Joseph Cox reports the follow-up to a breach that I covered on PogoWasRight.org. The breach involved a Danish grad student dumping OkCupid users’ personal and sensitive info in a data set for “research” purposes, claiming it was “public” data. They had neither sought nor obtained consent to scrape the user database, and although they did not include…
Category: Business Sector
Pacific Gas and Electric database exposed; Company claims data “fake”
MacKeeper Security Researcher Chris Vickery has reported on yet another misconfigured database. This one belongs to PG& E in California. Whether the database contains real data or not is something the Department of Homeland Security should investigate, as the company tells Chris the data are “fake,” and Chris does not believe them, partly because entities…
ZA: MTN exposing subscribers’ personal details online
When accessing their bills online, MTN clients are being shown the bills of other subscribers. This is according to a subscriber who told MyBroadband he was able to see thousands of bills that weren’t his own. He logged in as normal on MTN’s e-billing site, received a one-time PIN, and accessed the client portal – which…
Hackers Stole 65 Million Passwords From Tumblr, New Analysis Reveals
Lorenzo Franceschai-Bicchierai reports: On May 12, Tumblr revealed that it had just found out about a 2013 data breach affecting “a set” of users’ email addresses and passwords, but the company refused to reveal how many users were affected. As it turns out, that number is 65 million, according to an independent analysis of the data. Troy…
Pakistan’ Real Estate Giant Zameen.com Hacked, Entire Database Leaked
Waqas writes: A Bangladeshi hacker going with the handle of Tiger Mate has hacked and defaced one of Pakistan’s largest real estate websites Zameen.com. That’s not all, the hacker has also leaked the site’s entire database online for public access. The hacker left a deface with a note stating ”hacked by Tiger Mate,” his Twitter…
AU: Recruitment agency accused of dumping thousands of documents containing jobseeker’s confidential data in a skip bin outside recently closed store
Sinead MacLaughlin reports: A recruitment agency has been discovered allegedly dumping thousands of jobseekers confidential details in a skip out the back of their offices. Pages of data from Sarina Russo clients were found by a contractor on Thursday night in an unlocked skip bin and in some nearby boxes behind their recently closed store in Narre…