01 Mar
Here’s your weekly #databreach news roundup:
BitChute, Russian MoD, DriveSure, Nvidia, Melijoe, Meyer Corporation, DNA Solutions Inc, and Charlotte Radiology.
BitChute
Personal data of close to 3 million BitChute users data are being sold on a popular hacker forum for a sum of $4,000. The data is sold by a hacker or group of hackers known as Pompompurin. #databreach https://t.co/Vn3y3yfHho
— DevaOnBreaches (@DevaOnBreaches) February 27, 2022
Personal data of close to 3 million BitChute users is being sold on a popular hacker forum for a sum of $4,000. The data is sold by a hacker or group of hackers known as Pompompurin.
The hacker released a sample that after being analyzed suggests that the information and the leak is genuine.
Pompompurin did not disclose how they obtained this data.
Pompompurin is also suspected to be behind the November 2021 FBI data breach.
The breach apparently affects a total of 2,988,494 users of the streaming platform BitChute.
The information includes usernames, full names, passwords, email addresses, websites, channel descriptions, registration and latest IP address, YouTube Channel ID and date joined.
Read more at : https://www.privacyaffairs.com/bitchute-data-breach/
Russian MoD database
On Friday evening, Anonymous claimed they managed to breach the database belonging to the Russian Ministry of Defence. The group's actions appear to be part of a growing trend that is seeing a growing number of cyber soldiers against Russia.#databreachhttps://t.co/YB3LRQkX93
— DevaOnBreaches (@DevaOnBreaches) February 27, 2022
Just hours after declaring cyberwar on Russia, hacker group Anonymous has claimed a significant victory.
They managed to breach the Russian Ministry of Defence’s database and posted it online for the world to see.
Among the information are emails, passwords and telephone numbers.
The group tweeted: ‘Hackers all around the world: target Russia in the name of #anonymous let them know we do not forgive, we do not forget. Anonymous owns fascists, always.’
DriveSure
Adversaries posted sensitive information of 3.2 million DriveSure users on the underground hacking forum – Raidforums. Dubbed “pompompurin,” the hacker group advertised the leaked files and user data in a post, as proof of compromise. #databreach https://t.co/uy4FquKDdC
— DevaOnBreaches (@DevaOnBreaches) February 27, 2022
Adversaries posted sensitive information of 3.2 million DriveSure users on the underground hacking forum – Raidforums. Dubbed “pompompurin,” the hacker group advertised the leaked files and user data in a post, as proof of compromise. DriveSure is a car dealership service provider focused on employee training programs, customer retention, and maintains client data in large quantity.
According to Risk Based Security, the exposed information included full names, full addresses, contact details, email address, hashed passwords, car model, VINs, records of how much they paid for service, warranty status, emails to customers, texts sent to customers, IP addresses, damage claims, survey responses, logs of edits to customers, and current status of the car.
Nvidia
U.S chipmaker Nvidia Corp said on Friday it was investigating a potential cyberattack, following a news report that said the attack may have had taken parts of its business offline for two days.https://t.co/wlLUna9T0I
— DevaOnBreaches (@DevaOnBreaches) February 26, 2022
U.S chipmaker Nvidia Corp (NVDA.O) said on Friday it was investigating a potential cyberattack, following a news report that said the attack may have had taken parts of its business offline for two days.
A malicious network intrusion caused outages in Nvidia’s email systems and developer tools over the last two days, the Telegraph reported earlier on Friday, but said it was unclear if any data was stolen or deleted.
“We are investigating an incident. Our business and commercial activities continue uninterrupted,” Nvidia said in a statement.
“We are still working to evaluate the nature and scope of the event and don’t have any additional information to share at this time.”
Melijoe
Melijoe was contacted about the exposed data but it did not respond to researchers and kept sensitive information of 200,000 customers including children open to public access without any security authentication. @WAK4S https://t.co/hWsH6lo5GN
— DevaOnBreaches (@DevaOnBreaches) February 24, 2022
The SafetyDetectives security team discovered a data breach affecting the French children’s fashion e-commerce website melijoe.com.
Melijoe is a high-end children’s fashion retailer based in France. An Amazon S3 bucket owned by the company was left accessible without authentication controls in place, exposing sensitive and personal data for potentially hundreds of thousands of customers.
Melijoe has a global reach and, consequently, this incident impacts customers located around the world.
Read more at : https://www.safetydetectives.com/news/melijoe-leak-report/
Meyer
Meyer Corporation, the largest cookware distributor in the U.S., and the second-largest globally has informed U.S. Attorney General offices of a #databreach affecting thousands of its employees. @billtoulas https://t.co/K80BUQY9uA
— DevaOnBreaches (@DevaOnBreaches) February 24, 2022
Meyer Corporation, the largest cookware distributor in the U.S., and the second-largest globally, has informed U.S. Attorney General offices of a data breach affecting thousands of its employees.
According to the notification letter shared with the U.S. Attorney General offices of Maine and California, Meyer fell victim to a cyberattack on October 25, 2021.
In response, the firm launched an investigation that was concluded on December 1, 2021, revealing that threat actors gained access to personal information belonging to employees of Meyer and its subsidiaries.
“On or around December 1, 2021, our investigation identified potential unauthorized access to Meyer employee information [including employees of Meyer’s subsidiaries Hestan Commercial Corporation, Hestan Smart Cooking, Hestan Vineyards, and Blue Mountain Enterprises, LLC],” explains the Meyer data breach notification.
DNA Solutions Inc
The Oklahoma City Police Department (OKCPD) has confirmed that personal and confidential data of sexual assault victims may have been leaked due to a #databreach suffered by one of the department’s former DNA contractors.https://t.co/kMJLqKT4i3
— DevaOnBreaches (@DevaOnBreaches) February 23, 2022
DNA testing service based in Oklahoma city has suffered a data breach in which sensitive data including information from rape kit investigations was accessed by an unknown unauthorized third party.
The Oklahoma City Police Department (OKCPD) has confirmed that personal and confidential data of sexual assault victims may have been leaked due to a data breach suffered by one of the department’s former DNA contractors.
The data breach led to the exposure of sensitive data from its rape kit investigations. For your information, the OKCPD collects DNA evidence from rape victims, which the department refers to as rape kits. These kits were sent to the DNA contractor for testing.
Charlotte Radiology
A prominent Charlotte medical services provider experienced a recent weeklong #databreach in which some patient information was stolen, “including a very limited number of patients’ Social Security numbers,” https://t.co/EZoArwDBVf
— DevaOnBreaches (@DevaOnBreaches) February 21, 2022
A prominent Charlotte medical services provider experienced a recent weeklong data breach in which some patient information was stolen, “including a very limited number of patients’ Social Security numbers,” company officials said Friday. In a statement, Charlotte Radiology officials said they found no evidence of “fraud or misuse” as a result of the theft and are notifying each patient whose information was taken during the Dec. 17-24 breach. The statement did not say how many people were affected.
Read more at: https://www.charlotteobserver.com/news/business/article258566848.html#storylink=cpy