https://securityblueprints.io/tags/personal-information-pii/ Recent content in Personal Information (PII) on Security Blueprints Hugo en user@example.com (Niels Provos) user@example.com (Niels Provos) Security Blueprints, LLC Sun, 06 Sep 2026 23:57:44 +0000 https://securityblueprints.io/data-breaches/allianz-life-insurance-company-of-north-america-data-breach-july-2025/ Wed, 16 Jul 2025 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/allianz-life-insurance-company-of-north-america-data-breach-july-2025/ Executive Summary Incident summary On July 16, 2025, a threat actor used social engineering to access a third-party, cloud-based customer relationship management (CRM) system used by Allianz Life Insurance Company of North America. Allianz Life’s official account states that it became aware of suspicious activity on July 17 at 12:17 p.m. CDT and terminated access to accounts associated with that activity at 2:17 p.m. CDT. (agportal-s3bucket.s3.amazonaws.com ) The company reported no indication that the threat actor accessed its company network or systems outside the CRM; this does not establish that the CRM was deliberately isolated. https://securityblueprints.io/data-breaches/qantas-airways-customer-data-breach-june-2025/ Sat, 28 Jun 2025 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/qantas-airways-customer-data-breach-june-2025/ Executive Summary On 30 June 2025, Qantas detected unusual activity on a third-party platform used by an overseas airline contact centre. The OAIC’s later account states that an agent had been socially engineered on 28 June and that the attacker used the agent’s legitimate CRM access to connect a third-party data-extraction application; Qantas froze and revoked the associated account on 30 June. (oaic.gov.au ) Qantas publicly disclosed the incident on 2 July and subsequently reported approximately 5. https://securityblueprints.io/data-breaches/conduent-business-services-data-breach-january-2025/ Mon, 13 Jan 2025 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/conduent-business-services-data-breach-january-2025/ Executive Summary Conduent Business Services, a business-process outsourcing provider for government agencies, health plans, and other enterprises, discovered on January 13, 2025 that an unauthorized third party had accessed a limited portion of its environment and that client-associated files had been exfiltrated. Subsequent investigation placed the beginning of unauthorized access on October 21, 2024. Conduent restored affected systems within days, and in some cases within hours, but the data review and notification process continued through 2025 and into 2026. https://securityblueprints.io/data-breaches/powerschool-student-information-system-data-breach-december-2024/ Thu, 19 Dec 2024 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/powerschool-student-information-system-data-breach-december-2024/ Executive Summary On December 28, 2024, PowerSchool said it became aware that an unauthorized party had exfiltrated personal information from PowerSchool Student Information System (SIS) environments through the PowerSource customer-support portal. Later reporting and forensic summaries place unauthorized activity earlier: CrowdStrike found evidence beginning December 19, while customer guidance reported data first stolen on December 22. PowerSchool notified affected customers on January 7, 2025 and publicly posted an incident disclosure on January 13. https://securityblueprints.io/data-breaches/national-public-data-breach-of-april-2024/ Mon, 01 Apr 2024 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/national-public-data-breach-of-april-2024/ Executive Summary In April 2024, National Public Data (NPD) became the subject of a significant data breach, compromising sensitive personal information of hundreds of millions of Americans. The breach was attributed to a security oversight, specifically the inadvertent publication of administrative credentials, leading to unauthorized access to NPD’s databases. This event highlights substantial gaps in cybersecurity practices and emphasizes the critical need for robust protection and risk management strategies. Incident Overview Chronological Sequence of Events December 2023 https://securityblueprints.io/data-breaches/army-national-guard-salt-typhoon-network-compromise-marchdecember-2024/ Fri, 01 Mar 2024 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/army-national-guard-salt-typhoon-network-compromise-marchdecember-2024/ Executive Summary Between March and December 2024, Salt Typhoon extensively compromised the Army National Guard network of an unidentified U.S. state. A June 11, 2025 Department of Homeland Security Office of Intelligence and