data breaches – Page 9 – Computer Security Articles

Cybersecurity Firm Imperva Discloses Breach

August 27, 2019 admin Alissa Knight, data breaches, DisruptOPS, Heli Erickson, imperva, Incapsula, Rich Mogull, Web Application Firewall

Credit to Author: BrianKrebs| Date: Tue, 27 Aug 2019 16:52:58 +0000

Imperva, a leading provider of Internet firewall services that help Web sites block malicious cyberattacks, alerted customers on Tuesday that a recent data breach exposed email addresses, scrambled passwords, API keys and SSL certificates for a subset of its firewall users. Redwood Shores, Calif.-based Imperva sells firewall technology designed to detect and block various types of malicious Web traffic, from denial-of-service attacks to digital probes aimed at undermining the security of Web-based software applications.

Independent Krebs

Breach at Hy-Vee Supermarket Chain Tied to Sale of 5M+ Stolen Credit, Debit Cards

August 22, 2019 admin data breaches, Hy-Vee breach, Joker's stash

Credit to Author: BrianKrebs| Date: Thu, 22 Aug 2019 21:38:47 +0000

On Tuesday of this week, one of the more popular underground stores peddling credit and debit card data stolen from hacked merchants announced a blockbuster new sale: More than 5.3 million new accounts belonging to cardholders from 35 U.S. states. Multiple sources now tell KrebsOnSecurity that the card data came from compromised gas pumps, coffee shops and restaurants operated by Hy-Vee, an Iowa-based company that operates a chain of more than 245 supermarkets throughout the Midwestern United States.

Independent Krebs

SEC Investigating Data Leak at First American Financial Corp.

August 12, 2019 admin Ben Shoval, data breaches, First American Financial Corp., The Coming Storm, U.S. Securities and Exchange Commission

Credit to Author: BrianKrebs| Date: Mon, 12 Aug 2019 20:30:17 +0000

The U.S. Securities and Exchange Commission (SEC) is investigating a security failure on the Web site of real estate title insurance giant First American Financial Corp. that exposed more than 885 million personal and financial records tied to mortgage deals going back to 2003, KrebsOnSecurity has learned.

Independent Krebs

What We Can Learn from the Capital One Hack

August 2, 2019 admin A Little Sunshine, Apache, Capital One breach, CloudFlare, data breaches, DisruptOPS, Evan Johnson, metadata service, ModSecurity, Rich Mogull, Server Side Request Forgery, SSRF, The Coming Storm, WAF, Web Application Firewall, William Bengston

Credit to Author: BrianKrebs| Date: Fri, 02 Aug 2019 21:30:34 +0000

On Monday, a former Amazon employee was arrested and charged with stealing more than 100 million consumer applications for credit from Capital One. Since then, many have speculated the breach was perhaps the result of a previously unknown “zero-day” flaw, or an “insider” attack in which the accused took advantage of access surreptitiously obtained from her former employer. But new information indicates the methods she deployed have been well understood for years.

Independent Krebs

Capital One Data Theft Impacts 106M People

July 30, 2019 admin Capital One breach, data breaches, GitHub, Masergy, Ne'er-Do-Well News, Paige A. Thompson, Ray Watson, slack, Twitter

Credit to Author: BrianKrebs| Date: Tue, 30 Jul 2019 13:59:54 +0000

Federal prosecutors this week charged a Seattle woman with stealing data from more than 100 million credit applications made with Capital One Financial Corp. Incredibly, much of this breached played out publicly over several months on social media and other open online platforms. What follows is a closer look at the accused, and what this incident may mean for consumers and businesses.

Independent Krebs

QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransomware Attack

July 19, 2019 admin data breaches, iNSYNQ ransomware attack

Credit to Author: BrianKrebs| Date: Fri, 19 Jul 2019 16:40:07 +0000

Cloud hosting provider iNSYNQ says it is trying to recover from a ransomware attack that shut down its network and has left customers unable to access their accounting data for the past three days. Unfortunately for iNSYNQ, the company appears to be turning a deaf ear to the increasingly anxious cries from its users for more information about the incident.

Independent Krebs

Breach at Cloud Solution Provider PCM Inc.

June 27, 2019 admin Cloud Hopper, data breaches, gift card fraud, Insight Enterprises, microsoft, office365, PCM Inc., RiskIQ, Wipro, Wipro breach

Credit to Author: BrianKrebs| Date: Thu, 27 Jun 2019 17:00:38 +0000

A digital intrusion at PCM Inc., a major U.S.-based cloud solution provider, allowed hackers to access email and file sharing systems for some of the company’s clients, KrebsOnSecurity has learned.