1. Kiwi Bank Breach
Kiwibank is examining how it sent 4200 clients an email or online bankstatement with their own account number, name and address, but another person’s transaction history. The commissioner, John Edwards, said some people will be identifiable by the statements and information sent.
“We generally have an expectation that our financial records will be kept private and the banking relationship is one of high expectation of confidence so to get this so wrong is a pretty serious matter.
Anyone affected had a right to complain to the commission, he said.
“If any of the 4000 or so people whose statements have been disclosed to the wrong person suffers some adverse consequence because of that they can come to us and maybe we can help.”
2. Citrix
In the letter, Citrix divulges that the aggressors „had irregular access“ to Citrix’s inward framework, yet there is no confirmation that the cybercriminals remain in the association’s systems. There is furthermore „no sign“ any of Citrix’s merchandise or administrations were undermined by programmers.
Malicious cyber actors are had some aptitude in zeroing in on far away countries and taking arranged information from government workplaces and major money related players. Starting late, Iranian programmers have been accused for hacking VPN workers overall attempting to optional entries in tremendous corporate frameworks.
3. Dunzo
Google-backed Indian hyperlocal delivery service Dunzo said it suffered a data breach that left customer data including email IDs and phone numbers exposed. The company said that hackers gained unauthorized access to one of its databases:
“Recently, our team identified a security breach that involved unauthorized access to one of our databases. While we are still investigating, we believe it is our responsibility to inform you as soon as possible.”
It incorporated that money related nuances, for instance, charge card information and trade nuances were not haggled. Dunzo said a laborer of a pariah help that it used to store its information bases was infiltrated. The startup didn’t give any understanding with respect to this outcast help. For security endeavors, the association has now ensured about the whole of its information bases and changed gets to tokens and passwords to thwart any additional data enter.
4. Promo.com
In the most recent seven day stretch of late July early August an Israeli showcasing video firm, Promo.com uncovered massive client information penetrate seeming to have affected in excess of 23 million records, as per “have I been pwned”. The break, happening through an undisclosed outsider merchant of the promoting site, likewise influenced the subsidiary organization, Slidely. In outsider actuated breaks, it isn’t unexpected to see the expanding influences of penetration in a digital biological system. The breach was discovered when customer data was uninhibitedly available on a darknet gathering.
5. British Dental Association hack: Staff records leaked on the Dark Web
Shortly after a major cyber attack forced the Association to take some of its networks offline, extensive staff documents stolen by hackers from British Dental Association servers were leaked on the Dark Web.
The British Dental Association reported in mid-August that it had experienced a „sophisticated cyber attack“ that forced it to take some of its systems down and restore its systems on a new network to reduce the possibility of cyber incident-related malware.
„We have been working hard, alongside a number of third-party experts including forensic IT specialists, to determine the nature of the criminal activity. At present we don’t know what information may have been compromised but we are working to conclude the investigations as soon as possible. However, the evidence now available suggests that the data extracted relates to a very small snapshot of the total data stored on our servers,“
The British Dental Association added that it alerted members and other contacts about this incident, and also alerted the Office of the Information Commissioner and the police of the cyber attack against its systems.
A few days after the cyber attack took place, security firm Cyble said it came across a post in which a threat actor „claimed to be in possession of staff profiles of the British Dental Association and was sharing it for free“.
In order to verify the allegations of the threat actor, the security company retrieved the data and found that it contained a total of 172 data folders containing 5517 data files in addition. These files included numerous employee Personally Identifiable Information (PII) along with their training manuals, payroll records, evaluations and benefits files, performance reports, etc.
The association was unable to confirm the full scope of data obtained by hackers who carried out the cyber attack, according to Martin Woodrow, the chief executive of the British Dental Association.
