Yahoo! reports: The personal data of about 80,000 MyRepublic mobile subscribers was accessed without authorisation last month. The telco said in a media release on Friday (10 September) that the breach took place on 29 August on a third-party data storage platform used to store the personal data of its mobile customers. Investigations showed that…
Category: Business Sector
McDonald’s email blunder broadcasts database creds to comedy competition winners
Gareth Corfield reports: McDonald’s customers who won a prize draw competition got more than they hoped for after the burger chain emailed them login credentials for development and production databases used to power the campaign. The first person to report the blunder to McDonald’s, startup founder Connor Greig, told The Register: “It’s a bit weird,” adding…
Hackers leak passwords for 500,000 Fortinet VPN accounts
Lawrence Abrams reports: A threat actor has leaked a list of almost 500,000 Fortinet VPN login names and passwords that were allegedly scraped from exploitable devices last summer. While the threat actor states that the exploited Fortinet vulnerability has since been patched, they claim that many VPN credentials are still valid. Read more on BleepingComputer.
Data Breach Lawsuit Against Sonic Will Proceed
Sarah Coble reports: Litigation filed against American fast-food chain Sonic over a 2017 data breach has been allowed to proceed. Financial institutions brought a lawsuit against Sonic Corp after it emerged that financial data belonging to customers of the restaurant had been stolen in a cyber-attack. The attacker(s) installed malware on a point-of-sale system used at hundreds of Sonic franchises. Read…
Data breach at US restaurant and gambling chain Dotty’s may have leaked sensitive customer information
Jessica Haworth reports: A cyber-attack on US fast food and gambling chain Dotty’s has exposed the personal data of customers, the company has warned. Dotty’s, a fast food chain which offers gambling services across 175 locations, is owned and operated by Nevada Restaurant Services (NRS). Read more on The Daily Swig. DataBreaches.net had previously reported on Nevada…
Elon Musk’s top-secret ‘full self-driving’ AI car software leaked to hackers
Claran Daly reports: The software which enables certain Tesla cars to autonomously drive themselves has been leaked, enabling hackers outside of the USA to hit the streets hands-free. The software usually costs up to $10,000. Read more on The Daily Star. Does anyone else find this leak frightening?