A federal grand jury sitting in St. Louis, Missouri, indicted a St. Louis resident on mail fraud and aggravated identity theft charges relating to a scheme to steal public school employees’ IDs and use them to file federal tax returns. According to the indictment returned on Feb. 1 and unsealed yesterday, Kevin K. Williams stole…
Category: U.S.
Device on computers used to steal ID of University of Iowa students, staff
KCRG reports: The University of Iowa is investigating devices left on campus computers that it believes compromised the personal information for 250 students and staff. Officials with the University of Iowa tell KCRG-TV9 News the breach may be linked to attempts at cheating. “The University of Iowa is investigating a handful of potential cases of…
Fast Food Chain Arby’s Acknowledges Breach at Hundreds of Locations
Brian Krebs reports: Sources at nearly a half-dozen banks and credit unions independently reached out over the past 48 hours to inquire if I’d heard anything about a data breach at Arby’s fast-food restaurants. Asked about the rumors, Arby’s told KrebsOnSecurity that it recently remediated a breach involving malicious software installed on payment card systems at hundreds of…
While investigating W-2 phishing scam, company discovers they were scammed last year, too (Updated)
The 2017 W-2 Phishing Victims List continues to grow, and I’m not posting most of them as individual reports, but one news story involving Monarch Beverage Company in Indianapolis deserves special mention because as CBS reports: While investigating this incident, the company discovered the same thing happened in April 2016. A scammer posing as the…
Good guy Logic Supply resolves breach in days, unlike some companies
John Leyden reports: US-based industrial computer supplier Logic Supply has reset user passwords following a suspected security breach. Unauthorised access through the firm’s website on 6 February may have exposed customer/company names, usernames and passwords, and order information. Payment card details were not exposed, Logic Supply reassured customers in a breach notification email (extract below) forwarded to El…
IL: Alton Steel employees report tax refund fraud following W-2 phishing incident (Updated)
Update: This incident actually was a phishing incident, and The Telegraph‘s story now reflects that, so I’m adding this one to the 2017 victims list. Originally, their story sounded like a straight-up hack. Their story now reads: The Alton steel company’s data system was victim to a “phishing expedition,” according to Alton Steel CEO Jim…