ICT Security-Sécurité PC et Internet

Here’s what we know:

The hack was seemingly focused not on nabbing customer credit cards, but on employee data. The hackers likely had access to confidential data on all 800,000 USPS employees. That includes names, social security numbers, addresses, and pretty much anything else you’d put on a job application.
Customer credit card information seemingly wasn’t exposed. However, anyone who called USPS customer support from January 1st to August 16th of 2014 might have had information stolen, depending on what information they provided to the CS rep; things like names, addresses, telephone numbers, and email addresses.
The intrusion was first detected in mid-September, nearly 2 full months before being disclosed. The USPS says this delay was because “communicating the breach immediately would have put the remediation actions in
jeopardy…”

Unbekannte Angreifer haben E-Mail-Adressen, Telefonnummern und Geburtstagsdaten von Ebay-Kunden erbeutet. Wer ein Konto bei dem Dienst hat, soll umgehend sein Passwort ändern.

Dabei seien persönliche Kundendaten wie Namen, verschlüsselte Passwörter, Adressen, E-Mail-Adressen, Geburtstage und Telefonnummern erbeutet worden. Offenbar konnten die Angreifer Login-Daten von Mitarbeitern abgreifen und sich so Zugang zu den Kundendaten verschaffen. Es gebe allerdings keine Anzeichen, dass die Angreifer Zugriff auf Finanzinformationen wie Kreditkarten gehabt hätten.

TÉLÉPHONIE - Le piratage survient trois mois après une intrusion qui avait touché près de 800.000 personnes...

Dem österreichischen fraktionsfreien EU-Abgeordneten Martin Ehrenhauser wurde eine Liste zugspielt, die gehackte E-Mails von EU-Parlamentariern enthält.

Aufregung im EU-Parlament: Offenbar konnte sich ein Hacker Zugriff auf E-Mail-Konten und Telefonanschlüsse von Abgeordneten verschaffen. Politiker sind empört - die Sicherheitsprobleme seien lange bekannt.

In what must rate as one of the worst password security breaches ever, it has been discovered that the names, addresses, dates of birth and *unencrypted* passwords of over 40 million online daters have been stolen by hackers.

BOSTON/SAN FRANCISCO (Reuters) - Activist hackers linked to the collective known as Anonymous have secretly accessed U.S. government computers in multiple agencies and stolen sensitive information in a campaign that began almost a year ago, the FBI warned this week.

More than 11,000 patients and some employees of Coloradobased kidney care company DaVita are being alerted after an unencrypted laptop containing their personal data was stolen from a staffers vehicle.

How many victims? 

Approximately 11,500.

What type of personal information? 

Names, clinical diagnoses, insurance carrier names, claims payment data and dialysis treatment information.

About 375 patients had their Social Security numbers stored on the laptop.

The UK Information Commissioner's Office (ICO) has announced that the majority of data breaches in the first quarter of 2013 were due to carelessness in the way that the information was handled.

That's according to the UK Information Commissioner's Office (ICO) which says 175 out of 335 incidents it examined between April 1 and June 30 were due to personal data being “disclosed in error”.

Half of data breaches are due to people being careless with what they do with private information. How can we all help to reduce this problem?

===> Do we need better user education? <===

The call has gone out to Yahoo Japan's 200 million users to change their passwords, after the company warned that it suspected hackers had managed to access a file containing 22 million user IDs.

In addition to the 56 million credit cards exposed in the recent breach at Home Depot, investigators have now revealed that more than 53 million email addresses were stolen too.

Vous n’avez certainement pas du passer à côté de “l’information”. Des pirates informatiques Russes auraient réussi « le casse du siècle » en récoltant 1,2 milliard de comptes utilisateurs (logins et mots de passe associés) ; et plus de 500 millions d’adresses e-mail, provenant de 420.000 sites Internet d’entreprises. L’exploit est ailleurs !

Article original appartenant à zataz.com : ZATAZ Magazine » 1,2 milliard de mots de passe piratés ? C’est hier qu’il fallait avoir peur http://www.zataz.com/12-milliard-de-mots-de-passe-pirates-cest-hier-quil-fallait-avoir-peur/#ixzz39nrNnn62 
Follow us: @zataz on Twitter

The European Central Bank's website has been hacked and personal information has been stolen by a cybercriminal.

The ECB said most of the data was encrypted, but the contact information of registrants was not. According to the BBC, approximately 20,000 email addresses and a smaller number of phone numbers and physical addresses were lifted. Also stolen, in encrypted form, was "data on downloads from the ECB website."

Auction site confirms that hackers compromised an eBay database containing encrypted eBay passwords and other non-financial information.

Now that the price of Bitcoin has skyrocketed, more and more payment processors are hacked by cybercriminals. The latest victim is Denmark-based Bitco...

Horse racing website RacingPost.com has suffered a data breach as a result of which customer information has been compromised. According to a stateme...

GitHub users should consider changing their account password to a more complex one and setting up 2-factor authentication in order to protec...

Adobe originally estimated that the breach affected around 2.9 million users. As it turns out the number is actually 38 million, with the information taken including Adobe IDs, encrypted passwords,...

Game console maker's Web site with 4 million members in Japan was breached and personal data such as e-mail addresses exposed, but the company did not confirm if the information had been misused.

Hackers who breached Google database may have sought identities of Chinese spies in U.S.

“Knowing that you were subjects of an investigation allows them to take steps to destroy information, get people out of the country,” said one former official, who, like others interviewed for this article, spoke on the condition of anonymity to discuss a highly sensitive matter.

The official said the Chinese could also have sought to deceive U.S. intelligence officials by conveying false or misleading information.