America's #1 Online Cigar Auction
first, best, biggest!

Last post 5 years ago by Big_Bear. 166 replies replies.
4 Pages<1234>
Identity Theft
Jump to Bottom | Previous Topic | Next Topic
moonman Offline
#101 Posted: Thu, Jan 28 2016, 9:20 PM EST
Joined: 11-21-2004
Posts: 3,978
You want my identity, help yourself. Lifelock can suck it!
Big_Bear Offline
#102 Posted: Fri, Jan 29 2016, 1:37 PM EST
Joined: 09-27-2008
Posts: 2,664
You're in good company. The FTC agrees with you.

That's why I'm not with LifeLock

= = = = = = = = = = = = = = = = = = = = = = = = =

LifeLock Will Pay $12 Million to Settle Charges by the FTC and 35 States That Identity Theft Prevention and Data Security Claims Were False

For Release: March 9, 2010

Tags:

LifeLock, Inc. has agreed to pay $11 million to the Federal Trade Commission and $1 million to a group of 35 state attorneys general to settle charges that the company used false claims to promote its identity theft protection services, which it widely advertised by displaying the CEO’s Social Security number on the side of a truck.

In one of the largest FTC-state coordinated settlements on record, LifeLock and its principals will be barred from making deceptive claims and required to take more stringent measures to safeguard the personal information they collect from customers.

“While LifeLock promised consumers complete protection against all types of identity theft, in truth, the protection it actually provided left enough holes that you could drive a truck through it,” said FTC Chairman Jon Leibowitz.


https://www.ftc.gov/news-events/press-releases/2010/03/lifelock-will-pay-12-million-settle-charges-ftc-35-states




.
moonman Offline
#103 Posted: Fri, Jan 29 2016, 4:48 PM EST
Joined: 11-21-2004
Posts: 3,978
No ****!!! I do feel sorry for anybody that has had their identity stolen, it is just that I strongly dislike corporations employing fear tactics to get people to spend their hard earned money.
Big_Bear Offline
#104 Posted: Thu, Feb 4 2016, 2:53 PM EST
Joined: 09-27-2008
Posts: 2,664
Hackers attack 20 million accounts on Alibaba's Taobao shopping site

02/04/2016

BEIJING (Reuters) - Hackers in China attempted to access over 20 million active accounts on Alibaba Group Holding Ltd's Taobao e-commerce website using Alibaba's own cloud computing service, according to a state media report posted on the Internet regulator's website.

Analysts said the report from The Paper led to the price of Alibaba's U.S.-listed shares falling as much as 3.7 percent in late Wednesday trade.

An Alibaba spokesman on Thursday said the company detected the attack in "the first instance", reminded users to change passwords, and worked closely with the police investigation.

Chinese companies are grappling a sharp rise in the number of cyber attacks, and cyber security experts say firms have a long way to go before defenses catch up to U.S. counterparts.

In the latest case, hackers obtained a database of 99 million usernames and passwords from a number of websites, according to a separate report on a website managed by the Ministry of Public Security.



http://www.businessinsider.com/r-hackers-attack-20-million-accounts-on-alibabas-taobao-shopping-site-2016-2







.
jjanecka Offline
#105 Posted: Thu, Feb 4 2016, 4:57 PM EST
Joined: 12-08-2015
Posts: 4,334
Best to just to away with social security entirely.
Big_Bear Offline
#106 Posted: Tue, Feb 9 2016, 1:47 PM EST
Joined: 09-27-2008
Posts: 2,664
Hackers publish contact info of 20,000 FBI employees

By Mary Kay Mallonee, CNN, 8:34 PM ET, Mon February 8, 2016

Washington (CNN)Hackers, making good on a threat, published contact information for 20,000 FBI employees Monday afternoon, just one day after posting similar data on almost 10,000 Department of Homeland Security employees.

The hackers, tweeting from the account @DotGovs, claim they obtained the details by hacking into a Department of Justice database.

The hackers boasted on Twitter, "FBI and DHS info is dropped and that's all we came to do, so now its time to go, bye folks! #FreePalestine."

The information contained names, titles, phone numbers and email addresses. After the hackers published the data on the DHS employees on Sunday, they tweeted, "Well folks, it looks like @TheJusticeDept has finally realized their computer has been breached after 1 week."

