Catalin Cimpanu reports: A hacker has leaked online today the database of Daniel’s Hosting (DH), the largest free web hosting provider for dark web services. The leaked data was obtained after the hacker breached DH earlier this year, on March 10, 2020. At the time, DH owner Daniel Winzen told ZDNet the hacker breached his portal,…
Category: Business Sector
Ca: Privacy breach at Manitoba Agricultural Services Corporation
The Brandon Sun reports: The Manitoba Agricultural Services Corporation is notifying clients of a privacy breach of personal data that occurred on May 26. An attachment containing the name and contact information of AgriInsurance clients was attached in error to an email sent to 134 producers in Manitoba, the corporation said in a news release….
India’s popular BHIM payments platform reportedly leaks 7M users’ data (UPDATED with NPCI denial)
Ivan Mehta reports: A data leak from India’s BHIM payment app exposed personal data of 7 million Indians including addresses, scans of Aadhar IDs, and caste certificates. A report from cybersecurity company VPN Mentor suggests that this 409GB database was stored in a misconfigured AWS S3 bucket, making all data publicly accessible. The report noted that the…
Joomla team discloses data breach
Catalin Cimpanu reports: The team behind the Joomla open source content management system (CMS) announced a security breach last week. The incident took place after a member of the Joomla Resources Directory (JRD) team left a full backup of the JRD site (resources.joomla.org) on an Amazon Web Services S3 bucket owned by their own company….
AU: Big Footy data breach exposed private details of up to 100,000 users
Fiona Wilan reports: A large data leak from an AFL fan website has exposed about 70 million records online, including private conversations between users, according to cyber security researchers. Aussie Rules forum Bigfooty.com has about 100,000 users – although it’s not known how many were affected. The site has now started to contact users to notify them…
FTC Approves Settlement with Canadian Lockmaker Over Deceptive Security Claims
Hunton Andrews Kurth writes: We previously posted about the Tapplock, Inc. (“Tapplock”) settlement with the Federal Trade Commission (“FTC”) over allegations that the company violated Section 5 of the FTC Act by falsely claiming that its “smart locks” were secure. Earlier this month, the FTC voted 5-0 to approve the settlement. Tapplock sells fingerprint-enabled, internet-connected padlocks that…