Significant Data Breaches - May 2015

IKANOW’s major breach index along with a recap of the major data breaches that took place in May 2015 are listed below.

mSpy - Malicious Outsider - 400,000 records exposed

KrebsonSecurity broke the news that mSpy, a brand of mobile and computer monitoring software for iOS, Android, Windows, and Mac OS, had been massively hacked. A huge amount of data was (apparently) stolen from the company’s servers and posted on the deep web. Emails, text messages, payment information, location data and more were exposed.

World Trade Organization (WTO) - Hacktivist - 53,000 records exposed

Hackers apart of the Anonymous collective hacked the World Trade Organization website and leaked data on thousands of officials. The data belows to personnel of WTO sites located in various countries such as Brazil, China, France, India, Indonesia, Pakistan, Russia, Santo Domingo, Saudi Arabia, Sri Lanka, and United States. The data included names, email addresses, phone numbers, titles, login credentials, and more. Read more here.

Hanoi IT - Malicious Insider - 10,000 records exposed

The Hanoi police arrested 3 IT engineers who allegedly hacked into several thousands of credit cards and sold the information for nearly $20,000.

Café de Coral - Accidental Loss - 108,500 records exposed

Café de Coral is a fast food restaurant group based in Hong Kong. Personal details of about 108,500 customers was accidentally attached to an email and sent to an outside party. This data included names, phone numbers, email addresses, and Octopus card numbers.

Café de Coral said in a statement the data was “inadvertently sent to a person outside the group in an attachment to an email that was mistakenly copied to that person”.

IRS - Malicious Outsider - 104,000 records exposed

The Internal Revenue Service believes that a recent cyber breach that allowed the hackers to access and steal the tax returns of more than 100,000 people are from Russia. The hackers used stolen data to gain access to the returns.

Hackers used stolen data such as social security numbers, birth dates, and other personal information to gain access to past tax returns. Per a New York Times article, “Information from those forms was used to file fraudulent returns, the I.R.S. said, and the agency sent nearly $50 million in refunds before it detected the scheme.”

Gaana.com - Malicious Outsider - 10,000,000 records exposed

Gaana.com is one o India’s most popular music streaming applications has reportedly been hacked. They have more than 10 million users. A Pakistani hacker, Mak Man, is claiming responsibility and is said to have gotten usernames, email addresses, passwords, birth dates, and other personal information. Read more here and here.

AdultFriendFinder - Malicious Outsider - 3,500,000 records exposed

The adult social networking site, AdultFriendFinder, has confirmed is has suffered a data breach. The hackers have reportedly stolen data about users’ sexual preferences, email addresses, usernames, dates of birth and zip codes. They are currently working with law enforcement and have launched an investigation. Read more here.

Sally Beauty Holdings - Malicious Outsider - 25,000 records

In a story broke by KrebsonSecurty, Sally Beauty Holdings, Inc, a nationwide beauty products chain, has been breached. This is the 2nd data breach Sally Beauty has faced in just over a year. The investigation is still ongoing, and Sally Beauty does not yet know how many customers of its 4,900 stores worldwide were affected.