Clearview AI, controversial facial-recognition company focused on cybersecurity, gets hacked

Clearview AI, the creepy facial-recognition company that scrapes your photos from social media, has been hacked.

According to a report by The Daily Beast, hackers accessed data including “its entire list of customers, the number of searches those customers have made and how many accounts each customer had set up.”

Yes, a company primarily focused on cybersecurity was hit with a data breach. Not a great look, guys!

In a notice sent to clients, which was reviewed by The Daily Beast, the company claimed there was “no compromise of Clearview’s systems or network,” the breach was fixed, and that none of the clients’ search histories were accessed.  Read more…

More about Cybersecurity, Hacking, Facial Recognition, Clearview Ai, and Tech

Source: https://mashable.com/article/clearview-ai-client-list-hacked/
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Marcus Gilmer

! #Headlines, #DataBreach, #Mashable, #Privacy, #Surveillance, #TechNews, #TechnologyNews, #Newsfeed, #syndicated, news

Data breach at U.S. agency in charge of securing Trump’s communication

The Defense Information Systems Agency, which calls itself a combat support agency of the Defense Department on its website, employs 8,000 military and civilian employees.

The DIA, which is responsible for secure White House communications, said Social Security numbers and other personal data its network held, was likely compromised, reports Reuters, citing a letter sent to compromised individuals.

U.S. agency responsible for Trump’s secure communication suffered data breach: letter https://t.co/NDqi9zJgYE

— Chris Bing (@Bing_Chris) February 20, 2020

From reporting by Chris Bing at Reuters:

The letter, dated Feb. 11, 2020, says that between May and July 2019, personal data may have been compromised “in a data breach” on a system hosted by the Defense Information Systems Agency.

The White House did not immediately answer a request for comment and the letter provided few further details. For example, it did not indicate what specific part of DISA’s network had been breached or identify which other individuals may have had their data compromised.

The agency says it “provides direct telecommunications and IT support to the president, vice president, their staff, and the U.S. Secret Service.”

Read more:
U.S. agency responsible for Trump’s secure communication suffered data breach: letter

[reuters.com]

Source: https://boingboing.net/2020/02/20/data-breach-at-u-s-agency-in.html
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Xeni Jardin

! #Headlines, #Communication, #Cybersecurity, #DataBreach, #Government, #random, #TechnologyNews, #Trump, #Newsfeed, #syndicated, news

Huge cyberattack against country of Georgia knocks out 15,000 websites

The country of Georgia is reeling from a particularly vicious cyberattack. Officials are investigating after intruders striking on October 28th defaced over 15,000 websites hosted on local provider Pro-Service, including those for the President of G…

Source: https://www.engadget.com/2019/10/29/cyberattack-against-georgia/
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By:

! #Headlines, #Cybersecurity, #DataBreach, #Engadget, #Hackers, #Malware, #TechNews, #TechnologyNews, #WorldNews, #Newsfeed, #syndicated, news

Equifax used “admin/admin” as login and pass for an unencrypted server full of your personal data

In 2017, Equifax admitted that it had doxed America by leaking the nonconsensual dossiers it builds on the nation, covering up the info while its key employees sold off their stock, and then repeatedly lying about the scope of the breach.

Some of Equifax’s investors have sued the company in a Georgia state court. Among the information revealed in the filings: Equifax used “admin/admin” as the login and password for a key server — a portal used to manage credit reports.

Additionally, the data stored on Equifax’s servers was unencrypted.

Among the first details to emerge from the breach was Equifax was its terrible IT practices, driven in part by a shopping spree in which it acquired dozens of small companies and failed to integrate them into its networks.

“Equifax employed the username ‘admin’ and the password ‘admin’ to protect a portal used to manage credit disputes, a password that ‘is a surefire way to get hacked,’” the lawsuit reads.

The lawsuit also notes that Equifax admitted using unencrypted servers to store the sensitive personal information and had it as a public-facing website.

