What Happened: Nordstrom Another week, another retail breach. Nordstrom is the latest retailer to experience a data breach. But, this breach is unlike the others because it exposed employee, not customer, information. The exposed information includes: Employee names Social Security numbers Dates of birth Check account Routing numbers Salaries Nordstrom did not disclose the number […]
What Happened: HSBC bank is notifying U.S. customers of a breach that has compromised personal and financial data. The attack occurred over a 10 day period, from October 4 to October 14. After HSBC detected the breach, the bank announced it “suspended online access to prevent further unauthorized entry” to affected accounts. While the bank […]
What happened: The Radisson Rewards program has experienced a data breach affecting “less than 10 percent” of members. An exact number has not been released. Information including names, physical addresses, countries of residence, email addresses, as well as some company names, telephone numbers, frequent flyer numbers and Radisson Rewards member numbers were compromised. No financial […]
What happened: An unknown party gained access to the Girl Scouts of Orange County organization’s email account last month. Around 2,800 members of the Girl Scouts tribe received a letter about the breach of personal information. Information accessed includes names, birth dates, home addresses, insurance policy numbers, and health history. The information was kept for travel […]
What happened: The U.S. Department of Defense suffered a data breach affecting at least 30,000 service members and employees. An unnamed third-party vendor was compromised exposing the personal and payment card information of the military and civilian workers. The method and date of the attack are not known. Pentagon leadership was informed of the […]
The Breach Shopper Approved is the latest Magecart victim. A malicious JavaScript compromised the code of the popular plugin that online retailers can embed their sites to allow customers to post opinions and ratings. A payment card skimmer code had been added to a legitimate file that collected information entered in checkout forms. Compared to […]
What Happened: Apollo Apollo is a sales engagement startup that helps salespeople connect with prospective customers. This startup is the latest company who failed to properly protect their data. As a result, attackers were able to access the company contact database that is used to match sellers with potential buyers. The prospect database contains 200 […]
What happened: Chegg, an education technology company has announced that the company suffered a data breach. The breach occurred in April, but it was only discovered last week on September 19. The unauthorized party gained access to a company database that hosts user data for Chegg.com. It is estimated that the hackers accessed the data […]
What happened: Veeam, a Swiss-based data company exposed more than 445 million records after using a misconfigured host on Amazon Web Services. The issue was that it did not require any password to access. An independent security researcher, Bob Diachenko, discovered the open database on September 5. Diachenko notified Veeam about the issue but received no response. […]
