Two analyses of data breaches in 2014 have been released within the past month. One is Gemalto’s annual Breach Level Index report (pdf), which is based on 1,541 breach reports resulting in 1,023,108,267 breached records. The other is Risk Based Security’s Data Breach Quick View (pdf), which is based on 3,014 incidents exposing 1,068,191,345 records. How can an analysis that…
Search Results for: education
Update: U. of Sydney hack was by Abdilo; Dozens of others attacked, too
Earlier today, I posted a breach involving the University of Sydney. As an update, DataBreaches.net can now report that the breach was the work of Abdilo, who has made a point of going after universities (as other posts on this site have demonstrated). Abdilo had dropped hints about an Orsee 0day previously. Today, however, he made it clear that this…
Tax return fraud widespread, possibly linked to stolen login credentials to online tax filing accounts
Herb Weisbaum reports: The recent flood of fraudulent tax returns — both state and federal — is the work of “a criminal gang, possibly working outside the country,” a leading cyber security expert told NBC News. Haywood Talcove, CEO for government solutions at LexisNexis, believes the gang is using stolen user names and passwords to gain…
D.C. Public Schools Website Exposed Confidential Info About Students With Disabilities
John Templon reports: Like many institutions, the Office of Data and Accountability for Washington D.C.’s public schools uses an “intranet” for sharing confidential documents. Unlike most intranets, theirs was unintentionally public. […] Hundreds of documents were hosted on the intranet, some providing an unfiltered look into the inner workings of the city’s public school system,…
Yoohoo, Texas A&M: wake up!
SLC Security reports that they are seeing indicators that this entity has been breached for over a month and does not realize it. It appears as though their infrastructure is being used to launch farther attacks on other educational institutions. They also appear on Emerging Threats for malicious activity since at lease the 11th of…
Tweets that give me a knot in my stomach, Monday edition
32 edu sites all vuln to the same sql injection vuln….. this is going to be fun — abdilo (@abdilo_) February 2, 2015 and .@jessysaurusrex@g33kspeed@sambowne to put your mind at ease here is the amount in all the dbs together from the 0day sqli: 9,468,248 — abdilo (@abdilo_) February 2, 2015 If/when he posts a…