Mobile Version Subscribe Contact Us About Us Advertising Editorial SC UK SC Aus/NZ

RSS | Login | Register

Breaches & Exposures

Breaches aided by weak passwords, poor AV detection

Dan Kaplan February 09, 2012

Trustwave's annual review of its data breach response investigations concluded that franchises are now the prime target for hackers seeking customer data, such as credit card numbers.

Phishing email leads to Denver area health care breach

Dan Kaplan February 07, 2012

Hackers may have accessed the personal health data belonging to patients of Denver area-based Metro Community Provider Network, a nonprofit health care provider for low-income individuals and families.

Anonymous raids law firm over its defense of Marine

Dan Kaplan February 03, 2012

Anonymous stayed busy on Friday with the dump of 300 GB of emails and other communications, lifted from the law firm representing a U.S. Marine who recently escaped jail time for his role in a 2005 massacre.

Security breaches impacting VeriSign emerge in filing

Dan Kaplan February 02, 2012

The company responsible for ensuring that users reach the website they intend to reach admitted in an SEC filing that its network was breached numerous times in 2010.

Indiana University hospital hacked to steal data

Dan Kaplan February 01, 2012

Malware may have allowed attackers to make off with the personal information of thousands of people connected to Indiana University Health Goshen Hospital.

Univ. of Hawaii settles with 98,000 over five breaches

Dan Kaplan January 27, 2012

The largest class-action settlement in Hawaii's history is related to data breaches at University of Hawaii campuses.

Symantec admits stolen source code impacts pcAnywhere

Dan Kaplan January 25, 2012

Big Yellow has done an about-face in light of new analysis that confirms users of its pcAnywhere software may be at risk to attack due to the disclosure of source code.

Zappos breach affects 24M, opens door for more attacks

Greg Masters January 16, 2012

Hackers breached a server belonging to online retailer Zappos and made off with the personal information of 24 million customers, though no credit card numbers were involved.

Hackers harvested City College of S.F. data since 1999

Greg Masters January 13, 2012

Fingers are being pointed at criminal networks based in Russia and China as the culprits behind the more-than-decade-long siphoning of personal banking information from students, faculty and staff of the City College of San Francisco.

Stratfor returns as Anonymous readies 5M stolen emails

Dan Kaplan January 12, 2012

An Anonymous representative said some 5.2 million emails stolen from Stratfor, a Texas-based global intelligence firm, will go live within the coming days.

Symantec: Hackers did steal code, but it's old

Dan Kaplan January 06, 2012

Symantec confirmed late Thursday that hackers did in fact compromise a portion of its source code, but the stolen code is related to two enterprise security products that have been discontinued.

Stratfor subscribers receive phony emails

Dan Kaplan January 06, 2012

Some Stratfor subscribers received an email on Friday that claimed to come from the breached company's CEO, but actually was designed to publicize the hack and have some fun at the expense of the recipients.

Hackers say they have Symantec's Norton AV source code

Dan Kaplan January 05, 2012

A Symantec spokesman said the company isn't sure if the hackers claims are true, but said no source code -- only a document from 1999 -- has so far been publicly posted.

Loma Linda hospital worker fired for taking home private records

Dan Kaplan January 04, 2012

The private medical records belonging to some 1,300 patients and/or their guarantors at Loma Linda University Medical Center in California were compromised when a former hospital employee violated policy.

Anonymous shreds intelligence firm Stratfor in latest hack

Dan Kaplan December 25, 2011

In what may be its most devastating attack since HBGary, the Anonymous hacking collective "rooted" the database of security intelligence firm Stratfor to plunder a claimed 200 gigabytes worth of data.

U.S. Chamber of Commerce targeted in data heist

Dan Kaplan December 21, 2011

Hackers operating out of China are believed responsible for a major attack on the U.S. Chamber of Commerce in 2009 and 2010, but which was only revealed recently.

Hackers steal 200,000 card numbers from wholesaler

Angela Moscaritolo December 19, 2011

Hackers breached the systems of New York-based food services wholesaler Restaurant Depot, and stole hundreds of thousands of credit and debit card numbers.

GlobalSign says web server, not CA systems, hit by breach

Dan Kaplan December 16, 2011

GlobalSign, which briefly halted operations in September out of concern that it was the latest SSL certificate authority hacked, has determined that its CA infrastructure was never compromised.

Court tosses claims against Heartland Payment over breach

Angela Moscaritolo December 13, 2011

After more than two years of litigation, a U.S. District judge has dismissed nine of the 10 causes of action brought forth as part of a class-action lawsuit by nine banks.

Four charged with hacking Subway, other retailers

Angela Moscaritolo December 09, 2011

The defendants allegedly compromised the credit card data of 80,000 customers and made millions of dollars in unauthorized purchases.

Anonymous claims new Monsanto-related hack

Dan Kaplan December 08, 2011

The Anonymous hacktivist group claims it is responsible for putting a Washington, D.C. public relations firm, which formerly worked with the oft-criticized biotech giant Monsanto, out of business.

Hackers steal credit card numbers from cash registers at UC Riverside

Dan Kaplan November 29, 2011

Hackers compromised cash registers at campus dining locations at the University of California, Riverside to hijack credit and debit card numbers.

Police charge hackers with targeting AT&T customers

Dan Kaplan November 28, 2011

Filipino authorities said they have arrested members of a terrorist-funded racket that was responsible for hacking telephone networks of telecommunications firms.

Sutter Health faces lawsuit after lost computer

Dan Kaplan November 23, 2011

The unencrypted data of 4.2 million Sutter Health patients went missing last month, and now the health care providers faces legal action.

AT&T struck with "organized" hacking attempt

Angela Moscaritolo November 22, 2011

Attackers attempted to use automated technologies to link AT&T telephone numbers with online accounts.

SC Congress New York: Attacks increasing, budgets lagging

Greg Masters November 17, 2011

As the threat landscape worsens, efforts by security professionals to defend networks are hampered by tight budgets, participants on a panel agreed at Wednesday's SC Congress New York.

Sutter Health loses computer, data on 4.2 million

Dan Kaplan November 16, 2011

Northern California-based Sutter Health is the second major health care organization to fall victim to a major breach of unencrypted data.

Alarm raised months before fed breach discovered

James Hale November 15, 2011

The Canadian Security Intelligence Service (CSIS) sounded an alert at least two months before a massive internet intrusion was spotted at the Treasury Board of Canada.

VCU server hacked to compromise personal data of 175K

Angela Moscaritolo November 14, 2011

Hackers accessed a sensitive computer server containing the personal information of faculty and students at Virginia Commonwealth University (VCU) in Richmond.

Another Dutch certificate authority halts business

Dan Kaplan November 07, 2011

Netherlands-based KPN Corporate Market, a major telecommunications firm, has decided to exercise caution after uncovering a possible web server breach.