Analysis memorandum, obtained through a Freedom of Information Act request and circulated in June, described the incident; public reporting began in July 2025 (bleepingcomputer.com ; nbcnews.com ). The intrusion persisted for approximately nine months, but the sources do not provide an exact discovery date or a separate resolution date (bleepingcomputer. https://securityblueprints.io/data-breaches/fujitsu-malware-attack-2024/ Fri, 01 Mar 2024 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/fujitsu-malware-attack-2024/ Executive Summary In March 2024, Fujitsu identified a malware infection on its corporate network, indicating a notable cybersecurity breach that potentially compromised customer information. Details of the breach were made public on March 15, 2024, highlighting unauthorized access achieved using advanced malware techniques (source , source , source ). Severity of Impact The incident is classified as severe, as it may involve sensitive customer data exposure. Although certain data access was confirmed, no misuse evidence has emerged so far (source ). https://securityblueprints.io/data-breaches/u-haul-data-breach/ Tue, 05 Dec 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/u-haul-data-breach/ Executive Summary The U-Haul data breach was publicly disclosed in February 2024, impacting approximately 67,000 customers across the United States and Canada. Initially discovered on December 5, 2023, unauthorized individuals accessed an internal system by exploiting stolen credentials, exposing sensitive personal information, including customer names and driver’s license numbers. Financial information remained unaffected (BleepingComputer ; SecurityWeek ). Severity of the Impact The exposure of personal identifiers poses risks such as identity theft, although the absence of financial data reduction slightly limits potential damage. https://securityblueprints.io/data-breaches/real-estate-wealth-network-data-breach/ Fri, 01 Dec 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/real-estate-wealth-network-data-breach/ Executive Summary The Real Estate Wealth Network (REWN) data breach in December 2023 involved the unauthorized exposure of over 1.5 billion records due to a cloud misconfiguration. This extensive breach was discovered by cybersecurity researcher Jeremiah Fowler on December 20, 2023. Public disclosure followed on December 26, 2023. The breach predominantly exposed personal and property information, posing significant risks such as identity theft and financial fraud. Key Details Breach Date: December 2023 Discovery Date: December 20, 2023 Severity: Exposure of personal data including Social Security numbers and property ownership details Root Cause: Cloud configuration error, an internal oversight Impact Affected Individuals: Millions, including both private citizens and high-profile figures Consequences: Risks of identity theft, financial fraud, harassment, and privacy invasion Response REWN secured the database after the breach was disclosed and plans to conduct a forensic audit to assess potential unauthorized access. https://securityblueprints.io/data-breaches/samsung-data-breach-november-2023/ Mon, 13 Nov 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/samsung-data-breach-november-2023/ Executive Summary On November 13, 2023, Samsung Electronics detected a data breach originating from a vulnerability in a third-party application. This breach affected customers who made purchases through the Samsung UK online store between July 1, 2019, and June 30, 2020, exposing personal information, including names, phone numbers, postal addresses, and email addresses. Samsung notified affected customers on November 16, 2023. Severity of Impact The breach’s significance lies in the exposure of sensitive personal information, even though financial data and passwords were not compromised. https://securityblueprints.io/data-breaches/indian-council-of-medical-research-data-breach-2023/ Mon, 09 Oct 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/indian-council-of-medical-research-data-breach-2023/ Executive Summary In 2023, the Indian Council of Medical Research (ICMR) experienced a significant data breach, resulting in the unauthorized access and theft of approximately 815 million records. The data compromised included sensitive personal information such as Aadhaar IDs, passport details, names, phone numbers, and addresses. The threat actor, identified as pwn0001, advertised the stolen data for sale on the dark web (source , source , source ). Incident Details Discovery Date: October 9, 2023, when the data sale was announced on dark web forums. https://securityblueprints.io/data-breaches/duolingo-data-breach-august-2023/ Tue, 01 Aug 