Verifone

Known as the largest maker of point-of-sale credit card terminals, this company discovered a data breach of its internal network back in January 2017.  The breach did not affect the payment services network, but did affect the corporate network.  The data breach was immediately handled but sources say there is evidence that a Russian hacking group is responsible.  The hackers may have been inside Varifone’s network since the mid 2016, but this has yet to be confirmed.

A data breach attack that started at 2 am PST on May 31, was shut down by 9 am, OneLogin reports.  OneLogin allows users to manage logins to multiple sites and apps through a cloud-based platform.  While this company provides services for about 2,000 companies in 44 countries, over 300 app vendors and more than 70 software-as-a-service providers, they are not too sure of the full extent of this data breach.  They do know, that customer data was compromised, including the ability to decrypt encrypted data and the investigation is ongoing.

River City Media

Thanks to Chris Vickery, a security researcher for MacKeeper, a leak called “Spammergate” was found and reported to the authorities right away.  A group of spammers that operate under the name of River City Media, unknowingly released their private data into cyberspace after they failed to properly configure their backups.  The “bad guys” leaded information including:  HipChat logs, domain registration records, accounting details, infrastructure planning, production notes, scripts, business affiliations….not to mention 1.4 billion email accounts, IP addresses, full names and some physical addresses. Law enforcement is involved, but it is unclear as to what will happen with River City Media.

Deep Root Analytics

Chris Vickery, a cyber risk analyst, who has discovered other well known data breaches…including ones in this article, has discovered that the sensitive information collected by Deep Root Analytics, has exposed important personal information of U.S. voters.  The Republican National Committee had hired Deep Root Analytics to gather political information last year, which has now affected roughly 198 million American citizens.  Their personal information was stored on an Amazon cloud server without a password protection for almost two weeks.  Compromised informatino included names, dates of birth, home addresses, phone numbers, and voter registration details.  Since that time, they have updated the access settings and have put protocols in place to prevent further issues.

Online Spambot

Just like the River City Media breach we mentioned just above, where the “bad guys” had information stolen….well it happened again to an online spambot.  The data breach this time however is larger.  This one involves 711 million records, including email addresses and some passwords, with the goal of sending spam emails.  They had forgotten to secure the server the data was kept on.  It is currently unknown as to how many other people have found this database and are using it for their own negative purposes.

Verizon

This was another discovery by Chris Vickery, of UpGuard.  We have mentioned him in this post a few times as being the founder of some horrible data breaches!  If you have contacted Verizon’s customer service in the past 6 months, you may have been one of the 14 million subscribers that were affected by this data breach.  Apparently records taken were held on a server controlled by Israel based Nice Systems.  Although Chris reported this data breach to Verizon in late-June, it took more than a week to secure this breached data.  The data that had been obtained were log files that had been generated once a customer contacted Verizon via phone.

The Canadian company Hudson Bay, who owns Saks Fifth Avenue had their own data breach in which tens of thousands of customers information was visible on a page through their website.  The page was where customers could join a wait list for products they may be interested in, but it was possible to see email addresses, phone numbers, products codes and IP addresses.  BuzzFeed was the company that broke the news and once Saks Fifth Avenue were informed, they removed the page immediately.  They are still unclear as to how this happened, who did it or which customers may have been effected.

Equifax

As one of the three largest credit agencies in the U.S., it was alarming to hear of this data breach.  It has been called one of the worst in history, with it affecting 143 million consumers and their extremely sensitive information.  From Mid May to July of this year, hackers had access to the company’s system, by exploiting a weak point in the website software.   Information leaked included: Full names, addresses, dates of birth, Social Security numbers, driver’s license numbers, credit card numbers and other personal information.

Arby’s

University of Oklahoma

Education records dating back to at least 2002, were unintentionally exposed through privacy setting at the University of Oklahoma.  The student-run newspaper, The Oklahoma Daily was the first to reveal this data breach.  The newspaper reported that there were more than 29,000 instances in which students’ private information was made public to users within the University’s email system.  Information such as Social Security numbers, financial aid information and grades were compromised.  Until further notice the University has shut down the file sharing program.

TalentPen and TigerSwan