Flipboard confirms data breach, resets passwords
News aggregator Flipboard warned that an unauthorized person gained access to subset of user account data and cryptographically protected passwords.
Data Breach
First American Financial Corp. leaks hundreds of millions of customer records
First American Financial Corp., one of the world’s largest real estate title insurance companies, exposed hundreds of millions of title insurance customer financial records.
Magecart skimming attack targets online campus stores
Security researchers from Trend Micro have uncovered a Magecart skimming attack that targeted 201 online campus stores in the United States and Canada.
Washington State passes new Data Breach law HB 1071
Washington State legislators passed a new Data Breach bill, HB 1071, that strengthens data breach notification laws. The new law now includes the expansion of the definition of personal information and also reduces the breach notification deadline.
Wipro data breach
Cybercrime investigative journalist Brian Krebs reports the Indian IT outsourcing and consulting company Wipro has been hacked. Multiple sources had informed Krebs that attackers breached Wipro’s internal IT systems and then used those systems to then launch attacks against Wipro’s customers.
FEMA leaks personal data records on 2.3M disaster victims
A government report revealed that the Federal Emergency Management Agency (FEMA) did not safeguard disaster survivor’s personal data on up to 2.3 million people. FEMA shared the sensitive personally identifiable information (SPII) with a third party.
Citrix warns of data breach
Citrix warned it was a victim of a cyberattack whereby hackers gained unauthorized access to large amounts of internal data. The company is actively cooperating with the FBI and have launched a forensics investigation into the breach.
Password Checkup helps protect accounts from data breaches
Google has released a new Chrome extension “Password Checkup” that warns users if their account username and passwords are known to be unsafe and leaked as part of past data breaches.
WordPress plugin maker WPML website hacked
Popular WordPress plugin maker WPML said their website was hacked over the weekend and led to the loss of customer data. The culprit was an ex-employee who exploited a backdoor planted on an unsecured web server.
Online casino data leak exposes 108 million bets, personal data
A massive data leak from an ElasticSearch server has exposed information on over 108 million bets, as well as personal information, deposits and withdrawals. The server was not configured with any password or authentication required to protect the data.