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/duolingo-data-breach-august-2023/ Executive Summary In August 2023, DuoLingo experienced a significant data exposure incident caused by a data scraping attack targeting an exposed Application Programming Interface (API). The breach affected approximately 2.6 million users, with personal data such as names, email addresses, and other identifiable information being posted online (source 1 , source 4 ). Severity of Impact The exposure compromised personal information of approximately 2.6 million users, including critical identifiers like login names and email addresses, heightening risks for phishing and other cyber threats (source 3 , source 6 ). https://securityblueprints.io/data-breaches/moveit-data-breach-june-2023/ Thu, 01 Jun 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/moveit-data-breach-june-2023/ Executive Summary In June 2023, a significant data breach involving the MOVEit Transfer software began; within its first weeks it had affected over 200 organizations globally, a toll that continued climbing for more than a year afterward (Axios ). This breach was triggered by exploiting a zero-day vulnerability, CVE-2023-34362, within the MOVEit Transfer tool by Progress Software Corporation. The Clop ransomware group, using its Ransomware as a Service (RaaS) model, claimed responsibility for the data theft operations. https://securityblueprints.io/data-breaches/tesla-massive-data-breach/ Wed, 10 May 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/tesla-massive-data-breach/ Executive Summary The Tesla Massive Data Breach, discovered in May 2023, was a significant incident involving the unauthorized disclosure of sensitive data by two former employees to Handelsblatt, a German media outlet. On May 10, 2023, this breach came to light when Handelsblatt informed Tesla of their possession of approximately 100 gigabytes of confidential data, involving over 23,000 internal files (CentralEyes , Hackread ). Severity of Impact The breach impacted over 75,735 individuals, including both current and former employees. https://securityblueprints.io/data-breaches/yum-brands-ransomware-data-breach/ Thu, 06 Apr 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/yum-brands-ransomware-data-breach/ Executive Summary In January 2023, Yum! Brands, which owns KFC, Taco Bell, and Pizza Hut, fell victim to a ransomware attack, resulting in a data breach. This incident compromised corporate and employee data and was publicly disclosed by Yum! Brands in April 2023. Formal notifications to employees and potentially affected individuals about the data compromise began around the same time. Discovery and Disclosure The ransomware attack was first identified in January 2023. https://securityblueprints.io/data-breaches/discord-data-breach-march-2023/ Wed, 29 Mar 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/discord-data-breach-march-2023/ Executive Summary Incident Overview In March 2023, Discord faced a data breach due to security vulnerabilities at a third-party service provider. This led to the compromise of customer data. The breach was identified on March 29, 2023, publicly disclosed by May 12, 2023, and user notifications commenced on August 21, 2023 (BleepingComputer ). Severity of Impact The breach exposed sensitive personal information of approximately 180 users, including names and state or driver’s license numbers, highlighting privacy concerns despite its limited scope relative to Discord’s extensive user base (HackRead ; Economic Times ). https://securityblueprints.io/data-breaches/chatgpt-data-breach/ Mon, 20 Mar 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/chatgpt-data-breach/ Executive Summary Overview of the Incident In March 2023, OpenAI’s ChatGPT platform experienced a data breach caused by a bug in the open-source library, Redis-py, used by the service. This issue resulted in the exposure of sensitive user data, including names, emails, payment addresses, and partial credit card details (last four digits and expiration dates). The breach was identified on March 20, 2023, during a service outage, revealing private information in error source . https://securityblueprints.io/data-breaches/pharmerica-data-breach-march-2023/ Mon, 13 Mar 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/pharmerica-data-breach-march-2023/ Executive Summary In March 2023, PharMerica, a prominent U.S. pharmacy services provider, encountered a notable data breach affecting approximately 5,815,591 individuals. This incident compromised sensitive patient information, impacting both PharMerica and its parent company, BrightSpring Health Services (source ). Breach Timeline Intrusion Period: Unauthorized access