Tag: customer data

Eurofiber France warns of breach after hacker tries to sell customer data
News

Eurofiber France warns of breach after hacker tries to sell customer data

Late this week, Eurofiber France revealed a data breach in which hackers obtained access to its ticket administration system by taking advantage of a vulnerability and stealing data. The French division of the Dutch telecom company Eurofiber Group N.V., which runs a 76,000-kilometer fiber network in the Netherlands, Belgium, France, and Germany, is called Eurofiber France SAS. Instead than focusing on the consumer sector, the company specializes on offering digital infrastructure to enterprises. According to the release, the cybersecurity breach solely affects the group's French business, which includes its cloud division (ATE site) and its regional Eurafibre, FullSave, Netiwan, and Avelia sub-brands. The company claims in a press release that because the majority of indirect ...
Kickidler employee monitoring software abused in ransomware attacks
News

Kickidler employee monitoring software abused in ransomware attacks

Legitimate Kickidler employee monitoring software is being used by ransomware operations for reconnaissance, activity tracking, and credential harvesting following network breaches. Qilin and Hunters International ransomware affiliates installed Kickidler, an employee monitoring application that can record keystrokes, take screenshots, and record screen movies, during attacks seen by cybersecurity firms Varonis and Synacktiv. According to Kickidler's developer, the application offers visual monitoring and data loss protection tools and is utilized by more than 5,000 enterprises across 60 countries. When customers searched for RVTools, a free Windows tool for managing VMware vSphere deployments, the threat actors first removed the Google Ads that appeared. When the advertisement w...
Education giant Pearson hit by cyberattack exposing customer data
News

Education giant Pearson hit by cyberattack exposing customer data

According to BleepingComputer, the education behemoth Pearson experienced a hack that gave threat actors access to consumer and company data. One of the biggest suppliers of standardized tests, digital learning resources, and academic publication worldwide is Pearson, an education firm with headquarters in the United Kingdom. Through its print and online services, the corporation serves individuals, institutions, and schools in more than 70 countries. Pearson acknowledged a cyberattack and data theft in a response to BleepingComputer, but said the majority of the stolen material was legacy data. A Pearson spokesman told BleepingComputer, We recently found that an unauthorized actor gained access to a portion of our systems. After identifying the activity, we took action to halt i...
MoneyGram confirms hackers stole customer data in cyberattack
News

MoneyGram confirms hackers stole customer data in cyberattack

MoneyGram has revealed that during a cyberattack in September that resulted in a five-day outage, hackers obtained transaction and personal data from clients. When the company discovered the attack on September 27, it locked down its IT systems, making it impossible for MoneyGram users to access their accounts or send money to other users. MoneyGram now claims that the threat actors gained access to its network even earlier, between September 20 and 22, 2024, in a new data breach notification that was published today. Threat actors stole a wide range of private consumer data during this period read more about MoneyGram confirms hackers stole customer data in cyberattack. Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorou...
DropBox says hackers stole customer data and auth secrets from eSignature service
News

DropBox says hackers stole customer data and auth secrets from eSignature service

The cloud storage company DropBox claims that customer data, hashed passwords, MFA keys, and authentication tokens were obtained by hackers who broke into the production servers for its DropBox Sign eSignature platform. Customers can send documents online to DropBox Sign (previously HelloSign), an eSignature platform, to obtain legally binding signatures. According to the firm, on April 24, they discovered unapproved access to DropBox Sign's production systems and opened an inquiry. According to the findings of this research, a Dropbox Sign automatic system setup tool that is a component of the platform's backend services was compromised by the threat actors. The threat actor was able to access the customer database by using this configuration tool to run programs and automate...
MongoDB Suffers Security Breach Exposing Customer Data
News

MongoDB Suffers Security Breach Exposing Customer Data

On Saturday, MongoDB announced that it is now looking into a security incident that resulted in the disclosure of customer account metadata and contact details due to illegal access to "certain" business systems. The American database software provider claimed that on December 13, 2023, it saw unusual behavior for the first time and that night, it launched its incident response operations. While noting that "this unauthorized access has been going on for some period of time before discovery," it said that it is "aware of any exposure to the data that customers store in MongoDB Atlas." It omitted information regarding the precise duration read more MongoDB Suffers Security Breach Exposing Customer Data. Get up to date on the latest cybersecurity news and enhance your&nbs...