Hacks of the Month —September 2019
Another month of who got hacked, consumer data left publicly accessible, and unpatched flaws to report on. For this month, we listed a short recap and rundown on consumer data exposed by various companies. Read on for the latest security flaw and data breaches for hacks of the month —September 2019.
Foxit PDF Software Data Breach
Foxit Software announced a data breach of its 525 million users. An unknown third-party gained unauthorized access to its data systems. Affected users are required to reset their passwords. The company has sent emails to those affected and to remain vigilant on suspicious emails with links or download attachments. The data exposed included:
- Email address
- Passwords
- User’s names
- Phone numbers
- Company names
- IP addresses
XKCD Data Breach
Popular webcomic platform, XKCD, has been hit with a security data breach of 562,000 user names, email, and IP addresses and hashed passwords stolen. Security researcher alerted the company two months ago. The company has urged its users to change their passwords immediately and have sent emails to affected users. The XKCD forums are currently offline. The data exposed included:
- User names
- Email addresses
- Hashed passwords
- IP address
Medical Images and Data Exposed
Confidential images of X-rays, MRI and CT scans of millions of patients have been left unprotected on hundreds of servers used by health providers worldwide. 45.8 Million across the US, the exposure to medical images and the accompanying data included:
- Patient names
- Dates of birth
- Examination dates
- Physician, & medical information
- Type of imaging procedure
Mattress Company Customer Data Exposed
A Wisconsin mattress company, Verlo Mattress, leaked customer data of 387,000 from an online unsecured server. The data was believed to be left unsecured with public access to all files on the server. Here’s information exposed:
- Names
- Phone numbers
- Emails
- Home addresses
- Billing addresses
DoorDash Data Breach
DoorDash data breach affects 4.9 million merchants, customers, and workers. Click the title above to read the company’s blog post. The data expose included:
- User names/email addresses
- Login password
- Last four digits of payment cards and bank accounts
- Order history
- Phone numbers
- Delivery Addresses