The Justice Department is investigating the hack.

http://www.cnn.com/2016/02/08/politics/hackers-fbi-employee-info/index.html



.
Big_Bear Offline
#107 Posted: Tue, Mar 22 2016, 12:28 PM EST
Joined: 09-27-2008
Posts: 2,664
Number of U.S. government 'cyber incidents' jumps in 2015

By Dustin Volz

WASHINGTON (Reuters) - The U.S. government was hit by more than 77,000 "cyber incidents" like data thefts or other security breaches in fiscal year 2015, a 10 percent increase over the previous year, according to a White House audit.

Part of the uptick stems from federal agencies improving their ability to identify and detect incidents, the annual performance review from the Office and Management and Budget said.

The report, released on Friday, defines cyber incidents broadly as “a violation or imminent threat of violation of computer security policies, acceptable use policies, or standard computer security practices.” Only a small number of the incidents would be considered as significant data breaches.

National security and intelligence officials have long warned that cyber attacks are among the most serious threats facing the United States. President Barack Obama asked Congress last month for $19 billion for cyber security funding across the government in his annual budget request, an increase of $5 billion over the previous year.

The government's Office of Personnel Management was victim of a massive hack that began in 2014 and was detected last year. Some 22 million current and former federal employees and contractors in addition to family members had their Social Security numbers, birthdays, addresses and other personal data pilfered in the breach.

That event prompted the government to launch a 30-day “cyber security sprint” to boost cyber security within each federal agency by encouraging adoption of multiple-factor authentication and addressing other vulnerabilities.

“Despite unprecedented improvements in securing federal information resources … malicious actors continue to gain unauthorized access to, and compromise, federal networks, information systems, and data,” the report said.

(Reporting by Dustin Volz; Editing by Alistair Bell)


http://finance.yahoo.com/news/number-u-government-cyber-incidents-205016113.html





.
Big_Bear Offline
#108 Posted: Fri, Apr 1 2016, 11:27 AM EST
Joined: 09-27-2008
Posts: 2,664

U.S., Canada issue joint alert on 'ransomware' after hospital attacks

By Jim Finkle

13 hours ago

Hackers forced Kentucky hospital into ‘internal state of emergency’

(Reuters) - The United States and Canada on Thursday issued a rare joint cybeer alert, warning against a recent surge in extortion attacks that infect computers with viruses known as "ransomware," which encrypt data and demand payments for it to be unlocked.

The warning follows reports from several private security firms that they expect the crisis to worsen, because hackers are getting more sophisticated and few businesses have adopted proper security measures to thwart such attacks.

"Infections can be devastating to an individual or organization, and recovery can be a difficult process that may require the services of a reputable data recovery specialist," the two governments said in the alert, distributed by the U.S. Department of Homeland Security and the Canadian Cyber Incident Response Centre.



Full Story:
http://news.yahoo.com/u-canada-issue-joint-alert-ransomware-hospital-attacks-023013135--finance.html



.
Big_Bear Offline
#109 Posted: Wed, Apr 6 2016, 1:33 PM EST
Joined: 09-27-2008
Posts: 2,664
Adobe readies emergency patch for Flash zero-day bug exploited in the wild

The zero-day vulnerability allows attackers to take complete control of a victim's system.

By Charlie Osborne for Zero Day | April 6, 2016 -- 10:38 GMT (03:38 PDT) | Topic: Security

Adobe has told users that an emergency patch is being prepared for a Flash zero-day vulnerability being exploited in the wild which can give attackers complete control.

On Tuesday, the tech giant said in a security advisory that CVE-2016-1019, the zero-day security flaw, is a critical issue which exists in affects Adobe Flash Player 21.0.0.197 and earlier. The bug impacts Windows, Mac, Linux and Chrome operating systems.

The Flash zero-day "could cause a crash and potentially allow an attacker to take control of the affected system" if exploited, according to Adobe.

Adobe has received reports that the vulnerability is being actively exploited in the wild, which is bad news for users of older software. Until an update and fix is released to patch the flaw, anyone actively using Adobe Flash 21.0.0.197 and earlier is vulnerable to attack.




http://www.zdnet.com/article/adobe-readies-emergency-patch-for-flash-zero-day-bug-exploited-in-the-wild/







.
Big_Bear Offline
#110 Posted: Tue, Apr 26 2016, 10:51 AM EST
Joined: 09-27-2008
Posts: 2,664
SWIFT Network Aware of Multiple Cyber Fraud Incidents

Tuesday, 26 Apr 2016 08:47 AM

SWIFT, the global financial network that banks use to transfer billions of dollars every day, warned its customers on Monday that it was aware of "a number of recent cyber incidents" where attackers had sent fraudulent messages over its system.

