India Ashok reports: Over one million users’ personal and financial data was inadvertently publicly exposed by US-based ride hailing firm Fasten. The leaked data includes names, emails, phone numbers, credit card data, links to photos, device IMEI numbers, GPS data and users’ taxi routes. The firm also exposed sensitive information of its own drivers, including…
Category: Business Sector
Equifax spends $87.5 million on data breach, more expenses on deck
Larry Dignan reports: Equifax spent $87.5 million in the third quarter on its recent data breach. The disclosure, which came amid an earnings report that showed revenue growth of 4 percent to $834.8 million and net income of $96.3 million. In other words, the data breach affecting 145 million Equifax customers dented the cash cow,…
Eavesdropper: The Mobile Vulnerability Exposing Millions of Conversations
Michael Bentley writes: Appthority has discovered a significant data exposure vulnerability we’ve named Eavesdropper that affects almost 700 apps in enterprise environments. The vulnerability is caused by including hard coded credentials in mobile applications that are using the Twilio Rest API or SDK. By hard coding their credentials, the developers have effectively given global access…
Jaywing suffers data breach affecting CollectPlus, Vodafone and other clients
Jennifer Faull reports: Digital and CRM agency Jaywing has suffered a security breach after its intranet was exposed following a routine update, leaking private information from client CollectPlus as well as internal documents for Vodafone. The intranet – usually a depository for internal material like training manuals – underwent an upgrade on 17 September. However,…
Cracking the Code
Jason Leopold reports: One late morning in May 2016, the leaders of the Democratic National Committee huddled around a packed conference table and stared at Robert Johnston. The former Marine Corps captain gave his briefing with unemotional military precision, but what he said was so unnerving that a high-level DNC official curled up in a…
Corporate watchdog Asic in privacy breach exposing users’ search history
Joshua Robertson reports: Australia’s corporate regulator has committed a serious privacy breach via a flaw in its website that exposes the search records of anyone tapping into its company database. The breach, which opens up free backdoor access to company search histories, including by investigative journalists and finance industry professionals, remained live on the Australian…