Here’s your Cyber Security Incidents Update for wk34 2024
(a once-a-week on Monday glimpse into just a fraction of the Cyber Security events of the previous week to inform regarding the depth and breadth of the incidents world-wide)
-Organisation
⦿ Oregon Zoo, Portland, USA
-Data compromised
⦿ The credit card information for customers that used the zoo's online ticketing system from Dec 2023 to Jun 2024. Unfortunately not the usual PARTIAL credit card number, the FULL credit card number along with cardholder Full Name, CVV number and card expiration date (so, everything one needs then)
-Initial access
⦿ An unauthorised actor redirected customers’ transactions from a third-party vendor who processed online ticket purchases to a phishing site
-Organisation
⦿ City of Flint, Michigan, USA
-Data compromised
⦿ The city stated it was experiencing internal network and internet outages caused by a ransomware attack and was only able to take cash or check payments for water, sewer, and tax charges because the attack knocked out online or credit card systems. Emergency services were not affected
-Organisation
⦿ Carespring Healthcare Management, Ohio, USA
-Data compromised
⦿ "Potentially compromised information" includes names, dates of birth, addresses, Social Security Numbers, medical and diagnosis information, and health insurance information
One piece of good news 👍:
Russian national Georgy Kavzharadze has been sentenced in the US for selling login credentials for over 300,000 accounts, including banks. The credentials were sold via an online marketplace, Slilpp, until its takedown by law enforcement in June 2021. Unless paroled early, Mr Kavzharadze will be a guest at Club Feb for 40 months
One final note:
Hackers “supported by the services of a hostile state” are believed to be behind the leak of over 50,000 confidential files from Poland’s anti-doping agency POLADA. (I wonder which state that might be? A near neighbour perhaps? A country whose name is six letters and starts with "R"?. Just a wild, random, guess)