Author Archives: BrianKrebs

Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards

Posted on by

Sonic Drive-In, a fast-food chain with nearly 3,600 locations across 45 U.S. states, has acknowledged a breach affecting an unknown number of store payment card systems. The ongoing breach may have led to a fire sale on millions of stolen credit and debit card accounts that are now being peddled in shadowy underground cybercrime stores, KrebsOnSecurity has learned. Continue reading Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards→

Source: Deloitte Breach Affected All Company Email, Admin Accounts

Posted on by

Deloitte, one of the world’s “big four” accounting firms, has acknowledged a breach of its internal email systems, British news outlet The Guardian revealed today. Deloitte has sought to downplay the incident, saying it impacted “very few” clients. But according to a source close to the investigation, the breach dates back to at least the fall of 2016, and involves the compromise of all administrator accounts at the company as well as Deloitte’s entire internal email system. Continue reading Source: Deloitte Breach Affected All Company Email, Admin Accounts→

Canadian Man Gets 9 Months Detention for Serial Swattings, Bomb Threats

Posted on by

A 19-year-old Canadian man was found guilty of making almost three dozen fraudulent calls to emergency services across North America in 2013 and 2014. The false alarms, two of which targeted this author — involved phoning in phony bomb threats and multiple attempts at “swatting” — a dangerous hoax in which the perpetrator spoofs a call […] Continue reading Canadian Man Gets 9 Months Detention for Serial Swattings, Bomb Threats→

Equifax or Equiphish?

Posted on by

More than a week after it said most people would be eligible to enroll in a free year of its TrustedID identity theft monitoring service, big three consumer credit bureau Equifax has begun sending out email notifications to people who were able to take the company up on its offer. But in yet another security stumble, the company appears to be training recipients to fall for phishing scams. Continue reading Equifax or Equiphish?→

Equifax or Equiphish?

Posted on by

More than a week after it said most people would be eligible to enroll in a free year of its TrustedID identity theft monitoring service, big three consumer credit bureau Equifax has begun sending out email notifications to people who were able to take the company up on its offer. But in yet another security stumble, the company appears to be training recipients to fall for phishing scams. Continue reading Equifax or Equiphish?→

Equifax Breach: Setting the Record Straight

Posted on by

Bloomberg published a story this week citing three unnamed sources who told the publication that Equifax experienced a breach earlier this year which predated the intrusion that the big-three credit bureau announced on Sept. 7. To be clear, this earlier breach at Equifax is not a new finding and has been a matter of public record for months. Furthermore, it was first reported on this Web site in May 2017. Continue reading Equifax Breach: Setting the Record Straight→

Equifax Hackers Stole 200k Credit Card Accounts in One Fell Swoop

Posted on by

Visa and MasterCard are sending confidential alerts to financial institutions across the United States this week, warning them about more than 200,000 credit cards that were stolen in the epic data breach announced last week at big-three credit bureau Equifax. At first glance, the private notices obtained by KrebsOnSecurity appear to suggest that hackers were first able to steal credit card numbers from Equifax starting in November 2016. But Equifax says the accounts were all stolen at the same time — when hackers accessed the company’s systems in mid-May 2017. Continue reading Equifax Hackers Stole 200k Credit Card Accounts in One Fell Swoop→

Adobe, Microsoft Plug Critical Security Holes

Posted on by

Adobe and Microsoft both on Tuesday released patches to plug critical security vulnerabilities in their products. Microsoft’s patch bundles fix close to 80 separate security problems in various versions of its Windows operating system and related software, including two vulnerabilities that already are being exploited in active attacks. Adobe’s new version of its Flash Player software fixes two flaws that malware or attackers could use to seize remote control over vulnerable computers with no help from users. Continue reading Adobe, Microsoft Plug Critical Security Holes→

Ayuda! (Help!) Equifax Has My Data!

Posted on by

Equifax last week disclosed a historic breach involving Social Security numbers and other sensitive data on as many as 143 million Americans. The company said the breach also impacted an undisclosed number of people in Canada and the United Kingdom. But the official list of victim countries may not yet be complete: According to information […] Continue reading Ayuda! (Help!) Equifax Has My Data!→