It’s been another long week full of news about cyberattacks, data leaks, and other incidents! Let’s recap:
Avis Rental Cars was hit with a cyberattack in August that resulted in hundreds of thousands of their customers’ personal information being stolen. While there has not been much information released about this attack, we do know that the information compromised includes customers’ names, addresses, emails, phone numbers, birthdates, credit card information, and drivers license numbers affecting over 300,000 customers.
(–Source: TechCrunch on MSN
Read More: Thousands of Avis car rental customers had personal data stolen in cyberattack (msn.com) )
A 10-month-long data breach affecting Slim CD, a payment gateway provider, resulted in nearly 1.7 million credit card accounts’ information being exposed.
Slim CD noticed suspicious activity in its systems in June of this year, but upon further investigation, found that unauthorized access had been occurring since August of 2023.
An estimated 1,693,000 people were affected by this incident, leaving their names, addresses, and credit card expiration dates exposed.
(–Source: Mashable on MSN
Read More: Hackers steal nearly 1.7 million credit card numbers in breach (msn.com) )
Last year, 23andMe experienced a data breach that compromised an estimated 14,000 accounts, giving the attackers access to the ancestry data of 6.9 million profiles including user account information, location, ancestry and DNA reports including DNA matches, family members names, profile pictures, birthdates, and other sensitive information.
A class action lawsuit was filed against 23andMe after the breach occurred, accusing the genetics-testing company of failure to protect their users’ personal information. Following this accusation and filing of the lawsuit, 23andMe has agreed to pay a $30 million settlement.
(–Source: USA Today on MSN
Read More: 23andMe agrees to $30 million settlement over data breach that affected 6.9 million users (msn.com) )
Last week, David’s Bridal filed a notice of data breach. This filing came after the company noticed that certain information the company had access to, including customer names and social security numbers, was accessed by an unauthorized third party.
After investigation, David’s Bridal started notifying affected customers via notification letters that their information had been compromised in the attack. These letters began going out last week.
(–Source: JD Supra
Read More: David’s Bridal Data Breach Leaks an Unknown Number of Social Security Numbers | Console and Associates, P.C. – JDSupra )
Over the Summer, the city of Columbus was hit with a cyberattack which compromised sensitive information belonging to hundreds of thousands of city employees, residents, and others. Two months after the attack occurred, the city is still struggling to get back to normal. Over 20% of the city’s systems are still down and around 8% are only partially functioning.
$4 million in technology spending was approved by the mayor in an effort to recover from this incident.
(–Source: The Columbus Dispatch on Yahoo! News
Read More: Columbus data breach: 21% of city systems still down, IT chief says (yahoo.com)
The US Justice Department has alleged that a cyberattack affecting 200,000 devices worldwide carried out by Chinese government backed hackers was able to be neutralized by the US authorities’ ability to “take control of the hackers’ computer infrastructure”
This attack involved the utilization of malware to infect a variety of consumer devices.
(–Source: Manilla Standard
Read More: US says it thwarted Chinese ‘state-sponsored’ cyber attack – Manila Standard )