Equifax used ‘admin’ as username and password for sensitive data: lawsuit [Ethan Wolff-Mann/Yahoo]

(via /.)

Source: https://boingboing.net/2019/10/22/bumbling-identity-thieves.html
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Cory Doctorow

! #Headlines, #Cybersecurity, #DataBreach, #random, #TechnologyNews, #Newsfeed, #syndicated, news

Nearly everyone in Ecuador is the victim of a data breach

A massive data breach exposed sensitive data of nearly every individual in Ecuador. The breach impacted an estimated 20 million people — for reference, Ecuador has a population of about 17 million. According to ZDNet, it exposed data on 6.7 million…

Source: https://www.engadget.com/2019/09/17/ecuador-data-breach-20-million-citizens/
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By:

! #Headlines, #DataBreach, #Engadget, #Hackers, #SouthAmerica, #TechNews, #Newsfeed, #syndicated, news

Huge hentai porn site ‘compromises anonymity’ of over a million users

A security flaw on a popular hentai porn site has exposed the emails of more than a million of its users, allowing potential hackers to track down “real-world individuals” with a penchant for cartoon smut.

Researchers at digital firm VPNMentor used a flaw in the system to gain access to nearly 1.2 million user accounts registered on the adult website, Luscious. The site allows people to upload and share hentai – porn based on Japanese-style anime and manga – and is one of the most popular haunts for those into that kind of thing. The registered users, even though they register using email addresses, are supposed to remain anonymous.

The data breach “compromises this anonymity” by allowing hackers to view the users’ personal information, including their emails, the company wrote on Monday. Although no passwords were obtained, researchers managed to see users’ locations and track down all of their activity on the site, including what they uploaded and commented on.

Also on rt.com
Mia Khalifa says she only earned $12K from porn, despite fame & death threats

Only around 20 percent of people used fake emails when logging on to view porn, and “many users” joined Luscious using official government emails, the company said. All of this makes the consequences of a potential hack more damaging, as cyber-criminals often use sensitive private information for extortion.

The impact of this data breach on users could be devastating, personally and financially.

IT news website TechCrunch, which looked through the exposed database, confirmed that “many” emails were real, allowing anyone to “identify real-world individuals” who spent time browsing the website.

After the security lapse was revealed, the owner of Luscious told TechCrunch that people using the site will now be warned “about the potential exposure of their private email addresses.”

Think your friends would be interested? Share this story!

Source: https://www.rt.com/news/466891-hentai-website-data-breach/?utm_source=rss&utm_medium=rss&utm_campaign=RSS
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: RT

! #Headlines, #DataBreach, #Pornography, #Privacy, #RT, #Sex, #Trending, #Newsfeed, #syndicated, news

NYC fire department loses hard drive with over 10,000 medical records

Data breaches normally entail online intrusions these days, but New York City’s fire department is dealing with a classic problem: the physical storage is simply gone. FDNY has warned that an employee’s personal hard drive went missing last March, p…

Source: https://www.engadget.com/2019/08/10/fdny-loses-hard-drive-with-10000-medical-records/
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By:

! #Headlines, #DataBreach, #Engadget, #NYC, #TechNews, #Newsfeed, #syndicated, news

Capital One’s breach was inevitable, because we did nothing after Equifax

Another day, another massive data breach.

This time it’s the financial giant and credit card issuer Capital One, which revealed on Monday a credit file breach affecting 100 million Americans and 6 million Canadians. Consumers and small businesses affected are those who obtained one of the company’s credit cards dating back to 2005.

That includes names, addresses, phone numbers, dates of birth, self-reported income and more credit card application data — including over 140,000 Social Security numbers in the U.S., and more than a million in Canada.

The FBI already has a suspect in custody. Seattle resident and software developer Paige A. Thompson, 33, was arrested and detained pending trial. She’s been accused of stealing data by breaching a web application firewall, which was supposed to protect it.

