I’m not sure that posting a breach notification on a Facebook page is sufficient when you also have a web site where you could post the announcement. Assuming everyone is on Facebook is risky. Case in point: Common Market in Union, Maine, posted this on their Facebook page on October 30. ATTENTION COMMON MARKET CUSTOMERS…
Category: Business Sector
In: Two corporate executives held for stealing online store’s data
Business Standard reports: Navi Mumbai Police has arrested two corporate executives for stealing data of a leading online store and selling it to other companies. The duo, one of them a director of a company named Viral and the other CEO of another firm Expertthought, were apprehended last week, Inspector Pratiba Shendge attached to Cyber…
MoD-founded firm Niteworks loses login creds of UK defence folk
Alexander J. Martin reports: Exclusive Terrible infosec practices at Niteworks, the MoD-established business networking organisation, have led to unknown attackers gaining email addresses and passwords of British defence community members. An email seen by The Register, sent to Niteworks’ network members, confessed that “the database holding the login information for the members’ area in the niteworks.net website…
UK: Hacker jailed for eight months after attacking police, council, charity and porn websites
Liverpool Echo reports: A jobless computer hacker was jailed today for eight months after launching a mass cyber attack on The Met Police, Tory Party and British Airways websites – from his bedroom in his parents’ house. Ian Sullivan, 51, flooded the internet servers for police forces, councils, charities and even porn sites as part…
Hacker claims Comcast breach linked to unpatched Zimbra vulnerability noted by NullCrew
There’s a new claim in the Comcast breach first reported by Steve Ragan. Darren Pauli reports that a hacker claiming responsibility for the breach notes that it was NullCrew’s hack and taunting of Comcast in 2014 that set the stage for the theft of hundreds of thousands of users’ information. Well, that and Comcast’s failure to…
FastMail falls over as web service extortionists widen attacks and up their prices
Although the DDoS attack and extortion demand made on ProtonMail was the first to draw a lot of media attention – possibly because ProtonMail paid the demand – Hushmail, Runbox, Zoho, and VFEMail were also hit with DDoS attacks, seemingly by the hackers who call themselves the Armada Collective. Neomailbox was also hit, and now Iain Thompson reports that FastMail was hit, too:…