T-Mobile said a “bad actor” abused an application programming interface (API) to hoover up data on roughly 37 million current postpaid and prepaid customer accounts. The data stolen included customer name, billing address, email, phone number, date of birth, T-Mobile account number, as well as information on the number of customer lines and plan features.APIs […]
According to a PayPal notice of security incident dated January 18, attackers got unauthorized access to the accounts of thousands of users between December 6 and 8, 2022. The total number of accounts that were accessed by threat actors using a credential stuffing attack is reported as being 34,942.
Security company NortonLifeLock has warned an unknown number of customers that criminals have broken into their Norton Password Manager, an online password manager, and advises that all stored credentials be changed immediately. The password manager can be used via a Norton account and can generate passwords and store them in an “online vault”. The password […]
Airfrance en KLM hebben meerdere klanten gewaarschuwd voor gecompromitteerde accounts waarbij mogelijk persoonsgegevens zijn gelekt. In een e-mail laten de luchtvaartmaatschappijen weten dat een “ongeautoriseerde entiteit” verdachte activiteit heeft uitgevoerd met de accounts van de betreffende klanten. Daarbij zijn mogelijk persoonlijke gegevens gecompromitteerd. Het gaat om naam, Flying Blue-gegevens, Air Miles, telefoonnummer, e-mailadres en laatste […]
The hacker copied information from backup that contained basic customer account information and related metadata, including company names, end-user names, billing addresses, email addresses, telephone numbers, and the IP addresses from which customers were accessing the LastPass service. The threat actor was also able to copy a backup of customer vault data from the encrypted […]
The American crypto exchange Gemini has leaked the private data of 5.3 million users, which has subsequently been used for targeted phishing attacks. It concerns e-mail addresses and partial telephone numbers. According to Gemini, the data was stolen from an unnamed “third-party” supplier. No further details about the data breach have been provided. Gemini does […]
The records of Twitter contain either a private email address or phone number, and public scraped data, including the account’s Twitter ID, name, screen name, verified status, location, URL, description, follower count, account creation date, friends count, favorites count, statuses count, and profile image URLs.
Worldwide, a total of 890,000 computers were infected and more than fifty million passwords were stolen. This is the conclusion of security company Group-IB based on its own research. Investigators from the company identified 34 gangs behind the attacks using known malware such as RedLine and Raccoon Infostealer. This malware is capable of stealing login […]
Thanks in part to action by the Dutch police, the American authorities have taken offline a criminal marketplace where millions of stolen login details were traded, as well as tens of thousands of credit card details and scanned passports and driver’s licenses. The alleged administrator of the WT1Shop marketplace has also been charged. This is […]
Een inbraak vond plaats op het oude ledenportaal van de Koninklijke Nederlandsche Wielren Unie (KNWU) waarbij de persoonsgegevens van 90.000 leden gestolen zijn. Het gaat onder andere om naam, e-mailadres, telefoonnummer en adresgegevens. De inbraak vond plaats op de oude MijnKNWU-omgeving. De geeiste dwangsom (ransomware) is niet voldaan aan de hacker. Door de Weilerbond wordt […]
- 1
- 2