Oi veh. Kevin Roose reports: Along with the files smuggled out of Sony Pictures this week, we also discovered a cache of documents apparently relating to internal personnel matters at Deloitte. This appears to be an accident of circumstance. The files appear to come from a single target’s computer. While this person appears to be…
Category: Hack
Banks: Credit Card Breach at Bebe Stores (updated)
Brian Krebs reports that it appears that customer payment card data from BeBe‘s has been hacked. Update: BeBe has now confirmed the breach. As Reuters reports: The exposed data may have included cardholder names, account numbers, expiration dates and verification codes, the apparel retailer said on Friday. The company said the affected transactions were made…
Alleged Heartbleed hacker faces more charges in Canada Revenue Agency case
The Toronto Star reports that more charges have been laid against Stephen Arthuro Solis-Reyes who had been charged with using Heartbleed to extract data from the Canada Revenue Agency (CRA). Until now, he had (only) been charged with with one count of unauthorized use of a computer and one count of mischief in relation to data. An expanded RCMP investigation produced…
Yet another Experian data breach
On November 20, Experian notified the New Hampshire Attorney General’s Office of yet another breach involving the compromise of a client’s login credentials to their credit report database. The credentials were misused to obtain identity information on an unspecified number of consumers’ Social Security numbers, dates of birth, and/or account numbers. In this case, the…
CORRECTED: Valve not hacked
CORRECTION and UPDATE: SLC Security, who originally claimed that Valve had been owned, has updated their post with the following statement: FRAUD ALERT: Domain’s (sic) posing as Valve Corp (Russian) UPDATE: We were contacted by the hosting provider Akamai and advised that the domain in the capture below is actually an imposter out of Russia….
Hackers Infiltrate Payment Systems of Major Parking Garage Operator
Mike Lennon reports additional details on a breach noted previously on this blog: SP+, a company that provides parking, maintenance and security services to property owners, said on Friday that an unauthorized attacker gained access to its payment processing systems and was able to access customer names and payment card information. The company said that…