Bitglass Security Spotlight: Capitol Hill Rioters Compromise Government Computers

Here are the top stories of recent weeks:

• Capitol Hill Rioters Compromise Congressional Computers
• COVID-19 lab test reports leaked by Indian government sites
• Vodafone’s Mobile data breach affects 2.5 million users 
• Hacker posts 10,000 American Express accounts online
• T-Mobile ends 2020 by announcing its second data breach of the year

Capitol Hill Rioters Compromise Congressional Computers

According to cybersecurity experts and a former congressional employee, images from the Capitol Hill riot showed a computer in Speaker Nancy Pelosi’s office was left unlocked. Senator Jeff Merkley also had his laptop was stolen and office completely destroyed.  Government owned hard drives seem to have been stolen by the trespassers, however the investigation is still ongoing.

Sponsorships Available

Sponsorships Available

Sponsorships Available

COVID-19 lab test reports leaked by Indian government sites

Multiple Indian government departments, including national health and welfare agencies, have had COVID-19 lab test results of thousands of patients leaked online. The majority of these are dated between November 2020 and January 2021. It is speculated that these results are being indexed by search engines that expose patient data. A representative of the concerned health department agency has clarified that the department is currently looking into the issue.

Vodafone’s Mobile data breach affects 2.5 million users  

Vodafone Group’s low-cost operator announced that hackers stole part of its customer database that obtains personal user information and SIM technical data. The stolen database, which now has been offered for sale on dark web forums since December 22, contains phone numbers, emails, fiscal Codes, SIM ICCID, and addresses. The mobile operator is now trying to minimize the impact of the breach on customers by alerting affected customers and offering them a new SIM card, free of charge.

Hacker posts 10,000 American Express accounts online

A leaked sample data set of 10,000 credit card records has been shared on a hacker forum for free. The attacker has claimed to sell more data of Mexican banking customers of American Express, Santander, and Banamex. The exposed data includes full account credit card numbers, and personal identifiable information (PII) including name, full address, phone numbers, date of birth, gender, etc. American Express neither denied nor admitted that they had suffered a data breach, but shared that all cardholders are not liable for fraudulent charges.

T-Mobile ends 2020 by announcing its second data breach of the year

The cell giant announced on their website that their cybersecurity team discovered that there was unauthorized access to the information of about 200,000 customers. The leaked data include call records, the caller’s phone number, and other data that might be on the customer’s bill. The company claims that the attackers did not access names, home or email addresses, financial data, or account passwords.

To learn about secured access service edge (SASE) and how they can protect your enterprise from data leakage, malware, and more, download the Top SASE Use Cases below.