Data Breach Today

JANUARY 10, 2020

Retailer's Missteps Led to 'Careless Loss of Data,' Privacy Watchdog Says British regulators have fined Dixons Carphone $653,000 for a breach that exposed millions of payment card details and personal data due to point-of-sale malware.

Retail 162

Retail Sales Data Privacy Personal data 162

Hunton Privacy

AUGUST 11, 2020

On August 5, 2020, the French Data Protection Authority (the “CNIL”) announced that it has levied a fine of €250,000 on French online shoe retailer, Spartoo, for various infringements of the EU General Data Protection Regulation (“GDPR”).

Retail 114

Retail GDPR IT Personal data 114

Thales Cloud Protection & Licensing

OCTOBER 18, 2018

As digital transformation takes hold, the retail industry is under siege from cyber criminals and nation states attempting to steal consumers’ personal information, credit card data and banking information. senior retail IT security managers and 96 IT security managers from retailers across the globe.

Retail 66

Retail Data breaches Digital transformation Encryption 66

IT Governance

MARCH 26, 2019

It’s relevant for everyone, including retail and hospitality. Retail and hospitality organisations will likely need to conduct several to cover all their processes, both new and existing. Common activities for retail and hospitality requiring DPIAs. The ICO also has excellent guidance on exactly when to carry out a DPIA.

Retail 78

Retail Risk GDPR Government 78

Data Breach Today

MARCH 19, 2019

White Hat Hackers Expose Lax Security Practices at Chinese Online Retailer An unprotected database belonging to Chinese e-commerce site Gearbest exposed 1.5 million customer records, including payment information, email addresses and other personal data for customers worldwide, white hat hackers discovered.

Retail 180

Retail Personal data Security 180

Thales Cloud Protection & Licensing

DECEMBER 11, 2018

As I was starting to write this blog, yet another retail program data breach occurred, for Marriott’s Starwood loyalty program. But it looks like my own personal data has been breached – again. To make a long story short – the top reason that they didn’t invest in data security was “lack of perceived need” at 52%.

Retail 66

Retail Data breaches Encryption Mining 66

Thales Cloud Protection & Licensing

OCTOBER 10, 2022

Consumers have their Say about Protection of Personal Data – Call for More Stringent Controls. We live in a digital world in which we engage with significant social, government, retail, business and entertainment services now delivered without any direct human service management. Tue, 10/11/2022 - 06:46.

Personal data 71

Personal data Data breaches Government Authentication 71

IT Governance

JUNE 25, 2018

With all the noise, however, it’s possible that the key facts haven’t been heard clearly, especially by those in smaller businesses where there isn’t always a defined person to take the lead for IT. There are many opportunities within retail, leisure and hospitality for tailored offers and promotions to improve business.

Retail 71

Retail GDPR IT Compliance 71

Privacy and Cybersecurity Law

JULY 26, 2021

On July 5, 2021, the Italian supervisory authority (“ Garante ”) published an injunction against a company operating a food delivery app (“ Company ”) over the processing of riders’ personal data with respect to the use of algorithms for the management of the orders. Security measures in place. Retention period.

Personal data 52

Personal data GDPR e-Delivery Communications 52

Hunton Privacy

JANUARY 12, 2018

On January 8, 2017, the UK Information Commissioner (“ICO”) issued an unprecedented monetary penalty of £400,000 against British mobile phone retailer, The Car Phone Warehouse Limited. In its decision, the ICO meticulously detailed the chronology of events and technical failures that led to the breach.

Retail 40

Retail Personal data Security GDPR 40

Security Affairs

JANUARY 19, 2024

VF immediately began taking measures to remediate the attack and launched an investigation into the security breach. “Based on VF’s preliminary analysis from its ongoing investigation, VF currently estimates that the threat actor stole personal data of approximately 35.5 million individual consumers.”

