data Archives - Recon Bee

Weee grocery startup says customer data stolen in data breach

13Feb

By RBNo Comments

Resources, Risk, Security

Weee grocery startup says customer data stolen in data breach

Weee!, a new Asian and Hispanic food delivery service in the United States, claims that it was hacked and that a year's worth of client information was taken. The company said in a brief statement this week that customers who placed orders between July 12, 2021, and July 12, 2022, had their name, address, email address, phone number, order number, and order comments—such as where to drop off or leave products—stolen by cybercriminals. According to the statement, the business was impacted because it does not keep track of client payment information. Although it's unclear who was responsible for the breach, a user on a well-known forum for cybercriminals claims to be sharing details on the 11.3 million orders and 1.1 million customer accounts that Weee! acquired earlier in February...

T-Mobile says hacker accessed personal data of 37 million customers

20Jan

By RBNo Comments

Risk, Security

T-Mobile says hacker accessed personal data of 37 million customers

T-Mobile disclosed that a hacker gained access to a treasure trove of personal information belonging to 37 million users in a financial statement on Thursday. The telecommunications behemoth claimed that the data theft began on November 25 and that the "bad actor" stole "name, billing address, email, phone number, date of birth, T-Mobile account number, information such as the number of lines on the account and plan features." T-Mobile claimed in the SEC filing that it discovered the breach on January 5—more than a month after it occurred—and that a day later it had addressed the issue of the hacker taking advantage of it. According to T-Mobile, the hackers misused an application programming interface (API) rather than breaking into any business system read more T-Mobile says hac...

13Jan

By RBNo Comments

Risk, Security

Experts Detail Chromium Browser Security Flaw Putting Confidential Data at Risk

Information has been available on a now-patched vulnerability in Google Chrome and Chromium-based browsers that, if abused, might have allowed for the theft of files holding sensitive data. According to Imperva researcher Ron Masas, "The problem stemmed from the way the browser dealt with symlinks when processing files and directories." The theft of sensitive files was made possible because the browser, specifically, "did not correctly check if the symlink was leading to a location that was not intended to be accessible." As a case of inadequate data validation in the File System, Google described the medium-severity flaw (CVE-2022-3656) and published remedies for it in versions 107 and 108 that were released in October and November 2022 read the complete article Experts Detail Chro...

28Dec

By RBNo Comments

Reputation, Resources, Risk, Security

The Threat of Predictive Policing to Data Privacy and Personal Liberty

Predictive policing has a plotline that is reminiscent of Minority Report. It's a very real process, though, and it mainly depends on information gathered and shared by RELX and Thomson Reuters, two of the biggest data brokers in the United States. When we discuss big data, we frequently highlight organisations like Amazon, Equifax, Experian, Google, and Meta (formerly known as Facebook). The majority of these businesses use commercial data for marketing initiatives, corporate decisions, product insights, and financial considerations. Thomson Reuters and RELX do business quite differently. These data juggernauts serve as a middleman for libraries, scientists, big businesses, and law enforcement read the complete article The Threat of Predictive Policing to Data Privacy and Personal Lib...