was gained from March 12 to 13, 2023. Discovery Date: The breach was discovered on March 14, 2023. Public Disclosure: Notifications were issued to individuals on May 12, 2023. https://securityblueprints.io/data-breaches/chick-fil-a-data-breach-march-2023/ Wed, 01 Mar 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/chick-fil-a-data-breach-march-2023/ Executive Summary In March 2023, Chick-fil-A confirmed a data breach resulting from unauthorized login activity via a credential stuffing attack. This attack, utilizing previously leaked credentials, enabled access to customer accounts through Chick-fil-A’s mobile application (TechRadar ). Breach Details Unauthorized access occurred between December 18, 2022, to February 12, 2023, impacting approximately 71,473 accounts (less than 2% of users). The exposed information included names, email addresses, Chick-fil-A One membership details, and partial payment information (ClassAction. https://securityblueprints.io/data-breaches/consumer-financial-protection-bureau-data-breach/ Tue, 14 Feb 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/consumer-financial-protection-bureau-data-breach/ Executive Summary In 2023, the Consumer Financial Protection Bureau (CFPB) experienced a significant data breach due to internal security lapses. An employee transferred confidential records via email to a personal account, compromising the data of approximately 256,000 individuals. This incident underscores critical deficiencies in CFPB’s data protection protocols and has raised considerable concerns over internal security measures. Source Severity of Impact The breach affected records from seven financial institutions; however, some reports suggest this number could be higher. https://securityblueprints.io/data-breaches/ncb-management-services-data-breach-february-2023/ Wed, 01 Feb 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/ncb-management-services-data-breach-february-2023/ Executive Summary In February 2023, NCB Management Services experienced a significant data breach due to an unauthorized system compromise, exposing sensitive personal and financial information. The breach was detected on February 4, 2023, affecting clients associated with major financial institutions including Capital One, Bank of America, and TD Bank. Severity of the Impact The breach compromised data for over 1 million individuals, with specific numbers varying by institution: approximately 16,779 Capital One customers and nearly 495,000 Bank of America customers were directly impacted. https://securityblueprints.io/data-breaches/norton-life-lock-credential-stuffing-data-breach/ Fri, 13 Jan 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/norton-life-lock-credential-stuffing-data-breach/ Executive Summary In January 2023, Norton LifeLock reported a data breach due to a credential stuffing attack, allowing attackers to exploit previously compromised passwords to access over 6,000 customer accounts. The incident highlighted vulnerabilities within password management services, raising concerns about the security of stored credentials [source1 ]. Severity of Impact The breach exposed personal data, including names, phone numbers, and mailing addresses, and potentially compromised credentials stored in the Norton Password Manager. https://securityblueprints.io/data-breaches/mailchimp-january-2023-data-breach/ Wed, 11 Jan 2023 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/mailchimp-january-2023-data-breach/ Executive Summary Incident Overview In January 2023, MailChimp was subjected to a data breach due to a social engineering attack that affected its internal customer support tool. This breach, the second in a span of six months, indicates potential weaknesses in MailChimp’s defensive measures. Key Dates and Discovery Details The breach was discovered on January 11, 2023, during a routine security review and was publicly disclosed on January 19, 2023. This prompt notification ensured that stakeholders were adequately informed. https://securityblueprints.io/data-breaches/activision-hr-data-breach-2023/ Sun, 04 Dec 2022 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/activision-hr-data-breach-2023/ Executive Summary In December 2022, Activision, a leading video game developer, encountered a data breach caused by a sophisticated SMS phishing attack targeting a Human Resources (HR) employee. This breach resulted in unauthorized access to internal data, including employee names, phone numbers, email addresses, job titles, and workplace locations. Despite discrepancies regarding the exact public disclosure date, the breach became widely acknowledged in February 2023, highlighting substantial risks to employee data security [TechCrunch ] [Intrix ]. https://securityblueprints.io/data-breaches/t-mobile-january-2023-data-breach/ Fri, 25 Nov 2022 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/t-mobile-january-2023-data-breach/ Executive Summary In January 2023, T-Mobile disclosed a significant data breach that affected approximately 37 million current customers. The breach, initiated through unauthorized access to an API, began in late November 2022. T-Mobile detected the breach on January 5, 2023, and publicly disclosed it on January 19, 2023. Technical Details The breach was facilitated through a vulnerability in an API, which allowed attackers to access personal data, including names, billing addresses, email addresses, phone numbers, and dates of birth. https://securityblueprints.io/data-breaches/los-angeles-unified-school-district-lausd-ransomware-breach/ Thu, 01 Sep 2022 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/los-angeles-unified-school-district-lausd-ransomware-breach/ Executive Summary In September 2022, the Los Angeles Unified School District (LAUSD), the second-largest school district in the United States, experienced a significant ransomware attack orchestrated by the Vice Society gang. This incident, detected over the Labor Day holiday weekend, compromised more than 1,000 schools, affecting approximately 600,000 students and staff members. Sensitive data, including psychological evaluations and Social Security numbers, was exposed and disseminated on the dark web following LAUSD’s decision not to pay the ransom source . https://securityblueprints.io/data-breaches/pegasus-airlines-data-exposure/ Tue, 01 Mar 2022 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/pegasus-airlines-data-exposure/ Executive Summary Incident Overview In March 2022, Pegasus Airlines faced a data exposure due to a misconfiguration in an AWS S3 bucket by a system administrator. This incident led to the exposure of approximately 23 million files, containing Personally Identifiable Information (PII) and critical operational data (source ). Severity of Impact The breach involved 6.5 terabytes of sensitive data, including sensitive operational information, crew identification details, plaintext passwords, secret keys, insurance documents, and safety guidelines. https://securityblueprints.io/data-breaches/linkedin-data-scraping-incident/ Thu, 01 Apr 2021 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/linkedin-data-scraping-incident/ Executive Summary In April 2021, LinkedIn reported a significant data scraping incident involving approximately 700 million user records, totaling over 93% of its user base. The breach was disclosed in June 2021 after data was discovered being sold on dark web forums by the hacker known as “GOD User TomLiner,” who intended to sell the dataset for an estimated $5,000 to $6,600. Severity of the Impact The breach’s significance lies in the vast volume of exposed personal information, such as full names, email addresses, phone numbers, LinkedIn IDs, and sensitive data like gender, industry, and inferred salaries. https://securityblueprints.io/data-breaches/sina-weibo-data-breach-2020/ Thu, 19 Mar 2020 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/sina-weibo-data-breach-2020/ Executive Summary In March 2020, Sina Weibo, a leading Chinese microblogging platform, experienced a significant data breach impacting approximately 538 million users. The breach was publicly acknowledged when an attacker leveraged a logic flaw in the Sina Weibo API to access and sell personal user information on the dark web for about USD 250. This breach exposed sensitive details such as real names, usernames, gender, location, and phone numbers for 172 million users, though passwords were not compromised. https://securityblueprints.io/data-breaches/alibaba-taobao-data-breach/ Fri, 01 Nov 2019 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/alibaba-taobao-data-breach/ Executive Summary In November 2019, Alibaba’s Taobao platform experienced a breach involving unauthorized data scraping activities by a developer. This breach involved collecting 1.1 billion pieces of user data, including usernames and mobile numbers, over several months until discovered in July 2020. Officially acknowledged on June 16, 2021, the breach stands as significant due to its volume and impact. Severity of Impact The breach is one of the largest data leaks recorded, affecting approximately 710 million Taobao users. https://securityblueprints.io/data-breaches/capital-one-data-breach-2019/ Wed, 17 Jul 2019 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/capital-one-data-breach-2019/ Executive Summary In July 2019, Capital One experienced a significant data breach that compromised