Exposed by the database were customers' full names, birthdates, ages, genders, marital status, account IDs, occupations, phone numbers, physical addresses, premium amounts and annuities, and policy types, as well as employees' names, email addresses, MLGA/RGA names and emails, and years in service, according to SafetyDetectives researchers.
Such data compromise may have been achieved through an intrusion against a third-party supplier, which did not have any access to billing or financial details, according to TalkTalk Head of External Communications Liz Holloway, who did not name the supplier and noted that the incident could not be confirmed until the external vendor's investigation is finalized.
Attackers who infiltrated Change Healthcare using unsecured account credentials were not only able to exfiltrate individuals' names, birthdates, home and email addresses, Social Security numbers, and other government IDs but also their health insurance details, diagnoses, test and imaging results, treatment plans, and banking details.
This interview is a bit different from our norm. We talk to the founder and CEO of OpenVPN about what it is like to operate a business based on open source, particularly through trying times like the recent pandemic. How do you compete when your competitors are free to build products using your software and IP? It seems like an oxymoron, but an ope...
INC Ransom alleged that it was not only able to exfiltrate Stark's supply chain details, building plans, instructor passports, and cybersecurity tool configurations but also reconnaissance satellite and production program information, as well as documents from its parent firm IAI North America.
"North Korean IT workers could attempt to harvest sensitive company credentials and session cookies to initiate work sessions from non-company devices and for further compromise opportunities," said the FBI in an advisory.
