SBN

The Biggest Data Breaches of 2018

Online security label manufacturer Seareach.plc.uk who specialise in asset labels and asset tracking, has collated some of the biggest data breaches of 2018.

February

  • 150 million MyFitnessPal app users had their details leaked in a data breach including usernames, email addresses and passwords.

March

  • Orbitz had 880,000 customers payment card details, stolen by a hacker, thanks to a security vulnerability in the travel site’s legacy booking system.
  • Fifa More than 3.4 terabytes of data and 70 million documents from FIFA, containing numerous allegations of corruption, was leaked to German magazine Der Spiegel by the Football Leaks organisation.
  • Cambridge Analytica harvested data (without user permission) from Facebook, more than 80 million people were affected by the data exposure.
April
  • Macy’s and Bloomingdale’s online customers may have had their personal information and credit card details exposed to a third party between April 26 and June 12.
May
  • Rail Europe, breach saw customer details including credit card numbers, expiration dates, and card verification codes, stolen over three months.
June
  • Over a million Adidas customers were affected by their data breach. The website was hacked with contact information, usernames, and hashed passwords stolen.
July
  • Timehop suffered a significant data breach on 7 July 2018 names, email addresses and phone numbers of 21 million users were accessed.
  • Ticketmaster suffered data breach which saw hackers operating a massive credit card skimming operation, via third-party code installed on e-commerce websites.
  • 23,000 Fortnum and Mason customers details were accessed in a data breach, including addresses and contact phone numbers.
August
  • British Airways data breach hit 380,000 transactions through their website and mobile app. Personal and financial information was stolen.
September
  • 90 million Facebook user accounts were exposed when hackers stole access tokens that they could then use to take over almost 50 million profiles.
November
  • Cathay Pacific admitted this month that they had suffered a significant data breach affecting up to 9.4 million passengers, in March.
  • Over 100 million Quora users had their emails, passwords and names taken. The breach occurred after unauthorised access by a malicious third party.
  • Details from over 500 million guest reservations, were stolen from Marriot’s Starwood database. Customers were notified in November but authorised accessed could date back to 2014.
December

  • Twitter was hit by a data breach on its platforms support form. It exposed user data to IP addresses from Saudi Arabia and China.

*** This is a Security Bloggers Network syndicated blog from IT Security Expert Blog authored by Dave Whitelegg. Read the original post at: http://feedproxy.google.com/~r/securityexpert/~3/nbTqIN5PvA0/the-biggest-data-breaches-of-2018.html