Breach Breakdown: Nordstrom

What Happened: Nordstrom Another week, another retail breach. Nordstrom is the latest retailer to experience a data breach.  But, this breach is unlike the others because it exposed employee, not customer, information. The exposed information includes: Employee names Social Security numbers Dates of birth Check account Routing numbers Salaries Nordstrom did not disclose the number…

Read More

Breach Breakdown: HSBC

What Happened: HSBC bank is notifying U.S. customers of a breach that has compromised personal and financial data.  The attack occurred over a 10 day period, from October 4 to October 14.  After HSBC detected the breach, the bank announced it “suspended online access to prevent further unauthorized entry” to affected accounts. While the bank…

Read More

Relationships are everything in security

Executives for the St. Louis Cardinals, one of the most successful franchises in Major League Baseball history, are under investigation by the F.B.I. and Justice Department prosecutors. The front-office personnel are accused of hacking into an internal network of the Houston Astros to steal information. The accused hacking illustrates several pain points that enterprises across…

Read More

Breach Breakdown: Radisson Rewards

What happened: The Radisson Rewards program has experienced a data breach affecting “less than 10 percent” of members.  An exact number has not been released. Information including names, physical addresses, countries of residence, email addresses, as well as some company names, telephone numbers, frequent flyer numbers and Radisson Rewards member numbers were compromised.  No financial…

Read More

Breach Breakdown: Girl Scouts

What happened: An unknown party gained access to the Girl Scouts of Orange County organization’s email account last month. Around 2,800 members of the Girl Scouts tribe received a letter about the breach of personal information. Information accessed includes names, birth dates, home addresses, insurance policy numbers, and health history.  The information was kept for travel…

Read More

Breach Breakdown: Pentagon

  What happened: The U.S. Department of Defense suffered a data breach affecting at least 30,000 service members and employees.  An unnamed third-party vendor was compromised exposing the personal and payment card information of the military and civilian workers. The method and date of the attack are not known.  Pentagon leadership was informed of the…

Read More

Breach Breakdown: Shopper Approved

The Breach Shopper Approved is the latest Magecart victim.  A malicious JavaScript compromised the code of the popular plugin that online retailers can embed their sites to allow customers to post opinions and ratings. A payment card skimmer code had been added to a legitimate file that collected information entered in checkout forms. Compared to…

Read More

Breach Breakdown: Apollo

What Happened: Apollo Apollo is a sales engagement startup that helps salespeople connect with prospective customers.  This startup is the latest company who failed to properly protect their data. As a result, attackers were able to access the company contact database that is used to match sellers with potential buyers.  The prospect database contains 200…

Read More

Join Brite at RSS!

We are now days away from the Rochester Security Summit (RSS)! Join us and other cybersecurity professionals at RSS on October 9-10 at Rochester Riverside Convention Center to learn about cutting-edge technology for the cybersecurity industry.  Stop by our booth to talk to our reps on how Brite can help you Break Through the Clutter! In…

Read More

Breach Breakdown: Chegg Data Breach

What happened: Chegg, an education technology company has announced that the company suffered a data breach. The breach occurred in April, but it was only discovered last week on September 19. The unauthorized party gained access to a company database that hosts user data for Chegg.com. It is estimated that the hackers accessed the data…

Read More