The disclosure came as law enforcement authorities in Bangladesh and elsewhere investigated the February cyber theft of $81 million from the Bangladesh central bank account at the New York Federal Reserve Bank. SWIFT has acknowledged that the scheme involved altering SWIFT software on Bangladesh Bank's computers to hide evidence of fraudulent transfers.

Monday's statement from SWIFT marked the first acknowledgement that the Bangladesh Bank attack was not an isolated incident but one of several recent criminal schemes that aimed to take advantage of the global messaging platform used by some 11,000 financial institutions.



http://www.newsmax.com/Finance/Markets/swift-hackers-cyber-fraud/2016/04/26/id/725732/






.
Big_Bear Offline
#111 Posted: Wed, Apr 27 2016, 9:44 AM EST
Joined: 09-27-2008
Posts: 2,664
Hundreds of Spotify credentials appear online – users report accounts hacked, emails changed

Posted yesterday by Sarah Perez (@sarahintampa)

A list containing hundreds of Spotify account credentials – including emails, usernames, passwords, account type and other details – has popped up on the website Pastebin, in what appears to be a possible security breach. After reaching out to a random sampling of the victims via email, we’ve confirmed that these users’ Spotify accounts were compromised only days ago. However, Spotify says that it “has not been hacked” and its “user records are secure.”

It’s unclear, then, where these particular account details were acquired, given that they are specific to Spotify, rather than a set of generic credentials that just happen to work on Spotify.

- - - - - - - - - - - - - - - -

http://techcrunch.com/2016/04/25/hundreds-of-spotify-credentials-appear-online-users-report-accounts-hacked-emails-changed/




.
Big_Bear Offline
#112 Posted: Wed, May 4 2016, 2:36 PM EST
Joined: 09-27-2008
Posts: 2,664
Anonymous Attacks Greek Central Bank, Says 30-Day Global Hack to Follow

by Reuters
May 4 2016, 6:13 am ET

Greece's central bank became the target of a cyber attack by activist hacking group Anonymous on Tuesday which disrupted service of its website, a Bank of Greece official said on Wednesday.

"The attack lasted for a few minutes and was successfully tackled by the bank's security systems. The only thing that was affected by the denial-of-service attack was our website," the official said, declining to be named.

Anonymous originated in 2003, adopting the Guy Fawkes mask as their symbol for online hacking. The mask is a stylized portrayal of an oversized smile, red cheeks and a wide mustache upturned at both ends.

"Olympus will fall. A few days ago we declared the revival of operation Icarus. Today we have continuously taken down the website of the Bank of Greece," the group says in a video on You Tube.

"This marks the start of a 30-day campaign against central bank sites across the world."

- - - - - - - - - - - - - - - -

http://www.nbcnews.com/tech/security/anonymous-attacks-greek-central-bank-says-30-day-global-hack-n567601







.
Big_Bear Offline
#113 Posted: Thu, May 5 2016, 11:35 AM EST
Joined: 09-27-2008
Posts: 2,664
Hackers are trading millions of Gmail, Hotmail, Yahoo logins
Change your password right now. Like NOW!
By N. Ingraham
May 4 2016, 6:38pm ET

Source: Reuters

Email services including Gmail, Yahoo Mail and Hotmail have fallen victim to a hack, exposing usernames and passwords for millions of users. According to Reuters, a huge data breach consisting of some 273.3 million online accounts has been reported by security expert Alex Holden of Hold Security. All told, the data breach contains 57 million accounts for the Russian email provider Mail.ru, along with 40 million Yahoo Mail credentials, 33 million Hotmail accounts and 24 million Gmail accounts.

In addition, the breach reportedly contains hundreds of thousands of German and Chinese email addresses as well as thousands of username / password combos that appear to belong to employees from US banking, manufacturing and retail companies.

Hold Security apparently came upon this data directly from the hacker, who was selling the data set for the curiously low sum of less than $1. Holden instead told the hacker that he would post "favorable comments" about him in various hacker forums; that was enough to get the hacker to turn the data over. About ten days ago, Hold Security started informing the companies affected of the data breach; the company's policy is to return stolen data to the companies affected.

