Data Breaches 2021: Difference between revisions
m Kangtain moved page Security/Data Breaches 2021 to Data Breaches 2021 over redirect |
|||
| (10 intermediate revisions by the same user not shown) | |||
| Line 29: | Line 29: | ||
#'''UC San Diego Health''': UC San Diego Health said employee email accounts were compromised by threat actors, leading to a wider incident in which patient, student, and employee data potentially including medical records, claims information, prescriptions, treatments, Social Security numbers, and more were exposed. | #'''UC San Diego Health''': UC San Diego Health said employee email accounts were compromised by threat actors, leading to a wider incident in which patient, student, and employee data potentially including medical records, claims information, prescriptions, treatments, Social Security numbers, and more were exposed. | ||
#'''Guntrader.uk''': The UK trading website for shotguns, rifles, and shooting equipment said that records belonging to roughly 100,000 gun owners, including their names and addresses, had been published online. As gun ownership and supply are strictly controlled in the UK, this leak has caused serious privacy and personal safety concerns. | #'''Guntrader.uk''': The UK trading website for shotguns, rifles, and shooting equipment said that records belonging to roughly 100,000 gun owners, including their names and addresses, had been published online. As gun ownership and supply are strictly controlled in the UK, this leak has caused serious privacy and personal safety concerns. | ||
#'''Kaseya''': A vulnerability in a platform developed by IT services provider Kaseya was exploited in order to hit an estimated 800 - 1500 customers, including MSPs. | #'''Kaseya''': A vulnerability in a platform developed by IT services provider Kaseya was exploited in order to hit an estimated 800 - 1500 customers, including MSPs. | ||
#'''eHAC''': Dugaan kebocoran data dari aplikasi Indonesia Health Alert Card atau eHAC yang digagas kemenkes pertama kali diungkapkan oleh tim peneliti dari vpnMentor, sejak 15 Juli lalu. | |||
#'''BRI Life''': Sempat ramai beredar di media sosial ihwal dugaan penjualan data dua juta nasabah BRI Life dengan harga $7.000 atau sekitar Rp 101,6 juta. Unggahan tersebut dibeberkan akun Twitter @HRock. Terdapat 463.000 dokumen yang diperjualbelikan. Dokumen yang tertera dalam tangkapan layar berupa foto KTP elektronik, nomor rekening, nomor wajib pajak, akte kelahiran, dan rekam medis nasabah BRI Life. | |||
==August== | ==August== | ||
| Line 44: | Line 46: | ||
#'''Coinbase''': Coinbase sent out a letter to roughly 6,000 users after detecting a "third-party campaign to gain unauthorized access to the accounts of Coinbase customers and move customer funds off the Coinbase platform." Cryptocurrency was taken without permission from some user accounts. | #'''Coinbase''': Coinbase sent out a letter to roughly 6,000 users after detecting a "third-party campaign to gain unauthorized access to the accounts of Coinbase customers and move customer funds off the Coinbase platform." Cryptocurrency was taken without permission from some user accounts. | ||
#'''Neiman Marcus''': In October, Neiman Marcus made a data breach that occurred in May 2020 public. The intrusion was only detected in September 2021 and included the exposure and potential theft of over 3.1 million payment cards belonging to customers, although most are believed to be invalid or expired. | #'''Neiman Marcus''': In October, Neiman Marcus made a data breach that occurred in May 2020 public. The intrusion was only detected in September 2021 and included the exposure and potential theft of over 3.1 million payment cards belonging to customers, although most are believed to be invalid or expired. | ||
#'''Argentina''': A hacker claimed to have compromised the Argentinian government's National Registry of Persons, thereby stealing the data of 45 million residents. The government has denied the report. | #'''Argentina''': A hacker claimed to have compromised the Argentinian government's National Registry of Persons, thereby stealing the data of 45 million residents. The government has denied the report. | ||
#'''KPAI''': Pakar keamanan siber dari Vaksincom, Alfons Tanujaya mengaku sudah mengetes kasus dugaan kebocoran data Komisi Perlindungan Anak Indonesia (KPAI) yang tersebar di RaidForums. Ia menyimpulkan bahwa data yang dibocorkan adalah data valid. Sebelumnya dilaporkan database milik KPAI diduga bocor di internet. Data ini muncul di RaidForums dengan judul Leaked Database KPAI (kpai.go.id) yang diunggah 13 Oktober 2021. | |||
==November== | ==November== | ||
| Line 58: | Line 61: | ||
==Source== | ==Source== | ||
*[https://www.zdnet.com/article/the-biggest-data-breaches-of-2021/ zdnet.com] | *[https://www.zdnet.com/article/the-biggest-data-breaches-of-2021/ zdnet.com] | ||
*[https://www.cnnindonesia.com/teknologi/20210901150749-185-688400/deretan-kasus-bocor-data-penduduk-ri-dari-server-pemerintah cnnindonesia.com] | |||
*[https://www.suara.com/tekno/2021/10/21/212004/data-data-yang-bocor-dari-kpai-diduga-valid suara.com] | |||
*[https://nasional.tempo.co/read/1501790/6-kasus-kebocoran-data-pribadi-di-indonesia tempo.co] | |||
[[Category:Security]] | [[Category:Security]] | ||