Sound familiar? It should. Just last week, credit rating giant Equifax settled for more than $575 million over a date breach it had — and hid from the public for several months — two years prior.

Why should we be surprised? Equifax faced zero fallout until its eventual fine. All talk, much bluster, but otherwise little action.

Equifax’s chief executive Richard Smith “retired” before he was fired, allowing him to keep his substantial pension packet. Lawmakers grilled the company but nothing happened. An investigation launched by the former head of the Consumer Financial Protection Bureau, the governmental body responsible for protecting consumers from fraud, declined to pursue the company. The FTC took its sweet time to issue its fine — which amounted to about 20% of the company’s annual revenue for 2018. For one of the most damaging breaches to the U.S. population since the breach of classified vetting files at the Office of Personnel Management in 2015, Equifax got off lightly.

Legislatively, nothing has changed. Equifax remains as much of a “victim” in the eyes of the law as it was before — technically, but much to the ire of the millions affected who were forced to freeze their credit as a result.

Mark Warner, a Democratic senator serving Virginia, along with his colleague since turned presidential candidate Elizabeth Warren, was tough on the company, calling for it to do more to protect consumer data. With his colleagues, he called on the credit agencies to face penalties to the top brass and extortionate fines to hold the companies accountable — and to send a message to others that they can’t play fast and loose with our data again.

But Congress didn’t bite. Warner told TechCrunch at the time that there was “a failure of the company, but also of lawmakers” for not taking action.

Lo and behold, it happened again. Without a congressional intervention, Capital One is likely to face largely the same rigmarole as Equifax did.

Blame the lawmakers all you want. They had their part to play in this. But fool us twice, shame on the credit companies for not properly taking action in the first place.

The Equifax incident should have sparked a fire under the credit giants. The breach was the canary in the coal mine. We watched and waited to see what would happen as the canary’s lifeless body emerged — but, much to the American public’s chagrin, no action came of it. The companies continued on with the mentality that “it could happen to us, but probably won’t.” It was always going to happen again unless there was something to force the companies to act.

Companies continue to vacuum up our data — knowingly and otherwise — and don’t do enough to protect it. As much as we can have laws to protect consumers from this happening again, these breaches will continue so long as the companies continue to collect our data and not take their data security responsibilities seriously.

We had an opportunity to stop these kinds of breaches from happening again, yet in the two years passed we’ve barely grappled with the basic concepts of internet security. All we have to show for it is a meager fine.

Thompson faces five years in prison and a fine of up to $250,000.

Everyone else faces just another major intrusion into their personal lives. Not at the hands of the hacker per se, but the companies that collect our data — with our consent and often without — and take far too many liberties with it.

Let’s block ads! (Why?)

Source: https://techcrunch.com/2019/07/29/capital-one-breach-was-inevitable/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Techcrunch+%28TechCrunch%29
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Zack Whittaker

! #Headlines, #Banking, #DataBreach, #TechCrunch, #TechNews, #Newsfeed, #syndicated, news

Why You Might Not Get $125 in Equifax Settlement Money

If you’re claiming your $125 in settlement money from the 2017 Equifax data breach, don’t add that extra cash into your budget just yet—because you might not get the full amount.

Read more…

Source: https://twocents.lifehacker.com/why-you-might-not-get-125-in-equifax-settlement-money-1836788283
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Nicole Dieker on Two Cents, shared by Andrew Couts to Gizmodo

! #Headlines, #DataBreach, #Gizmodo, #Money, #TechNews, #Newsfeed, #syndicated, news

After Equifax breach, US watchdog says agencies aren’t properly verifying identities

A federal watchdog says the government should stop relying on the credit agencies to verify the identifies of those using government services.

In a report out this week, the the Government Accountability Office said several government departments still rely on the credit agencies — Equifax, Experian and TransUnion — to check if a person is who they say they are before they can access their services online.