over 100 million customer records. This breach occurred due to a server-side request forgery (SSRF) exploiting a misconfigured Web Application Firewall (WAF) in their systems. The attack was orchestrated by Paige A. Thompson, a former software engineer at Amazon Web Services (AWS), leveraging insider knowledge and scanning for vulnerabilities using the misconfigured AWS resources. Key Dates Attack Period: March 22-23, 2019 Discovery Date: July 19, 2019 Public Disclosure: July 29, 2019 Severity of Impact This breach ranks among the largest in history, affecting approximately 100 million individuals in the United States and around 6 million in Canada, approximately 106 million individuals combined. https://securityblueprints.io/data-breaches/facebook-data-breach-2019/ Mon, 01 Apr 2019 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/facebook-data-breach-2019/ Executive Summary In April 2019, a significant data breach affected Facebook, exposing the personal information of over 530 million users across 106 countries. The breach involved the improper access and sharing of two datasets, revealing sensitive information such as phone numbers, account names, Facebook ID numbers, and email addresses. The exposure occurred due to the misuse of Facebook’s ‘contact importer’ feature and improperly secured third-party applications hosted on Amazon Web Services (AWS) servers. https://securityblueprints.io/data-breaches/marriott-international-data-breach-of-2018/ Fri, 30 Nov 2018 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/marriott-international-data-breach-of-2018/ Executive Summary In 2018, Marriott International suffered a data breach that compromised approximately 500 million guest records. This breach, dating back to 2014, primarily affected the Starwood guest reservation system, which was acquired by Marriott in 2016. Personal data exposed included names, addresses, phone numbers, email addresses, passport numbers, and credit card details (source , source ). Severity of Impact This breach is noted for its wide scale, causing significant exposure of personal data and inflicting reputational damage on Marriott. https://securityblueprints.io/data-breaches/2017-equifax-data-breach/ Sat, 29 Jul 2017 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/2017-equifax-data-breach/ Executive Summary The 2017 Equifax data breach marked a critical event in data security, caused by exploiting a known vulnerability, CVE-2017-5638, in the Apache Struts web application framework. Unauthorized access led to the exposure of sensitive information of approximately 145.5 million individuals. Severity of Impact This breach was one of the largest in history, significantly affecting Personally Identifiable Information (PII), including names, Social Security numbers, birth dates, and, in certain instances, driver’s license numbers and credit card data. https://securityblueprints.io/data-breaches/deep-root-analytics-data-breach/ Mon, 12 Jun 2017 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/deep-root-analytics-data-breach/ Executive Summary In 2017, a data breach at Deep Root Analytics exposed the sensitive information of approximately 198 million U.S. voters. This information, linked to the Republican National Committee (RNC), was leaked due to a misconfigured Amazon Web Services (AWS) S3 bucket, which lacked adequate security settings. The breach included personal information such as names, addresses, birth dates, phone numbers, political affiliations, and predictive modeling data on ethnicities and religious orientations. https://securityblueprints.io/data-breaches/2016-uber-data-breach/ Mon, 14 Nov 2016 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/2016-uber-data-breach/ Executive Summary On November 14, 2016, a data breach exposed records of approximately 57 million Uber users and 600,000 driver license numbers. The breach occurred when hackers exploited Uber’s systems by using stolen credentials to access its GitHub repository, subsequently gaining entry into an AWS S3 bucket containing sensitive user data such as names, email addresses, and phone numbers. For further details, refer to this source . Key Events November 14, 2016: Attackers demanded a ransom for stolen data deletion. https://securityblueprints.io/data-breaches/office-of-personnel-management-data-breach-2015/ Wed, 01 Apr 2015 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/office-of-personnel-management-data-breach-2015/ Executive Summary In 2015, the U.S. Office of Personnel Management (OPM) faced a significant data breach resulting in the exposure of sensitive information of approximately 21.5 million individuals. This incident, one of the largest in U.S. government history, involved