PTI reports: Retail broking firm Upstox has alerted customers of a security breach that included contact data and KYC details of customers, but assured users that their funds and securities remain safe. The development comes close on the heels of reports of data breaches at organisations like MobiKwik, Facebook and LinkedIn. “On receipt of e-mails claiming unauthorised…
Category: Business Sector
Clubhouse data leak: 1.3 million scraped user records leaked online for free (UPDATED- REFUTED)
Update: There is more detailed report refuting the claimed leak that can be found at this link. At this point, DataBreaches.net considers the Clubhouse claim as refuted. CyberNews reports: So far, it seems like it’s been the worst week of the year for social media platforms in terms of data leaks, with Clubhouse seemingly joining…
Br: Leak exposes 1.7 TB of customer data from Brazilian fintech iugu
Felipe Demartini reports (translation): A serious security breach exposed the information of, it is believed, all customers of the iugu services company, which operates in Brazil through financial management and automation systems. Users’ personal, banking and transaction data was available on an unprotected server for at least an hour. The discovery is by security expert…
SG: Possible data breach involving 62,000 e-mails sent to Certis
Kenny Chee reports: About 62,000 e-mails from the public, businesses and customers of local security firm Certis, some containing NRIC and credit card numbers, may have been accessed by cyber criminals, the company said on Friday (April 9). This includes customers of Certis’ safe deposit box service. The e-mails all came from a customer service…
Cyber Breach Disclosures Still Take More Than a Month
Vincent Ryan reports: After being discovered, cybersecurity breaches are not consistently disclosed promptly, found an Audit Analytics study of public companies released on Friday. On average, publicly held companies took 53 days to disclose a breach incident after discovering it. The 53-day average disclosure timeframe is less than the 10-year average of 67 days, but…
No password required: Mobile carrier exposes data for millions of accounts
Dan Goodin reports: Q Link Wireless, a provider of low-cost mobile phone and data services to 2 million US-based customers, has been making sensitive account data available to anyone who knows a valid phone number on the carrier’s network, an analysis of the company’s account management app shows. Read more on The Register. Opinion: I…