Data breaches 112

Data breaches Passwords Retail Insurance 112

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. Data breached: >33,000,000 people’s data. Data breached: 19,718,687 records.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Krebs on Security

APRIL 5, 2021

” The message above was sent to a customer of RaceTrac Petroleum , an Atlanta company that operates more than 650 retail gasoline convenience stores in 12 southeastern states. “Perhaps you bought something there and left your personal data. . “Call or write to this store and ask to protect your privacy!!!!”

Ransomware 282

Ransomware Personal data Retail Privacy 282

Collibra

APRIL 11, 2023

Retail is a dynamic and competitive market. In addition to the traditional brick-and mortar-stores, the retail business today includes online and mobile stores. Every process at every stage of these stores relies on data. The right kind of data can drive great innovations in retail. What if they do not match?

Retail 95

Retail Sales Compliance Marketing 95

IT Governance

JANUARY 9, 2024

million customers’ data having gained access via a vulnerability in Hathaway’s Laravel web application framework. The compromised data allegedly includes names, email addresses and phone numbers. Data breached: 41,500,000 records. Data breached: 4,452,782 records. They accessed 41.5 HealthEC LLC breached, almost 4.5

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

eSecurity Planet

JANUARY 5, 2023

Also read: SANS Outlines Critical Infrastructure Security Steps as Russia, U.S. Given its broader availability combined with the right exploit, wiper malware could cause massive destruction in a short period of time, said Derek Manky, chief security strategist and VP of global threat intelligence at FortiGuard Labs. Trade Cyberthreats.

Security 141

Security Ransomware Cybersecurity Privacy 141

Security Affairs

AUGUST 22, 2018

Hackers claim to have stolen the personal details of almost 20,000 Superdrug customers who shopped online at the cosmetics retailer. The British Superdrug is the last victim of a security breach, hackers claim to have stolen the personal details of almost 20,000 people who shopped online at the cosmetics retailer.

Retail 43

Retail Data breaches Passwords Access 43

IT Governance

FEBRUARY 21, 2024

Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Security Affairs

MAY 20, 2023

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. Exposed data includes customer names, emails, phone numbers, addresses, and dates of birth.

Data breaches 90

Data breaches Retail Sales Ransomware 90

IT Governance

DECEMBER 20, 2022

Although there have still been a few surprises, with the death of Queen Elizabeth II and blazing heatwaves across the UK to name but two, it was a familiar year in the cyber security landscape. Cyber criminals continued to wreak havoc, with the likes of Twitter , Uber and Neopets all reporting mammoth data breaches.

Security 132

Security Data breaches Ransomware Military 132

Security Affairs

APRIL 23, 2019

Bad news for fitness and bodybuilding passionates, the popular online retailer Bodybuilding.com announced that hackers have broken into its systems. The popular online retailer website Bodybuilding.com announced last week that hackers have broken into its systems. ” reads the announcement published on the website.

Passwords 67

Passwords Security Retail Personal data 67

Security Affairs

JUNE 13, 2023

“A limited amount of information about certain companies we regulate – some of it confidential – along with personal data of 412 Ofcom employees, was downloaded during the attack,” the spokesperson told The Record. “We

Communications 68

Communications Data breaches Ransomware Personal data 68

Data Protection Report

JUNE 21, 2023

The new law has exclusions for Gramm-Leach-Bliley-covered financial institutions, HIPAA-covered covered entities and business associates, non-profits, institutes of higher education, and electric utilities, power generation companies, and retail electric providers. A similar requirement applies with respect to the sale of biometric data.

Privacy 83

Privacy Personal data Sales Retail 83

IT Governance

DECEMBER 15, 2022

The incident occurred in late November, with the sports retail giant gearing up for Black Friday and the start of the World Cup. Intersport was initially confident that the attackers didn’t access customer data, but a Tech Monitor report claims that the Hive ransomware gang posted the information online weeks after the attack.

Ransomware 122

Ransomware Personal data Retail Risk 122

Krebs on Security

AUGUST 16, 2021

On Sunday, Vice.com broke the news that someone was selling data on 100 million people, and that the data came from T-Mobile. The hacker(s) claim the purloined data also includes IMSI and IMEI data for 36 million customers. ” T-Mobile declined to comment beyond what the company said in its blog post today.

