Tim De Chant reports: Thousands of Amazon employees, including those who developed private-label goods for the e-commerce giant, enjoyed years of access to sensitive third-party seller data, according to a new report. An internal audit in 2015 traced the issue to lax security protocols, including the use of a tool called “spoofer access,” which allowed…
Author: Dissent
Hackers Break Into Glovo, Europe’s $2 Billion Amazon Rival
Thomas Brewster reports: A cybercriminal has managed to break into the $2 billion-valued Spanish delivery startup Glovo. The hacker was selling access to both customer and courier accounts, with the ability to change their passwords, though the company has stressed to Forbes no credit card data has been stolen. […] Forbes was alerted to the breach by Alex Holden, chief…
Gifford says vendor had data breach
Gifford Health Care last month notified federal authorities of a data breach involving a vendor that helps administer one of the Randolph-based medical center’s drug-pricing programs. Gifford notified the U.S. Department of Health and Human Services on April 23 of a “hacking/IT incident” involving a network server, according to HHS records. Gifford spokeswoman Ashley Lincoln on…
Telstra service provider hit by cyber attack as hackers claim SIM card information stolen
Anton Nilsson reports: Hackers have claimed they have gained access to “tens of thousands” of SIM cards after a cyber attack against an Australian telecom firm. The victim, Melbourne-based Schepisi Communications, describes itself as a “platinum partner” of Telstra that supplies phone numbers and cloud storage services on behalf of the telecommunications giant. The company’s…
Then a Hacker Began Posting Patients’ Deepest Secrets Online
William Ralston has a piece on Wired to put a human face on what happened to Finnish therapy patients of the Vastaamo clinic. The Vastaamo hack, extortion attempt, and data dump was one of the worst breaches of 2020 and an absolute nightmare in terms of a breach exposing personal and sensitive information. And what…
SmileDirectClub reveals cybersecurity incident that could cost millions
Joel Stinnett reports: SmileDirectClub was the victim of a cybersecurity threat last month that could cost the teledentistry firm as much as $15 million, the company announced in a filing made Monday with the U.S. Securities and Exchange Commission. The incident, which occurred April 14, caused a systems outage at the Nashville-based company but was…