GoTo revealed that threat actors stole customers’ backups and encryption key for some of them

GoTo is notifying customers that its development environment was breached in November 2022, attackers stole customers’ backups and encryption key. GoTo, formerly LogMeIn Inc, is a flexible-work provider of software as a service (SaaS) and cloud-based remote work tools for collaboration and IT management, The company is warning customers that threat actors breached its development environment in November 2022 and stole encrypted […]

The post GoTo revealed that threat actors stole customers’ backups and encryption key for some of them appeared first on Security Affairs.

January 24, 2023
Read More >>

Researcher found US ‘No Fly List’ on an unsecured server

A researcher discovered a U.S. No Fly List exposed on the Internet, the sensitive data were hosted on a server run by US airline CommuteAir. Researchers Maia Arson Crimew discovered a U.S. No Fly List hosted on an unsecured server run by US carrier CommuteAir. The TSC’s No Fly List is a list of people who are […]

The post Researcher found US ‘No Fly List’ on an unsecured server appeared first on Security Affairs.

January 24, 2023
Read More >>

Companies impacted by Mailchimp data breach warn their customers

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers. The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach, the incident exposed the data of 133 customers. Threat actors targeted the company’s employees and contractors to gain access to an internal support and […]

The post Companies impacted by Mailchimp data breach warn their customers appeared first on Security Affairs.

January 23, 2023
Read More >>

Security Affairs newsletter Round 403 by Pierluigi Paganini

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. The Irish DPC fined WhatsApp €5.5M for violating GDPR Around 19,500 end-of-life Cisco routers are exposed […]

The post Security Affairs newsletter Round 403 by Pierluigi Paganini appeared first on Security Affairs.

January 22, 2023
Read More >>

T-Mobile suffered a new data breach, 37 million accounts have been compromised

Bad news for T-Mobile, the company disclosed a new data breach that resulted in the theft of data belonging to 37 customer accounts. T-Mobile suffered a new data breach, threat actor stole the personal information of 37 million current postpaid and prepaid customer accounts. The telecommunications company discovered the intrusion on January 5, 2023, the attackers obtained […]

The post T-Mobile suffered a new data breach, 37 million accounts have been compromised appeared first on Security Affairs.

January 21, 2023
Read More >>

PayPal notifies 34942 users of data breach over credential stuffing attack

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. PayPal announced that 34942 customers’ accounts have been compromised between December 6 and December 8. The company added that the unauthorized accessed were the result of credential stuffing attacks and that its systems were not […]

The post PayPal notifies 34942 users of data breach over credential stuffing attack appeared first on Security Affairs.

January 20, 2023
Read More >>