Attacks/Breaches

3/1/2018
11:19 AM
50%
50%

Equifax Finds 2.4 Million Additional US Victims of its Data Breach

Total of victims now at 147.9 million customers.

For the second time in several months, Equifax has discovered additional victims of its record-breaking data breach: the firm found 2.4 million more customers had their data exposed in the 2017 hack.

In October of last year, Equifax revealed that forensics investigators had concluded that some 2.5 million more US consumers were affected by the data breach it revealed in September, bringing the total number at that time to 145.5 million. 

Today's new revelation raises the number of victims in the US to 147.9 million people. According to Equifax, the latest list of victims had their names and partial driver's license information stolen in the hack.

"This is not about newly discovered stolen data," said Paulino do Rego Barros, Jr., interim CEO of Equifax. "It's about sifting through the previously identified stolen data, analyzing other information in our databases that was not taken by the attackers, and making connections that enabled us to identify additional individuals."

Equifax - which last month hired former Home Depot CISO Jamil Farshchi as its new chief information security officer - said it will directly alert these consumers and provide them with free identity theft protection and credit file monitoring services.

Read more here.

 

Black Hat Asia returns to Singapore with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier solutions and service providers in the Business Hall. Click for information on the conference and to register.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
3/2/2018 | 10:15:51 AM
The Never Ending Story - 1 of 2
I added 1 of 2 indicative of the other great financial firm that NEVER ceases to come up in the news: Wells Fargo yet again, this time wealth management unit.    But Equifax is the gift from hell that keeps on giving.  And ALL because of just one (1) IT guy (according to the CEO) who FAILED to apply an update.  Hundreds of others IT staffers and protocols are thus BLAMELESS and everybody was doing their job proper.  WAY WRONG ANSWER.  
Microsoft, Mastercard Aim to Change Identity Management
Kelly Sheridan, Staff Editor, Dark Reading,  12/3/2018
Windows 10 Security Questions Prove Easy for Attackers to Exploit
Kelly Sheridan, Staff Editor, Dark Reading,  12/5/2018
Starwood Breach Reaction Focuses on 4-Year Dwell
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/5/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: I guess this answers the question: who's watching the watchers?
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-19991
PUBLISHED: 2018-12-10
VeryNginx 0.3.3 allows remote attackers to bypass the Web Application Firewall feature because there is no error handler (for get_uri_args or get_post_args) to block the API misuse described in CVE-2018-9230.
CVE-2018-19653
PUBLISHED: 2018-12-09
HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.
CVE-2018-19982
PUBLISHED: 2018-12-09
An issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not implemented. The communication architecture is APP > Server > Controller (HUB) > Node (products which are controlled by HUB). The prerequisite is that the attacker is on the same network as the target HU...
CVE-2018-19983
PUBLISHED: 2018-12-09
An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. An attacker first prepares a Z-Wave frame-transmission program (e.g., Z-Wave PC Controller, OpenZWave, CC1110, etc.). Next, the attacker conducts a DoS attack against the Z-Wave S0 Security version product by continuously sending ...
CVE-2018-19980
PUBLISHED: 2018-12-08
Anker Nebula Capsule Pro NBUI_M1_V2.1.9 devices allow attackers to cause a denial of service (reboot of the underlying Android 7.1.2 operating system) via a crafted application that sends data to WifiService.