you’re forced to change them every few months? The standards on password usage are changing. Like this: TxRecBi#1! Texas Record Blog Is Number One!

Passwords 69

Passwords Authentication Retail Access 69

Security Affairs

NOVEMBER 15, 2020

Retail giant The North Face has reset the passwords for some of its customers in response to a successful credential stuffing attack. Outdoor retail giant The North Face has forced a password reset for a number of its customers following a successful credential stuffing attack that took place on October 8th and 9th.

Passwords 113

Passwords Retail Data breaches Access 113

Security Affairs

SEPTEMBER 25, 2018

Another fashion retailer suffered a data breach, the victim is SHEIN that announces the security breach affected 6.42 The retailer hired a forensic cybersecurity firm as well as an international law firm to investigate the security breach. ” reads the data breach notification. The post SHEIN Data breach affected 6.42

Data breaches 78

Data breaches Retail Passwords Cybersecurity 78

Thales Cloud Protection & Licensing

JANUARY 10, 2022

In the latest episode of Thales Security Sessions podcast , I was asked by Neira Jones to join Simon Keates, Head of Strategy and Payment Security at Thales and share my thoughts about the major security and organizational challenges retailers and other financial services organizations are facing. Pandemic has changed us all.

Retail 126

Retail Security Financial Services Authentication 126

IT Governance

FEBRUARY 1, 2022

If there was any belief that 2022 would see a sudden improvement in the cyber security landscape, our first list data breaches and cyber attacks of the year should end that hope. You can find the full list of data breaches below, with incidents affecting UK organisations listed in bold. Data breaches. Cyber attacks. Ransomware.

Data breaches 132

Data breaches Ransomware Phishing Retail 132

IT Governance

JUNE 1, 2023

Welcome to our new-look list of data breaches and cyber attacks. So, each month, we’ll update this page with the latest figures and links, so be sure to bookmark it to keep an eye out for the latest data breach news. In August 2020, it was embroiled in a data breach affecting more than 800,000 EyeMed and Lenscrafters patients.

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

IT Governance

JANUARY 9, 2023

Welcome to our review of security incidents for 2022, in which we take a closer look at the information gathered in our monthly lists of data breaches and cyber attacks. Although that’s a positive development in terms of organisations’ fight against cyber crime and their ability to prevent data breaches, we must remain cautious.

Data breaches 126

Data breaches Ransomware Government Passwords 126

IT Governance

JANUARY 25, 2019

Home improvement retailer B&Q has suffered a data breach affecting 70,000 of its… well, not customers, exactly. The database should have only been accessible to certain employees, but security specialists at CtrlBox found the database an ElasticSearch server, left publicly available and without password protection.

Data breaches 111

Data breaches GDPR Passwords Retail 111

Security Affairs

JANUARY 6, 2022

Credential stuffing attacks involve botnets trying stolen login credentials usually obtained through phishing attacks and data breaches. This kind of attacks is very efficient due to the bad habit of users of reusing the same password over multiple services. The experts analyzed thousands of posts containing login credentials.

Retail 127

Retail Passwords Data breaches Phishing 127

IT Governance

JULY 1, 2020

The only saving grace for the organisation – which didn’t do itself any favours by initially denying the story and threatening to sue people who reported on it – is that the leaked database comprised a list of records from past data breaches. You can take a look at every data breach and cyber attack that we recorded in June in this blog.

Data breaches 140

Data breaches Ransomware Retail Personal data 140

Security Affairs

AUGUST 22, 2018

Hackers claim to have stolen the personal details of almost 20,000 Superdrug customers who shopped online at the cosmetics retailer. The British Superdrug is the last victim of a security breach, hackers claim to have stolen the personal details of almost 20,000 people who shopped online at the cosmetics retailer. Pierluigi Paganini.

Retail 43

Retail Data breaches Passwords Access 43

IT Governance

FEBRUARY 28, 2019

This week, we discuss ICANN’s warning about DNS attacks, the extent of credential stuffing attacks on the retail sector, password managers’ responses to recent research into security flaws, and the European Data Protection Supervisor’s annual report for 2018. We often talk about the perils of password reuse.

Passwords 73

Passwords GDPR Retail Government 73

IT Governance

SEPTEMBER 1, 2022

Meanwhile, the bastion of password security, LastPass, announced that its systems had been breached – although the organisation is confident that customers’ details remain secure. Data breaches. victim of a cyber attack (unknown) Berkshire Partners LLC announces data breach (unknown) United HealthCare Services, Inc. Ransomware.

Data breaches 116

Data breaches Ransomware Energy and Utilities Phishing 116

IT Governance

OCTOBER 3, 2022

Welcome to our September 2022 list of data breaches and cyber attacks. That’s because we’re looking for ways to improve the way we deliver this data. Our blog has become the go-to source for monthly data breach statistics, and we’ve been producing this series for over seven years. Data breaches. Cyber attacks. Ransomware.

Data breaches 143

Data breaches Ransomware Education Phishing 143