Infiltration of SRP Federal Credit Union's systems between Sep. 5 and Nov. 4 resulted in the compromise of individuals' names, birthdates, Social Security numbers, financial details, and driver's license numbers.
Hundreds of thousands of individuals across Rhode Island may have had their information stolen following a cyberattack against its RIBridges online systems for public assistance programs supported by Deloitte Touche Tohmatsu earlier this month.
Infiltration of Byte Federal's systems exposed individuals' full names, birthdates, physical addresses, email addresses, phone numbers, Social Security numbers, government-issued IDs, photos, and transaction activity, according to the firm's data breach notice, which emphasized that there has been no indication suggesting misuse of such data.
Aside from disrupting servers through a deluge of requests to "debug/pprof/heap" and other endpoints, attackers could also exploit Prometheus' "metrics" endpoint to obtain information from internal API endpoints, Docker registries, subdomains, and images that could be leveraged for reconnaissance efforts.
Conducted across six countries, the survey identifies risky behaviors such as personal device usage, poor password practices, and unauthorized access to sensitive data, which undermine workplace security.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
