Jeremiah Fowler reports (typos are in the original): On January 30th I discovered a non-password protected database that contained a massive amount of records totaling 440,336,852. Upon further review I was able to see connections to New York based cosmetic company Estée Lauder. I could see audit logs that contained a large number of email addresses…
Category: Business Sector
Chinese Military Personnel Charged with Computer Fraud, Economic Espionage and Wire Fraud for Hacking into Credit Reporting Agency Equifax
Statement by the U.S. Department of Justice today: A federal grand jury in Atlanta returned an indictment last week charging four members of the Chinese People’s Liberation Army (PLA) with hacking into the computer systems of the credit reporting agency Equifax and stealing Americans’ personal data and Equifax’s valuable trade secrets. The nine-count indictment alleges…
Your Poorly Secured Medical Credit Score Could Deny You Care
I didn’t even know I had/have a medical credit score. Do I? Do you? Joe Cadillic sends along this eye-opener of a report by Keith Axline: Private hospitals are now consulting a secret medical credit score from Experian before you even see a doctor. As a patient you do not have access to this score,…
Kobe Steel, Pasco hit in latest cyberattack cases: Defense Ministry
Kyodo News reports: Kobe Steel Ltd. and satellite data provider Pasco Corp. have come under cyberattacks, the latest in a series of confirmed cases of attacks on Japanese defense-related companies, the Defense Ministry said Thursday. The ministry, however, said it has not confirmed a leakage of classified information from the two companies. Read more on…
Educational Enrichment Systems, Inc. – Notice Of Data Breach
Educational Enrichment Systems, Inc. (“EES”) partners with school districts and agencies to provide preschool services to children. THis week, they issued a press release about a data security incident. As seen on their website: Educational Enrichment Systems, Inc. (“EES”) is providing notice of a data privacy event that may have affected certain personal information. The…
Data Breach at Mitsubishi Electric Caused by Zero-Day Vulnerability in Antivirus Software
Scott Ikeda writes: When antivirus software is installed and activated, there is usually an assumption that the system is automatically safer. Antivirus software can be penetrated just like any other software can, however, as a 2019 data breach at Japanese electronics giant Mitsubishi Electric demonstrates. Mitsubishi Electric did not disclose what software they were using…