article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

.” Constella Intelligence , a company that tracks exposed databases, finds that 774748@gmail.com was used in connection with just a handful of passwords, but most frequently the password “ featar24 “ Pivoting off of that password reveals a handful of email addresses, including akafitis@gmail.com. ru in 2008.

article thumbnail

A Cyber Insurance Backstop

Schneier on Security

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

List of data breaches and cyber attacks in August 2020 – 36.6 million records breached

IT Governance

Toronto residents’ CERB payments on hold after fraudulent employment insurance claims (700) Kentucky’s unemployment system suffers another breach (unknown) Defence supplier PULAU Corporation says it has been hacked (unknown) American Payroll Association notifying those affected by cyber attack (unknown). Cyber attacks. Hitachi Chemical Co.

article thumbnail

List of Data Breaches and Cyber Attacks in April 2023 – 4.3 Million Records Breached

IT Governance

Additionally, billing information, insurance numbers and other financial details were stolen in the attack. More worryingly, the same database contained usernames, email addresses and encrypted passwords. In a statement, Shields said that it “takes the confidentiality, privacy, and security of information in our care seriously.

article thumbnail

2019 end-of-year review part 1: January to June

IT Governance

The site’s security team suspected that users were being targeted in a credential-stuffing attack; this is where cyber criminals use a list of stolen usernames and passwords en masse to break into an account. Worse, they changed the email address associated with the account, preventing them from resetting their password.

article thumbnail

The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024

IT Governance

Affected information includes users’ names, email addresses, IP addresses and encrypted passwords. TB Turtlemint Source (New) Insurance India Yes 1,800,000 Chunghwa Telecom Source (New) Telecoms Taiwan Yes 1.7 The threat actor, KryptonZambie, listed a 5.93

article thumbnail

The Week in Cyber Security and Data Privacy: 4 – 10 March 2024

IT Governance

According to a listing on a popular hacking forum, the database includes customers’ names, email addresses, hashed passwords, and more. Source (New) Finance USA Yes 3,494 Woodruff Sawyer Source (New) Insurance USA Yes 3,087 Blackburn College Source (New) Education USA Yes 3,039 CAIRE Inc. The claim is yet to be verified.