an initial breach affecting 4.2 million personnel records and a subsequent larger breach involving detailed background investigation data. This report details the technical and organizational failures that led to the breach and assesses its impact. https://securityblueprints.io/data-breaches/anthem-data-breach-incident-analysis/ Wed, 04 Feb 2015 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/anthem-data-breach-incident-analysis/ Executive Summary The data breach at Anthem Inc. in 2015 stands as a critical incident in healthcare cybersecurity, involving unauthorized access to approximately 78.8 million records. The breach was disclosed publicly on February 4, 2015, illustrating significant weaknesses within the protection of Personal Identifiable Information (PII) in healthcare systems. This incident underscores a vital need for enhanced cybersecurity measures in the sector, emphasizing the risks associated with large-scale data compromises. https://securityblueprints.io/data-breaches/australian-immigration-department-g20-data-breach/ Fri, 07 Nov 2014 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/australian-immigration-department-g20-data-breach/ Executive Summary In 2015, the Australian Immigration Department was involved in a data breach releasing sensitive personal details of G20 world leaders due to an administrative error. The error occurred when an employee improperly used the autocomplete function in Microsoft Outlook, resulting in sensitive information being sent to an unintended recipient. This incident compromised data such as passport numbers, visa information, and birth dates of leaders including Barack Obama, Vladimir Putin, and Angela Merkel (ABC News ). https://securityblueprints.io/data-breaches/jpmorgan-chase-data-breach/ Sun, 01 Jun 2014 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/jpmorgan-chase-data-breach/ Executive Summary In June 2014, JPMorgan Chase became the target of a significant data breach, compromising data from over 76 million households and 7 million small businesses. The breach, discovered in July and publicly disclosed in September 2014, highlighted substantial deficiencies in the bank’s cybersecurity framework (source ). Severity of Impact Approximately 83 million accounts were affected, with exposed data including names, addresses, phone numbers, and email addresses. However, no financial data or Social Security numbers were compromised, reducing the risk of direct financial fraud, yet increasing chances for phishing and identity theft (source ). https://securityblueprints.io/data-breaches/2014-uber-data-breach/ Mon, 12 May 2014 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/2014-uber-data-breach/ Executive Summary In 2014, Uber experienced a significant data breach, where approximately 50,000 consumers’ sensitive information, particularly names and driver’s license numbers, was accessed without authorization. This incident arose from the mishandling of an unencrypted Amazon Web Services (AWS) access key that was inadvertently published on GitHub, thereby allowing attackers unauthorized system access. (source , source ) Key Dates: May 12, 2014: Attackers gained access to Uber’s AWS account by exploiting a publicly exposed AWS access key on GitHub. https://securityblueprints.io/data-breaches/ebay-data-breach-analysis/ Fri, 28 Feb 2014 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/ebay-data-breach-analysis/ Executive Summary In early 2014, eBay, a leading online marketplace, experienced a significant data breach, which was publicly disclosed in May 2014. Unauthorized access to approximately 145 million user records occurred due to compromised employee credentials. The breach period spanned late February to early March 2014 (CRN , NY Times ). Severity and Impact The breach is considered extensive, with unauthorized access to records including names, encrypted passwords, email addresses, physical addresses, phone numbers, and birth dates. https://securityblueprints.io/data-breaches/target-data-breach-2013/ Wed, 18 Dec 2013 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/target-data-breach-2013/ Executive Summary In December 2013, Target Corporation fell victim to a major data breach, impacting its operational security and customer trust by exposing approximately 110 million customer records, including financial and personal information. The breach became public after security researcher Brian Krebs disclosed it, revealing that unauthorized access was gained via compromised credentials from a third-party vendor, Fazio Mechanical Services (1) (2) . Severity of Impact The breach led to the disclosure of 40 million credit and debit card numbers and 70 million records containing