Data breaches 308

Data breaches Access Retail Sales 308

Hunton Privacy

AUGUST 6, 2021

On July 30, 2021, the UK High Court handed down its judgment in the case of Warren v DSG Retail Ltd [2021] EWHC 2168 (QB), determining that the claimant could not seek damages on the basis of misuse of personal information, breach of confidence or common law negligence following a data breach. That fine is under appeal.

Data breaches 116

Data breaches Retail Sales Personal data 116

IT Governance

NOVEMBER 14, 2018

Black Friday and Cyber Monday are almost upon us, kickstarting what retailers hope will be a successful trading period. However, the flurry of purchases and the data that represents means cyber criminals will also be looking to cash in. Use secure websites. When buying online, only visit and transact on secure sites.

Retail 94

Retail Personal data GDPR Risk 94

IT Governance

JULY 1, 2021

We found a comparatively low 9,780,931 breached records from publicly disclosed security incidents in June 2021. It’s simply the case that in the majority of cases, the breached organisation didn’t reveal how much data was compromised, either because it didn’t know or wasn’t obliged to reveal it publicly.

Data breaches 130

Data breaches Ransomware Computer and Electronics Retail 130

Thales Cloud Protection & Licensing

JUNE 21, 2018

For years now many organisations have approached data security with a sense of reluctance. This approach has, undoubtedly, helped to create a mood whereby organisations realise they can’t ignore data security matters, but continue to invest somewhat reluctantly.

Security 54

Security Personal data Retail Marketing 54

Hunton Privacy

JUNE 25, 2020

Establishments and companies in the UK will therefore be responsible for the additional collection and potential sharing of customers’ personal data. Any entity engaging in this kind of data collection will need to comply with the requirements of data protection law.

Data collection 98

Data collection Personal data Compliance Retail 98

IT Governance

JULY 1, 2020

The first half of 2020 ended on a familiarly bad note, with 92 security incidents accounting for at least 7,021,195,399 breached records. Amtrak resets user passwords after Guest Rewards data breach (unknown). Duluth student alerted school district about security breach (unknown). hack (350,000).

Data breaches 140

Data breaches Ransomware Retail Personal data 140

IT Governance

JUNE 30, 2022

Welcome to our June 2022 review of data breaches and cyber attacks. We identified 80 security incidents during the month, resulting in 34,908,053 compromised records. Meanwhile, be sure to subscribe to our Weekly Round-up to receive the latest cyber security news and advice delivered straight to your inbox.

Data breaches 136

Data breaches Ransomware Personal data Blockchain 136

IT Governance

OCTOBER 19, 2018

If these could have been used to identify individuals, this would have constituted a personal data breach under the EU GDPR (General Data Protection Regulation). After recently being made aware of this issue, we have applied a security update to our website to ensure it cannot happen again. Insecure storage.

Retail 65

Retail Data breaches Personal data GDPR 65

IT Governance

NOVEMBER 28, 2023

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). Breached records: more than 56 million.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IBM Big Data Hub

FEBRUARY 23, 2024

The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents. The details of any organization’s plan to become fully GDPR compliant will vary based on the data the organization collects and what it does with that data.

GDPR 79

GDPR Compliance Personal data Privacy 79

Thales Cloud Protection & Licensing

JUNE 24, 2021

Businesses are governed by an increasingly complex network of regulations, jurisdictions, and standards which dictate security and privacy requirements. The retail sector, especially, is a lucrative target for credential stuffing attacks , resulting in billions lost every year. Compliance with GDPR and CCPA.

Authentication 71

Authentication Compliance GDPR Personal data 71

Security Affairs

JUNE 16, 2023

Oil and Gas giant Shell has confirmed that it is one of the victims of the recent large-scale ransomware campaign conducted by the Clop gang exploiting a MOVEit zero-day vulnerability Threat actors are actively exploiting the zero-day vulnerability, tracked as CVE-2023-34362 , to steal data from organizations worldwide.

Ransomware 90

Ransomware Data breaches Retail Government 90