Agencies like the U.S. Postal Service, the Social Security Administration, Veterans Affairs, and the Centers for Medicare and Medicaid Services ask several questions of a new user and match their answers to information held in an individual’s credit file. The logic is that these credit files have information only the person signing up for services can know.

But following the Equifax breach in 2017 those answers are no longer safe, the watchdog said.

The Equifax breach resulted in the theft of 148 million consumers. Much of the consumer financial data had been collected without the explicit permission of those whose data it held. An investigation later found the breach was “entirely preventable” had the credit agency employed basic security measures.

“The risk that an attacker could obtain and use an individual’s personal information to answer knowledge-based verification questions and impersonate that individual led the National Institute of Standards and Technology (NIST) to issue guidance in 2017 that effectively prohibits agencies from using knowledge-based verification for sensitive applications,” wrote the watchdog.

In response, the named agencies said the cost of new verification systems are too high and may exclude certain demographics from the population.

Only Veterans Affairs implemented a new system but still relies on knowledge-based verification in some cases.

The other downside is that if you have no credit, you simply don’t show up in these systems. You need a credit card or some kind of loan in order to “appear” in the eyes of credit agencies. That’s a major problem for the millions who have no credit file, like foreign nationals working in the U.S. on a visa. In 2015, some 26 million people were estimated to be “credit invisible.”

“Nevertheless, until these agencies take steps to eliminate their use of knowledge-based verification, the individuals they serve will remain at increased risk of identity fraud,” wrote the watchdog.

Let’s block ads! (Why?)

Source: https://techcrunch.com/2019/06/16/us-watchdog-equifax-breach-verify-identities/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Techcrunch+%28TechCrunch%29
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Zack Whittaker

! #Headlines, #Cybersecurity, #DataBreach, #TechCrunch, #TechNews, #Newsfeed, #syndicated, news

FBI refuses to tell Florida voters whether their information was targeted by Russia hackers in 2016 election

Federal agency faces bipartisan backlash from lawmakers over lack of transparency

Source: https://www.independent.co.uk/news/world/americas/us-politics/fbi-florida-russia-hackers-2016-election-ron-desantis-a8918111.html
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Patricia Mazzei

! #Headlines, #DataBreach, #Elections, #FBI, #Florida, #Hacks, #politics, #Russia, #Trending, #Newsfeed, #syndicated, news

Equifax’s Data Breach Costs Hit $1.4 Billion

Massive 2017 Breach Continues to Bite the Credit Reporting Giant’s Bottom Line
Equifax has reported a loss in its latest quarter due to ongoing incident response, legal, investigative and corporate information security overhaul costs resulting from its 2017 data breach. The credit reporting giant says that so far, it’s spent $1.4 billion as a result of the massive breach.

Source: https://www.govinfosecurity.com/equifaxs-data-breach-costs-hit-14-billion-a-12473
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By:

! #Headlines, #BusinessNews, #DataBreach, #Newsfeed, #syndicated, news

AMC accidentally exposed data on 1.6 million subscribers

A security researcher discovered that AMC Networks had inadvertently exposed more than 1.6 million records of subscribers to the company’s two premium streaming video platforms, Sundance Now and Shudder. The publicly accessible database included the…

Source: https://www.engadget.com/2019/05/03/amc-sundance-now-shudder-subscriber-exposed-database/
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By:

! #Headlines, #DataBreach, #Engadget, #Entertainment, #TechNews, #Newsfeed, #syndicated, news

A public database exposed medical records of 150,000 rehab patients

Nearly 150,000 patients who sought treatment at an addiction recovery facility in Pennsylvania had their medical records exposed online. Through the public search engine Shodan, independent researcher Justin Paine found an ElasticSearch database with…

Source: https://www.engadget.com/2019/04/19/rehab-medical-records-exposed/
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By:

! #Headlines, #Cybersecurity, #DataBreach, #Engadget, #Hackers, #Healthcare, #pch3lp, #TechNews, #Newsfeed, #syndicated, news

Bernie Sanders, from gadfly to serious White House contender

Once dismissed by many as a fringe candidate with wacky socialist ideas, Bernie Sanders campaigned to the brink of the Democratic presidential nomination in 2016 and has now set his sights on the White House once again. Sanders, a 77-year-old US Senator from Vermont, announced on Tuesday that he will join an already crowded field of candidates seeking to challenge President Donald Trump in 2020. “I wanted to let the people of the state of Vermont know about this first,” Sanders said on Vermont Public Radio.

