Staples Discloses Data Breach Exposing ‘Limited’ Customer Information

US-based Office Superstore, Staples, has recently disclosed a data breach that exposed the order details of nearly 2,500 customers. “We recently learned of unauthorized access to a limited number of non-sensitive customer order data on Staples.com, whi… Continue reading Staples Discloses Data Breach Exposing ‘Limited’ Customer Information

Canada Revenue Agency Discloses Credential Stuffing Attack on 5,500 Service Accounts

A credential stuffing attack targeting Canada Revenue Agency (CRA) accounts has forced the government tax collector to suspend its online services over the weekend. The compromised accounts were linked to the GCKey portal, a system used by 30 federal d… Continue reading Canada Revenue Agency Discloses Credential Stuffing Attack on 5,500 Service Accounts

Scam Alert: Coca-Cola Scam Giveaways are After Your Personal Information

In the last two weeks, Bitdefender telemetry has picked up a spam campaign leveraging the Coca-Cola Company name. The subject lines ranged from “COCA-COLA LOTTERY ORGANIZATION” to “Coca Cola Email Draw UK 2020 -Coca Cola Lucky Winner … Continue reading Scam Alert: Coca-Cola Scam Giveaways are After Your Personal Information

Capitol One to Pay $80 Million Fine After 2019 Data Breach

Capital One Financial Corp has agreed to pay an $80 million penalty after the bank suffered a massive data breach that affected more than 100 million customer records in July 2019. The breach was the result of an unsecured Amazon S3 bucket that housed … Continue reading Capitol One to Pay $80 Million Fine After 2019 Data Breach

Interior Design Platform Confirms Data Breach after Data of 1.3 Million Users is Posted Online

Havenly, the online interior design and home decorating platform has disclosed a data breach after a data breach broker leaked 1.3 million user records for free on a popular hacking forum. ShinyHunters, a well-known seller of stolen data breach records… Continue reading Interior Design Platform Confirms Data Breach after Data of 1.3 Million Users is Posted Online

Athlete Recruiting Software Company Discloses Data Breach 7 Months after Student-Athlete Data is Exposed

In January 2020, a security researcher discovered an exposed server belonging to Front Rush, an athlete-recruiting software company offering solutions to more than 9,500 college teams at over 850 institutions across the United States. The initial repor… Continue reading Athlete Recruiting Software Company Discloses Data Breach 7 Months after Student-Athlete Data is Exposed

Promo.com announces data breach after 22 million user records are published online

Promo.com, a video creation platform for businesses and agencies, has confirmed a data breach after bad actors posted a database containing 22 million user records on a hacking forum. The award-winning video maker, which is partnered with social media … Continue reading Promo.com announces data breach after 22 million user records are published online

Cash Advance Service Dave.com Reports Data Breach

Digital banking and cash advance app Dave has reported a data breach after a bad actor published a database containing personal information of 7.5 million users on a public hacking forum. According to a data breach memo, “a malicious party recent… Continue reading Cash Advance Service Dave.com Reports Data Breach

Data Breach: University of York Staff and Student Records Stolen in Third-Party Cloud Service Provider Ransomware Attack

Yesterday, the University of York disclosed a security incident that affected Blackbaud, a third-party service provider offering customer relationship management (CRM) tools for nonprofits and educational organizations. According to a data breach memo,… Continue reading Data Breach: University of York Staff and Student Records Stolen in Third-Party Cloud Service Provider Ransomware Attack

Live Auction Marketplace Confirms Data Breach After Bad Actor Puts User Database Up for Sale on The Dark Web

LiveAuctioneers, an online auction platform headquartered in the United States, has confirmed a security incident after a database containing 3.4 million user records was put up for sale on the dark web for $2,500. “As of July 11th, 2020, our cyb… Continue reading Live Auction Marketplace Confirms Data Breach After Bad Actor Puts User Database Up for Sale on The Dark Web