On March 22, Simon Cohen reported: Free movie streaming site Kanopy has suffered a significant data leak, according to security researcher Justin Paine. Due to an unprotected web log database, which could be publicly accessed without authentication of any kind, Paine believes that the company has been leaking “roughly 26-40 million log lines per day beginning…
Month: March 2019
A family tracking app was leaking real-time location data
Zack Whittaker reports: A popular family tracking app was leaking the real-time locations of more than 238,000 users for weeks after the developer left a server exposed without a password. The app, Family Locator, built by Australia-based software house React Apps, allows families to track each other in real-time, such as spouses or parents wanting…
Ransomware Forces Two Chemical Companies to Order ‘Hundreds of New Computers’
Lorenzo Franceschi-Bicchierai reports: A ransomware attack appears to have affected two American chemicals companies, Motherboard has learned. Hexion and Momentive, which make resins, silicones, and other materials, and are controlled by the same investment fund, were hit by the ransomware on March 12, according to a current employee. An internal email obtained by Motherboard and…
UK: Hampshire’s Police Federation comes under cyber attack from hackers
Tom Morton reports: The Police Federation of England and Wales has been hit by a second cyber attack. The organisation, which represents nearly 120,000 officers, said the ‘multi-pronged, sustained’ attack came at about 2.45pm on Thursday. It affected a number of databases as well as the advice website set up to deal with the first attack on March 9. Read more on The…
Class Certification Denied for Data Breach Claim Brought by Bank Against Retailer
Balch & Bingham LLP write: Last week, the U.S. District Court for the Middle District of Alabama denied Southern Independent Bank’s (“Southern Independent’s”) motion for class certification following a data breach which allegedly affected over 2,000 financial institutions across the country. Southern Independent, a community bank located in south Alabama, brought a class action complaint…
Privacy body probes ‘gaps’ in FOI website interface after data leak
ABS-CBN reports: The National Privacy Commission (NPC) is looking into “gaps” in the interface of the government’s Freedom of Information website that may have caused the leak of data on users who requested documents from the website, one of the agency’s commissioners said Saturday. Columnist Wilson Chua earlier said the ID he used on government…