Source: https://news.yahoo.com/bernie-sanders-gadfly-serious-white-house-contender-002519657.html
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By:

! #Headlines, #BernieSanders, #DataBreach, #Deals, #Election2020, #People, #Politics, #Trending, #News, #Newsfeed

Coffee Meets Bagel dating app hack exposes private details of 6 million people

Stolen details are being traded on the dark web

Source: https://www.independent.co.uk/life-style/gadgets-and-tech/news/coffee-meets-bagel-dating-app-hack-a8781176.html
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Anthony Cuthbertson

! #Headlines, #Cybersecurity, #DataBreach, #Trending, #News, #Newsfeed

Dark web data dump sees 620 million accounts from hacked websites go on sale

Hundreds of millions of stolen details from Dubsmash, MyFitnessPal, MyHeritage and other previously undisclosed data breaches were listed on Dream Market

Source: https://www.independent.co.uk/life-style/gadgets-and-tech/news/dark-web-data-hackers-dubsmash-myfitnesspal-myheritage-cyber-security-a8775666.html
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Anthony Cuthbertson

! #Headlines, #Cybersecurity, #DataBreach, #Internet, #TechnologyNews, #Trending, PCH3lp, #News, #Newsfeed

Millions of Financial Records Leaked at Texas-Based Data Firm

For at least the third time in as many days, a large cache of sensitive data has been reportedly exposed due to a misconfigured Elasticsearch server. In this case, a whopping 24 million financial and banking records are said to be involved.

Read more…

Source: https://gizmodo.com/millions-of-financial-records-leaked-at-texas-based-dat-1831996146
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Dell Cameron

! #Headlines, #Cybersecurity, #DataBreach, #Hacked, #Privacy, #TechNews, #TechnologyNews, #Texas, PCH3lp, #News, #Newsfeed

Huge data breach reveals hundreds of millions of emails and passwords from across the internet

Logins were made easily available for anyone to download

Source: https://www.independent.co.uk/life-style/gadgets-and-tech/news/data-breach-email-password-login-hack-safe-address-security-a8732326.html
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: Andrew Griffin

! #Headlines, #DataBreach, #TechnologyNews, #Trending, #News, #Newsfeed

Trump administration, U.S. allies condemn China for brazen cyberattacks

The Trump administration and U.S. allies are unleashing a barrage of condemnation of Chinese cyberattacks, including new charges against Beijing-linked hackers and an expected declaration that Xi Jinping’s government broke its 2015 pledge to cease its online economic espionage.

Today’s announcements include U.S. criminal charges accusing Chinese government hackers of stealing American businesses’ intellectual property, as part of a long-running series of thefts that have cost the U.S. hundreds of billions of dollars. Meanwhile, allies, including the United Kingdom, were expected to issue statements blaming China’s government for sponsoring economic cyberattacks across the U.S., Europe and Asia.

The charges come amid an expanding trade war between the world’s two largest economies, as well as warnings from senior U.S. officials that China poses a growing threat to American technological and economic power.

Article originally published on POLITICO Magazine

]]>

Source: https://www.politico.com/story/2018/12/20/trump-administration-us-allies-condemn-china-for-brazen-cyberattacks-1070984
Droolin’ Dog sniffed out this story and shared it with you.
The Article Was Written/Published By: webin@politico.com (POLITICO Staff)

! #Headlines, #China, #Cybersecurity, #DataBreach, #Hacked, #Political, #Politics, #Trending, #News, #Newsfeed