March Hacks of the Month

As an important note, “Hacks of the Month Blog” is now named March Hacks of the Month. This month presents customer data breaches and compromised website payment forms. Now more than ever Cyber-attacks continue to rise and we’re here to keep you updated and informed. Continue reading for the latest cyber-attacks in March.

Cyber attacks of the Month – March Edition

T-Mobile Customers and Employee Data Breach

Early in March, the T-Mobile website revealed a security breach which impacted their employees and customers by a third-party email vendor. See Below the following bullet points which was confirmed by the company how the hacked accounts affected their customers and employees. The data exposed included:

• Customer names
• Addresses
• Phone numbers
• Account numbers
• Billing information

U.S. Property and Demographic database exposes 200M Records

The most unique exposure for the Cyber Attacks of the Month – March Edition included over 200 million records containing various property-related information on US residents who were exposed on a no password database. The database was accessible without any authentication by the security firm Comparitech. See below the list of the exposed data:

• Market Value
• Property Type
• Mortgage amount, lender and rate
• Year Built
• Number of beds and bathrooms
• Tax Assessment information

J.Crew Customer Data Exposed

The fashion retailer giant, J.Crew, notified customers of unauthorized third-party access to their customer accounts for almost a year. The company stated, “they disabled effected accounts and guided customers to its support line (J.Crew Customer Care Center).” See below the data exposed:

• Login Credentials
• Last Four Digits of Payment Cards
• Expiration Dates
• Card Types
• Billing Addresses
• Order & Shipping Numbers

Tupperware Website Hacked

Tupperware, the plastic food container company, website gets hacked by a malicious code mimicking the site’s payment section. Keep in mind, the cloned coding for the payment section mimics Tupperware’s VISA CyberSource payment form. Scary! Furthermore, the data exposed may have included users payment information, such as:

• First and Last name
• Billing Address
• Phone Number
• Credit Card (CC) Number
• The CC Expiry Date
• And the CC CCV Code

Marriott Hotel Data Exposed:

The second-largest data breach hits Marriott international by exposing 5.2 million guests. The exposed information was accessed with login credentials by two employees by the franchise property. The following information exposed included:

• Names
• Addresses
• Emails
• Phone Numbers
• Birthdays
• Loyalty Account Details