Former Amazon employee Paige Thompson, charged with hacking Capital One Financial records, illegally accessed terabytes of data from 30+ other companies and institutions, according to authorities. Thompson, arrested July 29, was accused of stealing 106 million Capital One records, considered to be one of the largest thefts of cloud-based data. Court documents reveal that Thompson stole 140,000 Social Security numbers, 80,000 bank account numbers, millions of credit card applications and one million Canadian social insurance numbers. Continue reading Capital One Hacker Stole Data From More Than 30 Entities

Yahoo announced yesterday that all 3 billion of its user accounts were affected by a previously disclosed August 2013 cyberattack, originally reported by the company as affecting 1 billion accounts. Yahoo had earlier reported that a separate 2014 attack affected 500 million accounts. Last year we learned that, “digital thieves made off with names, birth dates, phone numbers and passwords of users that were encrypted with security that was easy to crack,” according to The New York Times. “The intruders also obtained the security questions and backup email addresses used to reset lost passwords.” Continue reading Security Update: 3 Billion Yahoo Accounts Hit in 2013 Attack

In what could mark the largest-ever theft of personal data, Yahoo has confirmed that more than 500 million of its user accounts were hacked in late 2014. The Internet company is pointing the blame at state-sponsored hackers who reportedly stole names, email addresses, birth dates, phone numbers and encrypted passwords after breaking into the Yahoo network. The company does not believe the hack impacted unprotected passwords or financial data such as payment card or bank account info. The breach was discovered after Yahoo began investigating a claim by hackers who were attempting to sell 280 million usernames and passwords. Continue reading Hackers Steal Data From Half a Billion Yahoo User Accounts

While businesses are continuing efforts to protect their data and combat outside hackers, many are facing data theft by their own employees. A survey of 208 organizations by Accenture Plc and HfS Research found that 69 percent “experienced an attempted or realized data theft or corruption by corporate insiders” over the past year. That compares to 57 percent from external sources. Media and tech firms and Asia-Pacific enterprises reported the highest rates, notes Bloomberg. According to Accenture chief strategy officer Omar Abbosh, businesses are spending about $84 billion annually to combat data theft that costs them $2 trillion, “damage that could rise to $90 trillion a year by 2030 if current trends continue.” Continue reading Accenture Study: Companies Experiencing Insider Data Theft

The Third U.S. Circuit Court of Appeals ruled that the Federal Trade Commission can advance its lawsuit against Wyndham Worldwide, which the FTC holds partially culpable for theft of online data three times between 2008 and 2010, for a total of over 619,000 credit- and debit-card numbers. Since Congress has yet to pass sweeping legislation on data security, the FTC has stepped in, so far instigating 50 additional data-security cases based on its mandate to act against unfair and deceptive business practices. Continue reading FTC Has Authority Over Corporate Hacks, says Appeals Court