Historical hacks come back to haunt, and fresh breaches bite our behinds
If you thought last year’s breach of over three billion records (and then some) was bad, this year has seen its fair share of headaches.
From hacks, attacks, ransoms, and even extortion attempts, we’re not done with the year yet and already we’ve collectively seen millions of records stolen and a wealth of classified hacking tools leaked (that led to its own set of issues).
There’s a lot to take in. Let’s take a look back at some of the biggest — and most dangerous — hacks and leaks of the year so far.
1. Freedom Hosting gets popped, pulling down one-fifth of the dark web
An anonymous hacker pulled down a huge chunk of the dark web in February after he hacked Freedom Hosting, the hosting company for thousands of dark web domains. Reports said that the hacker did not want to distribute the hacked data, as it contained data on dark web sites that traded child abuse imagery.
2. Millions of Verizon customer records exposed in security lapse
As many as 14 million records of Verizon subscribers who called the phone giant’s customer services in the past six months were found on an unprotected Amazon S3 storage server controlled by an employee of Nice Systems, a Ra’anana, Israel-based company, which was working on behalf of Verizon.
3. Bell Canada ignores hacker’s threat to release 1.9 million customer records
Bell Canada, Canada’s largest teleco, was hacked in May. The company declined to pay the hacker to stop the release of the 1.9 million customer records stolen. A portion of the data was subsequently leaked online.
4. Education platform Edmodo breach exposes 77 million accounts
The education platform was attacked in May by a hacker who put the database for sale on the dark web. According to Vice’s Motherboard, which verified the breach, the data includes usernames, email addresses, and hashed passwords.
5. Mac video encoder HandBrake was infected with malware
Thousands had a 50-50 chance of being infected with a remote access trojan in early May after HandBrake, the video encoder for Macs, was infected with malware. Those infected were at risk from thieves stealing login credentials from OS X Keychain.
6. A fraction of users hit by HipChat breach
HipChat, the workplace chat platform, was breached by hackers in April, following an attack on one of its cloud apps. HipChat wouldn’t say how many users were directly affected, only that there was evidence that messages and content in rooms may have been accessed for less than 0.05 percent of all users.
7. Payday lender Wonga breached, affecting 270,000 accounts
Wonga, the payday loans company, confirmed a breach in April, affecting more than one-quarter of a million lenders. The breach came just a couple of months after a hacker stole stole £2.5 million from 9,000 online customers at Tesco Bank.
8. WannaCry ransomware plagues thousands in massive global cyberattack
Thought to the be the biggest ransomware attack of its kind, the WannaCry ransomware was only successful thanks to the NSA losing control of its key hacking tools. That led the hackers to install backdoors that channeled the ransomware on millions of computers. Within days, Congress introduced a bill that would prevent the government from stockpiling cyberweapons.
9. TigerSwan mercenaries’ resumes uploaded to the internet
US-based private security firm TigerSwan made headlines after resumes of prospective employees were found on a public, unlisted Amazon Web Services storage server. The resumes revealed the personal details of prospective employees who had applied to work for the company as far back as 2008. The exposed documents list a range of personal information, including an applicant’s home address, phone numbers, email addresses, driver’s license and passport numbers, and social security numbers.
10. Cellebrite hacker steals 900GB of sensitive corporate data
Cellebrite, the world’s most notorious iPhone and device cracker, was hacked in January, leading to the theft of hundreds of gigabytes of sensitive corporate files. According to Vice’s Motherboard, which obtained some of the data, the stolen data includes a list of who bought the company’s phone cracking technology, databases, and a vast amount of technical data regarding Cellebrite’s products.
Summary provided by: Zack Whittaker, ZNET
More than ever, business leaders cannot afford to hire the wrong cybersecurity personnel. Fortify Experts Cybersecurity Executive Search interviews cybersecurity professionals every day and knows how to properly qualify and vet them through their exclusive CyberSecure evaluation process. By leveraging their networks and not job boards, Fortify Experts finds the cyber professionals you want to employ.
Tim Howard is the founder of Fortify Experts (top ranked Cybersecurity Search firm by Cybersecurity Ventures) which helps companies find exceptional cybersecurity talent through executive search, permanent placement and project consultants. Howard has been leading technology staffing teams for over 15 years and is the founder of three other technology and staffing firms. He has degrees from Texas A&M University in Industrial Distribution and Marketing.