Here’s your weekly #databreach news roundup:
Pepsi Bottling Ventures
Pepsi Bottling Ventures LLC suffered a #databreach caused by a network intrusion that resulted in the installation of information-stealing malware and the extraction of data from its IT systems. @billtoulas @BleepinComputer https://t.co/01nFBZdopv
— DevaOnBreaches (@DevaOnBreaches) February 13, 2023
500 Cricket Stars Passport Breach
Some of cricket’s all-time greats and current superstars have had their passport information exposed, after a cybersecurity researcher said he found a batch of players' personal data online. #dataleak @iblametomhttps://t.co/Zn38tjXPix
— DevaOnBreaches (@DevaOnBreaches) February 16, 2023
Scandinavian airline SAS
Scandinavian airline SAS said it was hit by a cyber attack Tuesday evening.
— DevaOnBreaches (@DevaOnBreaches) February 17, 2023
News reports said the hack paralysed the carrier's website and leaked customer information from its app. #dataleak @MarieMannes https://t.co/kibvuMFpNH
CHS
Community Health Systems (CHS) says it was impacted by a recent wave of attacks targeting a zero-day vulnerability in Fortra’s GoAnywhere MFT secure file transfer platform. @BleepinComputer #databreach @serghei https://t.co/0cNLBj1hzA
— DevaOnBreaches (@DevaOnBreaches) February 17, 2023
Atlassian
Atlassian has confirmed that a #databreach at a third-party vendor caused a recent leak of company data and that their network and customer information is secure. @BleepinComputer @LawrenceAbrams https://t.co/y330a0YoPc
— DevaOnBreaches (@DevaOnBreaches) February 17, 2023
FBI
The U.S. Federal Bureau of Investigation has confirmed that it’s investigating malicious cyber activity on its own network.
— DevaOnBreaches (@DevaOnBreaches) February 18, 2023
This gets interesting and what will come out of the investigations 🤷@CarlyPage_ @TechCrunch https://t.co/x898QHADvn
The U.S. Federal Bureau of Investigation has confirmed that it’s investigating malicious cyber activity on its own network.
CNN reported on Friday that hackers compromised an FBI computer system at the agency’s New York field office, citing people briefed with the matter. The brief report added that the incident involved a computer system used in investigations of images of child sexual exploitation.
In a statement given to TechCrunch, FBI spokesperson Manali Basu confirmed that the agency had contained the “isolated incident,” which it continues to investigate.
Cutout
Cutout, a popular AI image editing tool, suffered a data leak that exposed user images, usernames, and email addresses. The incident underscores the risks of using cloud-based AI tools for sensitive data.https://t.co/8kM5vbh4uv
— DevaOnBreaches (@DevaOnBreaches) February 18, 2023
GoDaddy
Web hosting giant GoDaddy says it suffered a #databreach where unknown attackers have stolen source code and installed malware on its servers after breaching its cPanel shared hosting environment in a multi-year attack. @BleepinComputer @serghei https://t.co/r1nYtvgiG7
— DevaOnBreaches (@DevaOnBreaches) February 19, 2023
Web hosting giant GoDaddy says it suffered a breach where unknown attackers have stolen source code and installed malware on its servers after breaching its cPanel shared hosting environment in a multi-year attack.
While GoDaddy discovered the security breach following customer reports in early December 2022 that their sites were being used to redirect to random domains, the attackers had access to the company’s network for multiple years.
“Based on our investigation, we believe these incidents are part of a multi-year campaign by a sophisticated threat actor group that, among other things, installed malware on our systems and obtained pieces of code related to some services within GoDaddy,” the hosting firm said in an SEC filing.
