We focus on the latest news surrounding data breaches, leaks and hacks plus daily internet security articles.
A Deliveroo data breach “incident” is said to have been reported to the ICO who have confirmed that they’re making inquiries.
Back in 2016, the food delivery company faced scrutiny after customers complained of fraudulent transactions on their accounts. In some cases, it appeared the issues were down to people’s credentials being stolen in hacks completely separate to Deliveroo. Criminals had used stolen credentials to access accounts in cases where credentials were reused.
Deliveroo were subsequently criticised over what some customers felt was a failure to spot and stop fraudulent transactions. In this latest incident, it appears that history may be repeating itself.
News of an OkCupid data breach has been denied by the company, although a “bug” has reportedly been found by a security firm anyway.
Some users reportedly complained of their accounts being hacked and taken over. As a result of a lack of additional security, like two-factor authentication – a lack of security apparently common in the dating site industry – some users were successfully targeted by criminals.
However, OkCupid denies that a security breach has taken place. That being said, a “bug” was reportedly identified by security researchers and has apparently been fixed.
The York Council app that was hacked late last year has reportedly been shut down as a result of the data breach incident.
It’s understood that the public-facing aspect of the app is no longer available. Residents had been able to access it and use it as part of waste-reduction plans and for the improvement of their environmental performance.
After it was discovered that the app lacked the proper security to keep users’ data safe, the app has now been reportedly shut down and is no longer publicly-available.
iPhone app data breaches, leaks and hacks are on the rise as much as then use of apps continues to rise in everyday society.
Many people just assume that data on apps and phones is secure. Recent investigations and data breach incidents have told us a totally different story about the security of apps on phones.
People have a lot of reasons to worry. There have been a number of apps that have been comprised through poor security. Potentially millions of people are putting their private and sensitive data at risk every day.
There’s been another Facebook data leak, and yet again, millions of users are said to have been affected.
The fines that Facebook could now face in accordance with GDPR are mounting. This is one of many data leaks that have been revealed recently. The previous one, affecting some 29m users, was only discovered a couple of months ago.
In this latest Facebook data leak, a software bug has led to users’ photos being uploaded to websites without permission.
The recent York Council data breach led to the information for almost 6,000 people being exposed due to a coding vulnerability.
A computer expert happened upon the vulnerability in the ‘One Plant York’ app. He did the right thing and reported the breach to York Council, who then bizarrely reported him to the police. It’s understood that the expert had alerted the Council in efforts to make them aware, so the issue could be resolved.
The police matter aside, the result is that the data for almost 6,000 people has been left exposed. If one expert happened upon it, who’s to say someone else isn’t already aware of it, and hasn’t already been exploiting it?
This is a huge breach. Some 380,000 payment card details have been exposed in the British Airways data breach that was revealed yesterday.
COMPENSATION ACTION LAUNCHED: READ HERE FOR MORE INFO
Customers are being notified if they’re affected, and our Data Leak Lawyers are on the case to advise anyone who has been affected. Any data breach involving credit and debit cards being compromised – which is the case in the British Airways data breach – can put victims at an immediate risk of fraud.
Since British Airways started outsourcing IT operations, a number of issues and incidents have reportedly occurred, although it’s not yet known whether there’s a link between the outsourcing and the data theft revealed yesterday.
There are suggestions that mobile phone data protection is lagging behind as a result of security immaturity and attitudes toward mobile safety.
The smartphone industry in particular has grown exponentially in recent years, and with more than half of the internet’s traffic thought to be on mobile devices, and with mobile apps springing up all the time, some experts are concerned at the lack of maturity mobile phone data protection has when compared to desktop protection.
Does security and attitudes need to change?
The recent Booking.com WhatsApp and text fraud operation showed precisely what criminals can do with enough data at their disposal.
According to the media reports in the aftermath of the Booking.com WhatsApp and text issue, criminals were looking to reap hundreds of thousands of pounds in ill-gotten gains by duping people into thinking they were Booking.com by using personalised messages that were said to have looked genuine, and included personal data.
Some people reportedly fell for the scam and lost money as a result, and we understand that Booking.com has committed to compensating victims.
We have blogged about this before, but here is an update about a case that has been launched. As a reminder, we are acting for a large number of people claiming for the We-Vibe data breach scandal when it was discovered that the sex-toy software was secretly collecting information about the use of the product that they were not entitled to. Not only that, but hackers were reportedly able to break into the associated app and essentially “control” the device.
Now, there is a new legal case for a different remote sex-toy that is allegedly collecting user data secretly as well. According to papers already filed in a legal case, Lovense, a division of Hong Kong-based Hytto Ltd, is collecting and recording the intimate data of the users of their products.
read more
EasyJet admits data of nine million hacked
British Airways data breach: How to claim up to £6,000 compensation
Are you owed £5,000 for the Virgin Media data breach?
Virgin Media faces £4.5 BILLION in compensation payouts
BA customers given final deadline to claim compensation for data breach
Shoppers slam Morrisons after loyalty points stolen
Half a million customers can sue BA over huge data breach
Lawyers accuse BA of 'swerving responsibility' for data breach
The biggest data breaches of 2020
Fill out our quick call back form below and we'll contact you when you're ready to talk to us.