What the Hack? Podcast
What the Hack? Podcast
What the Hack? Podcast
What the Hack? Podcast

Data Security

The latest on data breaches and cybersecurity and data security by Adam K Levin.

Cyber attack
As if cybersecurity weren't already a red-letter issue, the United States and, most likely, its allies--in other words, the global economic community--are in Iran's cyber sites, a major player in cyber warfare and politically divisive disinformation campaigns. The "slap" as Ayatollah Ali Khamenei described it was a ballistic missile attack on a target that had three hours to get out of harm's way. It...
Joker malware
Online scammers are using the 2020 Oscars to spread malware. A recent study released by Kaspersky Labs uncovered several hacking and phishing campaigns promising their targets free and early access to Best Picture nominees for this year’s Academy Awards. The study found over twenty phishing websites hosting at least 925 malicious files using the movies as bait, requiring would-be victims to...
Ashley Madison Data Breach
A new extortion scam is targeting users of marital infidelity site Ashley Madison whose accounts were compromised in a 2015 data breach. Site members are receiving emails with personalized information from the breach including names, bank account information, mailing addresses, and answers to security questions with the threat of exposing the recipient if a ransom in bitcoin isn’t paid.  “Make no...
Avast data
Avast will phase out Jumpshot, a subsidiary that sells user browsing data gleaned from its antivirus and security products.  “I – together with our board of directors – have decided to terminate the Jumpshot data collection and wind down Jumpshot’s operations, with immediate effect,” Avast CEO Ondrej Vlcek announced in a blog, going on to say “that the data collection...
Avast antivirus
A subsidiary of Avast antivirus is selling sensitive user browsing data to many companies, including Revlon, Microsoft, Google, Yelp, Condé Nast, and TripAdvisor. According to a recent joint investigation by Vice’s Motherboard and PCMag, highly granular and sensitive user data from users of Avast antivirus is being repackaged and sold to companies via a subsidiary called Jumpshot which promises buyers...
Mitsubishi data breach
Mitsubishi Electric Corporation announced that it experienced a major data breach in June 2019 that has been traced back to a Chinese hacking group. “ur network has been subject to unauthorised access by third parties. We have confirmed that trade secrets may have leaked out,” the company announced in a brief press release January 20.  The announcement from the electronics giant...
WeLeakInfo
The FBI has seized the domain of WeLeakInfo.com, an online service that sold data from hacked and breached websites. The domain seizure and termination of WeLeakInfo’s services was the result of a joint operation with the UK National Crime Agency, the Netherlands National Police Corps, the German Bundeskriminalamt (the Federal Criminal Police Office of Germany), and the Police Service of...
Peekabo Data Leak
An unsecured database discovered online has leaked thousands of baby photos and videos.  Bithouse, Inc. left unprotected and accessible online an Elasticsearch database containing nearly 100GB of information associated with its app Peekabo Moments. The leaked data includes photos, videos, and birthdates of babies, as well as 800,000 email addresses, location data as well as detailed device information.  The leaked data...
Las Vegas cyberattack
The City of Las Vegas successfully averted what could have been a disastrous cyberattack earlier this month. City officials detected a cyberattack January 7, and in response immediately took several services offline, including its public-facing website.  “We do not believe any data was lost from our systems and no personal data was taken. We are unclear as to who was responsible...
Travelex
Currency exchange giant Travelex has effectively been taken offline by a ransomware attack.  The attack was first detected the night of December 31. Soon after, the company took its systems offline. A week later, Travelex is processing transactions with pen and paper at its 1,200 branches located in more than 70 countries.  “To date, the company can confirm that whilst there...