Cyber Incidents

Leaders of the House Veterans Affairs Committee suggest that VA Secretary Eric Shinseki may have been misled about multiple breaches of department computers since

According to Gemalto's 2018 Breach Level Index, 291 data records were compromised every second in the first half of this year, resulting in widespread identity theft, account and financial hacks, and more.

Customers’ names and email addresses posted on website, tech giant confirms

Data breaches are getting more expensive. That's one of the findings of a new global study by the Ponemon Institute that examines the financial impact of a corporate data breach.

Cloud environment hacked.

Chicago Public Schools apologized Friday evening for a mass email accidentally linking to the private data of thousands of students and families.

The company confirms that an extensive investigation is underway.

It’s been a week filled to the brim with customer security compromises, and here’s one more to add to the pile. A day after Sears, Kmart and Delta

Travel booking website Orbitz has announced it discovered a possible data breach that exposed information for thousands of customers. The incident, discovered by the company on March 1st may have exposed information tied to about 880,000 credit cards.

Facebook executives waded into a firestorm of criticism after news reports revealed that a data firm harvested private information from 50 million users.

A DATA analysis firm employed by President Donald Trump’s 2016 campaign reportedly tapped the Facebook profiles of more than 50 million users without their permission. The data leak allowed C…

In 2014, Cambridge Analytica played a key role in harvesting profile data from more than 50 million Facebook users.

I don't know how many data breaches I'm sitting on that I'm yet to process. 100? 200? It's hard to tell because often I'm sent collections of multiple incidents in a single archive, often there's junk in there and often there's redundancy across those collections. All I really know is

People who own, run, or work for businesses should take note of several findings of a recent Cisco study of the impact of data breaches.

In the first 4 parts of "Fixing Data Breaches", I highlighted education [https://www.troyhunt.com/fixing-data-breaches-part-1-education/], data ownership and minimisation [https://www.troyhunt.com/fixing-data-breaches-part-2-data-ownership-minimisation/], the ease of disclosure [https://www.troyhunt.com/fixing-data-breaches-part-3-the-ease-of-disclosure/] and bug bounties [https://www.troyhunt.com/fixing-data-breaches-part-4-bug-bounties/] as ways of addressing the problem. It

Computer scientists have built and successfully tested a tool designed to detect when websites are hacked by monitoring the activity of email accounts associated with them. The researchers were surprised to find that almost 1 percent of the websites they tested had suffered a data breach during their 18-month study period, regardless of how big the companies' reach and audience are.

From Anthem and Chipotle to Equifax and Uber, this year saw several data breaches and leaks.

More than two years after OPM was hacked — twice — ripple effects are still felt across U.S. agencies and the third parties they associate with.

In light of Uber's recent data breach, the ride-hailer is being investigated by regulators in the U.K., Australia, the Philippines, and New York. Now the

CEO Dara Khosrowshahi has confirmed that hackers stole the data of 57 million riders and drivers around the world—and that the company kept it quiet.

When Uber paid a $100,000 ransom so that hackers who broke into its data warehouse would destroy the personal information they stole, it allowed the ride-sharing company to keep a massive breach of 57 million user and driver accounts secret for nearly a year.

There is never a good time to reveal a cyberattack. But with EU's GDPR looming, the fallout is only going to get harder and more expensive if you wait.

Hackers stole the personal data of 57 million customers and drivers from Uber Technologies Inc., a massive breach that the company concealed for more than a year. This week, the ride-hailing firm ousted its chief security officer and one of his deputies for their roles in keeping the hack under wraps, which included a $100,000 payment to the attackers.

The first three quarters of 2017 have seen 3,833 breaches reported, exposing over seven billion records, according to a new report.

Driver’s license data were stolen.

Another day, another security breach (and another, and another...). This time it's Disqus, which is revealing that in 2012 -- around the time when Engadget used Disqus for comments -- hackers made off with some of its data, covering a snapshot of usernames and associated email addresses dating back to 2007, as well as "sign-up dates, and last login dates in plain text for 17.5mm [sic] users." More distressing is news that it also coughed up passwords for a third of those accounts, which were in hashed (SHA1) form but it's possible the attackers could have decrypted them.