Browsing tag

breach

Unprotected MongoDB leaks resumes of 202M Chinese job seekers

China is often suspected to sponsor hack attacks against organizations and agencies in the US or Europe. However, this time around China itself has become a victim of a security breach. Reportedly, an unprotected MongoDB has exposed personal and professional details of more than 202 million people. HackenProof’s security researcher Bob Diachenko discovered that resume files of […]

2018’s Top hacks and data breaches

The year 2018 is now a thing of the past yet it has established a memory that will haunt victims of biggest data breaches and hacking incidents for years. Today, we will be discussing some of the biggest data breaches and hacking incidents of 2018 which took users by storm. “2018 not only shocked the world by highlighting […]

Town of Salem data breach: Personal data of 7.6M gamers stolen

Over 7.6 million players have been impacted by a massive data breach suffered by the well-known browser-based role-playing game “Town of Salem.” BlankMediaGames, the owner of the game, has confirmed on its online forum that the breach did occur. A copy of the compromised database from the game was sent to DeHashed after which the […]

Researchers exploit Vein-based authentication system using a wax hand

Biometric authentication is currently a widely used option for maintaining the security of devices and systems. With the emergence of vein-based authentication, biometric verification has moved beyond facial recognition and fingerprints. Vein-based authentication involves scanning of the size, shape, and location of the users’ veins under their hand’s skin to verify the person. On paper […]

Hackers steal credit card data of 14,579 BevMo customers

A warning has been issued by the Concord, California-based alcoholic beverages retailer BevMo informing its customers about a data breach that its online store experienced between 2 August and 26 September. During the attack, credit card data of its customers was exposed. “BevMo takes the privacy of our customers’ personal information seriously and we deeply […]

Hackers steal personal details of 1,000 North Korean Defectors

The data breach against North Korean Defectors came after hackers targeted computer at Resettling agency. Private data of approx. 1,000 North Korean Defectors present in the South have been exposed in a data breach which makes them vulnerable to all sorts of threats from the North, claims the officials from the Unification Ministry. According to […]

Nokia exposes passwords & secret access keys to its internal systems

Another day, another data breach – This time, multinational tech giant Nokia has been caught exposing highly sensitive data of industrial nature that would have put its internal security at risk. The data was discovered by the director of the cyber risk research team at Hacken and Hackenproof Bob Diachenko during routine Shodan security audit on December […]

Amazon sent 1,700 audio recordings of Alexa user to a stranger

An Amazon customer in Germany under the European Union data protection law called GDPR (General Data Protection Regulation) requested the company to send all the data it stored on him but little did he know he was about to get his hands on a trove of 1,700 audio recordings of a stranger speaking in their home. The customer who […]

NASA suffers data breach – Staff’s personal data stolen

Another day, another data breach – This time, the National Aeronautics and Space Administration (NASA) has suffered a data breach in which personal data of the agency’s employees have been stolen. In a notification obtained by SpaceRef, the data breach was identified on October 23rd, 2018. The initial analysis revealed that unknown hackers may have […]

Facebook gave Amazon, Netflix, Spotify & others access to private user data

Facebook allowed Netflix, Spotify, Amazon, Microsoft, Yandex and Royal Bank of Canada unprecedented access to its users’ private data. The social media giant Facebook has been making headlines for all the wrong reasons lately. Now, according to reports, Facebook allowed video streaming service Netflix, music streaming service Spotify, and Royal Bank of Canada to read, write and […]

Hackers bypassed Gmail & Yahoo’s 2FA to target US officials

The attack was carried out by Iran-backed charming kitten hackers and victims include dozens of US government officials. Private emails of US sanctions officials and nuclear scientists have been breached by Iranian state-sponsored hackers. As per the data obtained by Certfa, a cybersecurity firm based in London, the hacking group Charming Kitten is responsible for the […]

Google Plus hit by another breach – Data of 52.5M users exposed

Google Plus has been hit by yet another bug forcing the company to shut down the social media site earlier than previously anticipated. In October this year, Google revealed that a bug was present in the API for the consumer version of Google Plus (Google+) that allowed third-party developers to access data of not just over 500,000 users but also […]

Quora hacked: Personal data of 100 million users stolen

Quora hacked – Change your password now. Another day, another data breach – This time Quora, a question-and-answer website, has suffered a massive data breach in which personal data of 100 million registered users has been stolen, the company said on Tuesday, December 4th. In a blog post, Quora’s Chief Executive Adam D’Angelo explained that the […]

Private data of more than 82 million US citizens left exposed

Misconfigured ElasticSearch Servers Exposed Private Data of over 82 Million Users. A warning has been issued by Bob Diachenko, a HackenProof security researcher informing users in the US that around 73 gigabytes of data is identified in a “regular security audit” of publicly accessible servers on the Shodan IoT search engine. According to the researcher, […]

Marriott hotel data breach: Sensitive data of 500 million guests stolen

Marriott has announced that it has suffered a massive data breach after attackers hacked its guest reservation system at Starwood hotels, a group of hotels the company took over in 2016 – These hotels include Sheraton, St. Regis, Westin and W Hotels. The breach was discovered last week after Marriott’s internal security tool alerted the company regarding an attempt to access the […]

Dell resets all customer passwords after security breach

The computer technology giant Dell has announced on Wednesday that it has suffered a potential security breach in which hackers attempted to steal customer data from its website Dell.com. The incident took place on November 9th when Dell detected and disrupted an attack aimed at the personal data of its customers including names, email addresses, and […]

Data breach in OSIsoft

The software company has suffered a data breach that would have compromised all the domain accounts OSIsoft has issued an alert on a security breach affecting employees, interns, consultants and contractors, as reported by information security and digital forensics specialists from the International Institute of Cyber Security. The company offers real-time data management solutions; its […]

Adult video game website High Tail Hall hacked; user data stolen

The latest report from breach monitoring website HaveIBeenPwned reveals that in August, popular adult video game website High Tail Hall (HTH) was hacked and private data of about half a million subscribers was stolen. The leaked data includes names, email IDs, and order histories among other details. After a few months, the stolen data was […]

HSBC suffers data breach after hackers access customers’ personal data

The Hongkong and Shanghai Banking Corporation (HSBC) has suffered a data breach in which unknown hackers have accessed personal and financial data of its customers. The data breach, according to the notification from HSBC, took between October 4, 2018, and October 14, 2018. Upon detecting the breach, authorities suspended online access to prevent further unauthorized entry […]

Hackers found selling private messages of 81k hacked Facebook accounts

Unsurprisingly, the price of each account is just 10 cents (8p). Last September, the social media giant Facebook revealed that it suffered a data breach in which hackers managed to steal access tokens of over 50 million accounts after exploiting a vulnerability in its View As feature. A couple of weeks later, after conducting an […]

Cathay Pacific hit by massive data breach; 10 million passengers affected

Hong Kong’s Cathay Pacific Airways Limited has suffered a massive data breach in which personal data of 9.4 million customers has been stolen by unknown hackers. Cathay Pacific states that the stolen data includes passenger name, date of birth, nationality, email, phone number, frequent flyer programme membership number, physical addresses, 245,000 Hong Kong ID card numbers, 860,000 passport numbers, customer service […]