personal information, marking it as one of the significant incidents in retail data breaches. https://securityblueprints.io/data-breaches/court-ventures-experian-data-breach/ Tue, 01 Oct 2013 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/court-ventures-experian-data-breach/ Executive Summary In October 2013, a significant data breach involving Court Ventures was publicly reported. This breach followed Experian’s acquisition of Court Ventures in March 2012 and involved unauthorized access to a database containing sensitive information of approximately 200 million individuals. The breach was perpetuated by Hieu Minh Ngo, a Vietnamese national, exploiting the database via a business relationship between Court Ventures and US Info Search. Compromised data included Social Security numbers and credit card details (source ). https://securityblueprints.io/data-breaches/yahoo-data-breach-august-2013/ Thu, 01 Aug 2013 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/yahoo-data-breach-august-2013/ Executive Summary Incident Overview In August 2013, Yahoo experienced a substantial data breach that compromised the account information of approximately 3 billion users. The exposed data included usernames, email addresses, telephone numbers, hashed passwords (MD5), as well as both encrypted and unencrypted security questions and answers. Payment card information and bank details remained secure (Yahoo data breaches ). The breach’s public disclosure occurred in December 2016, which emphasized the delayed recognition and broadcast of its full scope (Yahoo Security Notice December 14, 2016 ). https://securityblueprints.io/data-breaches/myspace-data-breach/ Sat, 01 Jun 2013 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/myspace-data-breach/ Executive Summary The MySpace data breach disclosed in June 2016 affected over 360 million user accounts, underscoring substantial deficiencies in the company’s data security measures. At the time, MySpace utilized weak hashing algorithms like SHA-1 without salting, a method known for its cryptographic weaknesses. Users’ widespread password reuse across different services amplified the breach’s repercussions. Consequently, MySpace updated its security practices post-breach, transitioning to double-salted hashes. Technical Details The breach highlighted significant vulnerabilities due to inadequate security measures. https://securityblueprints.io/data-breaches/greece-government-data-breach-2012/ Thu, 01 Nov 2012 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/greece-government-data-breach-2012/ Executive Summary In 2012, the Greece government experienced a significant data breach that led to the unauthorized exposure of 9,000,000 records, affecting approximately 83% of the nation’s population. This breach involved sensitive information, including addresses, ID card data, tax ID numbers, and license plate numbers. A sophisticated hacking attack exploited vulnerabilities in the government’s IT infrastructure, with a 35-year-old hacker identified as the primary suspect who allegedly sought to monetize the stolen data. https://securityblueprints.io/data-breaches/california-department-of-child-support-services-data-breach/ Mon, 12 Mar 2012 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/california-department-of-child-support-services-data-breach/ Executive Summary Breach Name: California Department of Child Support Services Breach Date: 2012 Discovery Date: March 12, 2012 Disclosure Date: March 29, 2012 Incident Overview In 2012, the California Department of Child Support Services (DCSS) suffered a data breach due to the loss of magnetic tape cartridges, which occurred during a disaster recovery exercise managed by IBM and Iron Mountain Inc. Between Boulder, Colorado, and Sacramento, California, four of fifteen tapes went missing, containing the sensitive information of approximately 800,000 individuals. https://securityblueprints.io/data-breaches/tjx-companies-inc.-data-breach/ Fri, 01 Jul 2005 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/data-breaches/tjx-companies-inc.-data-breach/ Executive Summary The TJX Companies Inc., a major retailer with brands such as TJ Maxx and Marshalls, suffered a significant data breach disclosed in January 2007, affecting approximately 94 million records. The breach revealed critical vulnerabilities in TJX’s data protection protocols and stands as one of the largest security incidents in retail history. Key Dates Initial Intrusion: July 2005 Discovery: December 2006 Public Disclosure: January 17, 2007 (source ) Severity of Impact The data breach involved 94 million records, including credit and debit card data and personal information such as driver’s license numbers.