It's worth noting that while tens of millions of Gmail, Yahoo and Hotmail accounts were affected, the total percentage of accounts compromised compared to the total in circulation is relatively small. Google recently announced that more than one billion people are using Gmail, for example. But given people's propensity to reuse passwords, this breach could have wider-reaching effects. Either way, better safe than sorry -- if you haven't changed your password recently, now is as good a time as any. Also, turn on two-factor authentication!


- - - - - - - - - - - - - - - -

http://www.engadget.com/2016/05/04/gmail-hotmail-yahoo-email-data-breach/





.
Big_Bear Offline
#114 Posted: Wed, May 25 2016, 8:02 PM EST
Joined: 09-27-2008
Posts: 2,664
From my E-mail
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Notice of Data Breach ———

You may have heard reports recently about a security issue involving LinkedIn. We would like to make sure you have the facts about what happened, what information was involved, and the steps we are taking to help protect you.

What Happened? ———

On May 17, 2016, we became aware that data stolen from LinkedIn in 2012 was being made available online. This was not a new security breach or hack. We took immediate steps to invalidate the passwords of all LinkedIn accounts that we believed might be at risk. These were accounts created prior to the 2012 breach that had not reset their passwords since that breach.

What Information Was Involved? ———

Member email addresses, hashed passwords, and LinkedIn member IDs (an internal identifier LinkedIn assigns to each member profile) from 2012.

What We Are Doing ———

We invalidated passwords of all LinkedIn accounts created prior to the 2012 breach that had not reset their passwords since that breach. In addition, we are using automated tools to attempt to identify and block any suspicious activity that might occur on LinkedIn accounts. We are also actively engaging with law enforcement authorities.

LinkedIn has taken significant steps to strengthen account security since 2012. For example, we now use salted hashes to store passwords and enable additional account security by offering our members the option to use two-step verification.

What You Can Do ———

We have several dedicated teams working diligently to ensure that the information members entrust to LinkedIn remains secure. While we do all we can, we always suggest that our members visit our Safety Center to learn about enabling two-step verification, and implementing strong passwords in order to keep their accounts as safe as possible. We recommend that you regularly change your LinkedIn password and if you use the same or similar passwords on other online services, we recommend you set new passwords on those accounts as well.

For More Information ———

If you have any questions, please feel free to contact our Trust & Safety team at [email protected]. To learn more visit our official blog.






.
Big_Bear Offline
#115 Posted: Thu, May 26 2016, 12:24 PM EST
Joined: 09-27-2008
Posts: 2,664
I suddenly have an avalanche of PM's.

Not to worry, I'll be clearing them out one by one.

Thanks




.
Big_Bear Offline
#116 Posted: Mon, Jun 6 2016, 12:02 PM EST
Joined: 09-27-2008
Posts: 2,664
Mark Zuckerberg's social media accounts hacked

Brett Molina, USA TODAY 12:52 p.m. EDT June 6, 2016

- - - - - - - - - -

Having your social media accounts hacked can happen to any one. Just ask Mark Zuckerberg.

The Facebook CEO's accounts on Twitter and Pinterest were compromised by hackers, according to publishedreports. The accounts have since been secured.

A group called OurMine Team is claiming credit for the hack, citing Zuckerberg's credentials were discovered in a database of compromised LinkedIn accounts. The professional social network told millions of its users last month to change passwords after login information from as many as 100 million users swiped in 2012 surfaced on the internet.

= = = = = = = = = = =

http://www.usatoday.com/story/tech/news/2016/06/06/mark-zuckerbergs-social-media-accounts-hacked/85477432/?hootPostID=faec599064ec5e0cb9fc3d62fb69ae70






.
Stinkdyr Offline
#117 Posted: Wed, Jun 8 2016, 9:57 AM EST
Joined: 06-16-2009
Posts: 9,948
jjanecka wrote:
Best to just to away with social security entirely.



Hey man, don't come on this site talking commonsense, dude.
The Republicrats and Demicans can't handle it.

fog
Big_Bear Offline
#118 Posted: Thu, Jun 9 2016, 11:57 AM EST
Joined: 09-27-2008
Posts: 2,664
fenderbendertex [OP] Did everything ever get straightened out?

