So, as I had guessed, it’s not just Stanford University and Kroger who are notifying employees that criminals managed to access the database of W-2 Express, an Equifax service. While the W-2 Express database does not appear to have been hacked, criminals have managed to access it by using login credentials possibly acquired in other…
Category: Business Sector
Mail.ru denies mass password breach; researcher stands by findings
Eric Auchard of Reuters reports: Russia’s top Internet company, Mail.ru said on Friday a sliver of its users’ email accounts was vulnerable while denying that tens of millions of other users were at risk after researchers found its data circulating among cyber criminals. […] In a statement, the Moscow-based company said its own study of…
Google notifies employees of breach by vendor
Even Google has breaches that need to be reported. From a notification letter to Googlers that will be going out on May 9th: I am writing to follow up on an email we recently sent you about an issue that involves your personal information. The details of the issue are below. What Happened? We recently…
Kroger notifies employees of W-2 breach involving Equifax service
It’s not just Stanford University employees who are reporting problems involving their W-2 data being accessed improperly from W2-Express, a service of Equifax. Kroger is also notifying employees. The Inquisitr reports: Grocery giant Kroger sent an email to current and former employees today indicating that their Social Security numbers and dates of birth may be compromised. The…
Panama Papers source breaks silence over ‘scale of injustices’
Luke Harding reports: The whistleblower behind the Panama Papers broke their silence on Friday to explain in detail how the injustices of offshore tax havens drove them to the biggest data leak in history. The source, whose identity and gender remain a secret, denied being a spy. “For the record, I do not work for any government…
Two men charged in Belarus over Penneco Oil theft
AP reports that two men have been charged by authorities in Belarus with receiving $1.35 million stolen from the bank account of Penneco Oil Co. in 2012 in a phishing scheme involving Bugat malware. I expect we’ll see a DOJ release on this later today or tomorrow, and I’ll update this post when it’s available.