customer data Archives - Cyber Security Minute

Retail Giant Woolworths Discloses Data Breach Impacting 2.2 Million MyDeal Customers

Issued by: Security Week

Woolworths acquired 80% of the MyDeal online marketplace in September, but says MyDeal systems are completely separate from its own systems, which have not been impacted by the incident. According to the company, a threat actor leveraged a user’s compromised credentials to access the MyDeal customer relationship management (CRM) system. This gave the attacker access…

Vulnerabilities

Samsung US Says Customer Data Compromised in July Data Breach

Issued by: Security Week

As part of the incident, which was identified roughly a month ago, an unauthorized third party gained access to some of Samsung’s US systems and exfiltrated information stored on them. Although it had determined that the personal information of some of its customers was compromised in the attack, Samsung took nearly a month to disclose…

Malware & Threats

Ransomware Gang Claims Customer Data Stolen in TAP Air Portugal Hack

Issued by: Security Week

The incident was initially disclosed on August 26, when TAP announced on Twitter that it managed to foil the cyberattack before the threat actor could access any customer data. “TAP was the target of a cyberattack, now blocked. Operational integrity is guaranteed. No facts have been found that allow us to conclude that there has…

Software Security

Using real customer data in testing environments creates unnecessary risk

Issued by: Help Net Security

A new study polling 1,000 software developers and startup employees found 29% of companies use unprotected production data (real customer data) in testing environments when testing and troubleshooting their company’s software — increasing the risk of exposure in the event of a data breach. Unprotected production data is defined as data that is not de-identified…

Network Security

200 million-record breach: Why collecting too much data raises risk

Issued by: CSO

If you don’t collect it, no one can steal it. Sometimes the best way to secure customer data is not to collect it in the first place. While it can be tempting to “collect it all” just in case, most enterprises need far less data on their users to market to them effectively. Reducing the…