Verizon’s $4.8 billion acquisition of Yahoo might still be going forward as planned, but that doesn’t mean the latter company is exempt from answering some tough questions about its massive data breaches: Lawmakers have given Yahoo until Feb. 23 to answer for the company’s actions related to the hacks. [More]
data breach
Toys ‘R’ Us Says Rewards Accounts Being Attacked Using Data Stolen Elsewhere
Here’s another example of why you should take experts’ advice when they say not to use the same password on multiple sites: Hackers have been apparently been attempting to breach accounts of Toys ‘R’ Us rewards program members using data they got from other hacks. [More]
Court To Review Target’s $10M Customer Data Breach Settlement
Nearly two years after Target agreed to set up a $10 million fund to reimburse customers affected by its massive 2013 holiday season data breach, a federal appeals court has ordered the judge in this lawsuit to review the settlement. [More]
Yahoo Confirms Another Major Data Breach; More Than 1 Billion Users Affected
Remember how, just three months ago, Yahoo had to admit that data for more than 500 million of its users had been compromised in 2014? It seems ridiculous to refer to something that hit 500 million people as the “smaller” of anything, but it turns out that was only the second overwhelmingly huge data breach Yahoo suffered in recent years. This week, it’s admitting a previous, even larger intrusion that hit more than a billion — yes, with a B — user accounts. [More]
Yahoo Knew About Giant Hack As Early As 2014
Back in September, Yahoo was forced to admit that it had suffered a security breach — a big one. A “whoops, there goes 500 million users’ data” one. Since then, both the public and potential acquirer Verizon have been asking: what did Yahoo know, and when did they know it? And the answer now seems to be: not as much as they should have, but way earlier than they said. [More]
Yahoo Confirms Massive Data Breach; At Least 500 Million Users Affected
As was rumored this morning, so it has come to pass. Yahoo has confirmed a massive data breach — and it’s far, far bigger than anyone guessed at first. [More]
Kimpton Confirms Credit Card Info Stolen From More Than 60 Hotels
In July, boutique hotel chain Kimpton revealed it was investigating indications that its credit card payment system had possibly been the latest to fall victim to a data breach. Now the company has confirmed the bad news, announcing that the payment terminals at dozens of Kimpton hotels, restaurants and bars were compromised for nearly six months. [More]
Eddie Bauer Removed Malware From Payment Systems In All Of Its Stores
In today’s spin of the Wheel of Cybercrime, the affected business is…Eddie Bauer, a clothing and housewares retailer with more than 350 stores across the country. The company confirmed today that its point of sale systems were infected with malware, which has now been removed, and customers’ payment card information may have been compromised. [More]
Cybercriminals Breach Computers For Massive Point-Of-Sale Payment System
The folks at computing giant Oracle have alerted users of its hugely popular point-of-sale payment system that cybercriminals managed to breach the company’s customer support computers and insert malicious code, potentially affecting hundreds of thousands of retail locations around the world. [More]
Kimpton Hotels Investigating Possible Credit Card Breach
You might not be familiar with the Kimpton chain of boutique hotels, but we can guarantee that a lot of business travelers (and the folks in their companies’ accounting departments) are now keeping an eye out for odd activity on their credit cards after news of a possible payment card data breach affecting multiple Kimpton locations. [More]
Noodles And Company Is This Week’s Luckless Winner Of Data Breach Roulette
Did you enjoy a pad thai, macaroni and cheese, or a pesto cavatappi for lunch sometime in the last few months? And then have your bank very suddenly replace your credit or debit card, due to an unnamed data breach, in early June? You may have Noodles and Co. to thank for both. [More]
50 Breaches In Four Years: Federal Reserve Cybersecurity Incidents By The Numbers
Cyber criminals seem intent on trying to crack open the Federal Reserve, at least according to a recent analysis of records that show the agency was the target of dozens of cyber breaches over a four-year period. [More]
Trump Hotel Collection Investigating Another Possible Customer Data Breach
Last fall, we learned that payment systems in Trump Hotel Collection properties had been compromised with malware, compromising customers’ payment card numbers for more than a year. Now reports from the banking industry indicate that there might be another breach in one or more Trump hotels –– the second in less than a year. [More]
Class Action Claims Wendy’s Negligently Exposed Customer Payment Info In January Breach
Back in January, Wendy’s confirmed that it was looking into a data breach, adding later that it had found malicious software designed to steal customer information on computers that operate its payment processing system. As one might imagine, that didn’t go over well with some customers: a new class action claims the fast food chain was negligent in exposing its customers’ credit and debit card information to attackers. [More]
Lawmaker Questions Airlines, Plane Manufacturers On Cybersecurity Measures
Eight months after a government report found that airplanes with WiFi connections may be vulnerable to cyber attacks and seven months after a hacker claimed to have commandeered a United Airlines flight via the plane’s in-flight entertainment system, one lawmaker wants to know just what airlines are doing to protect their computer systems — and passengers. [More]
Target Agrees To Pay Banks $39.4M For Expenses Resulting From 2013 Data Breach
Target continues to put the disastrous 2013 holiday-season data breach behind it, agreeing today to pay $39.4 million to banks claiming they lost money during the hack. [More]
Dow Jones Hit In Data Breach, Credit Card Info For 3,500 Customers Possibly Compromised
What’s a week without a major company being hit with a data breach? The latest victim of cybercrime is Dow Jones & Co., which revealed today that it was attacked by hackers seeking customer contact information. [More]