CNA reports: Starbucks Singapore has been hit by a data breach affecting customers of its rewards membership programme. In an email sent to customers on Friday (Sep 16), Starbucks said it discovered “some unauthorised access” to user details such as name, gender, date of birth, mobile number, email address and residential address. Read more at…
Author: Dissent
Aeries Software settles claims over 2019 data breach
There’s an update to a 2019 data breach involving Aeries Software that impacted more than 150 school districts. Top Class Actions reports that Aeries has agreed to pay $1.75 million to resolve claims that the breach compromised personal information of San Dieguito Union High School students. The case is Gupta, et al. v. Aeries Software…
Uber responding to “cybersecurity incident” following reports of significant data breach
Michael Hill reports: Ride-hailing giant Uber has confirmed that it is responding to a cybersecurity incident as reports emerge that the firm has suffered a significant network data breach forcing it to shut down several internal communications and engineering systems. Attacker announces Uber breach through compromised Slack account In a statement on Twitter, Uber wrote…
NY: Suffolk County struggles to recover from BlackCat ransomware attack
Suffolk County on Long Island joined the ranks of those hit by a ransomware attack, and the results and impact are not surprising. One headline on September 13 somewhat said it all: “County IT systems crippled, with websites, email down, five days after discovery of cyberattack.” By yesterday, county officials were working to send out…
Ocean City therapist used patients’ credit cards for psychic readings
Lynda Cohen reports: An Ocean City therapist who used dozens of clients’ credit cards to pay for thousands in psychic readings was admitted into pretrial intervention last month, BreakingAC has learned. Ashley Crooks, 32, was charged with theft by deception and unlawful use of credit cards after racking up $40,000 in charges over two months…
Vulnerability allows access to credentials in Microsoft Teams
Steve Zurier reports: Researchers on Tuesday reported that this past August they identified an attack path that lets malicious actors with file system access to steal credentials for any Microsoft Teams user who’s logged-on. In a Sept. 13 blog post, the Vectra Protect team said because attackers do not require elevated permissions to read these…