How many hours did it take of your time?
Did you have to take any time off from work?
Did you have to hire an attorney?
Did you have to spend any money?
Big_Bear Offline
#119 Posted: Tue, Jun 14 2016, 11:10 AM EST
Joined: 09-27-2008
Posts: 2,664
Topped for Fender
Big_Bear Offline
#120 Posted: Wed, Jun 15 2016, 2:42 PM EST
Joined: 09-27-2008
Posts: 2,664
Russians steal research on Trump in hack of U.S. Democratic Party

WASHINGTON | By Dustin Volz and Emily Stephenson

Tue Jun 14, 2016 4:42pm EDT

Hackers believed to be working for the Russian government broke into the Democratic National Committee's computer network, spied on internal communications and accessed research on presumptive Republican presidential nominee Donald Trump, the committee and security experts said on Tuesday.

Two separate groups entered the DNC's system, and one read email and chat communications for nearly a year before being detected, according to the committee and CrowdStrike, the cyber firm that helped clean up the breach.

Russian spies also targeted the networks of Trump and Democratic presidential candidate Hillary Clinton, as well as the computers of some Republican political action committees, the Washington Post quoted U.S. officials as saying, although details were not available.

A Clinton campaign official said there was no evidence the campaign's information systems had been hacked.



http://www.reuters.com/article/us-usa-election-hack-idUSKCN0Z0205






.
Big_Bear Offline
#121 Posted: Tue, Jun 21 2016, 2:24 PM EST
Joined: 09-27-2008
Posts: 2,664
Acer online store hacked: Customers' credit card details and private data exposed

= = = = = = = = = =

Taiwanese consumer electronics manufacturer Acer has revealed that its US online store Acer.com has suffered a data breach that potentially could have affected every single customer who accessed the website over the past 12 months.

Acer has sent a letter informing all users of its online store in the US that they have might have had their names, addresses, payment card numbers, card expiry dates and card security CCV three digit numbers comprised if they accessed the website between 12 May 2015 and 28 April 2016.

The firm is not revealing how many users have been impacted by the data breach, but it says that following an investigation by its staff and a team of outside cybersecurity experts, it can confirm that no evidence was found of the attackers gaining access to user login credentials like usernames and passwords.

= = = = = = = = = =

http://www.msn.com/en-us/money/technology/acer-online-store-hacked-customers-credit-card-details-and-private-data-exposed/ar-AAhitcR?ocid=ansmsnmoney11


= = =

"it can confirm that no evidence was found of the attackers gaining access to user login credentials like usernames and passwords."

The FTC said that years ago. In a legal brief against a very popular idtheft company, the FTC said that id theft cannot be detected nor prevented.


.
Big_Bear Offline
#122 Posted: Tue, Jun 21 2016, 2:24 PM EST
Joined: 09-27-2008
Posts: 2,664
GoToMyPC hit with hack attack; users need to reset passwords

= = = = = = = = = =

If you use Citrix’s GoToMyPC remote desktop access service, you need to change your password. According to a post published to GoToMyPC’s system status page, the service experienced a hack attack this weekend, and it’s now requiring all users to reset their passwords before logging in to the service.

“Unfortunately, the GoToMYPC service has been targeted by a very sophisticated password attack,” the update reads. “To protect you, the security team recommended that we reset all customer passwords immediately.”

According to GoToMyPC, it wasn’t immediately clear that it was experiencing an attack: On Saturday, users reported being unable to log into their accounts, and were being forced to reset their password. Several hours later, GoToMyPC warned users of the attack.

= = = = = = = = = =

http://www.pcworld.com/article/3085434/security/gotomypc-hit-with-hack-attack-users-need-to-reset-passwords.html
Big_Bear Offline
#123 Posted: Thu, Jul 14 2016, 11:12 AM EST
Joined: 09-27-2008
Posts: 2,664

The Chinese government likely hacked computers at the Federal Deposit Insurance Corporation in 2010, 2011 and 2013, according a congressional report on Wednesday that cited an internal investigation by the banking regulator.

"Even the former Chairwoman's computer had been hacked by a foreign government, likely the Chinese," staff at the U.S. House of Representatives Committee on Science, Space and Technology said in the report.

The Chinese Embassy in Washington did not have immediate comment on the allegations.

China has long been a prolific hacking adversary for the United States, although intelligence officials believe Beijing has decreased its hacking activity since signing a pledge with Washington last September to refrain from breaking into computer systems for the purposes of commercial espionage.

The congressional report provided the latest example of how deeply Beijing has penetrated U.S. government computers.

- - - - -

http://www.msn.com/en-us/money/markets/china-likely-hacked-us-banking-regulator-report-finds/ar-BBuiu7c?ocid=ansmsnnews11
gmelhaff Offline
#124 Posted: Thu, Jul 14 2016, 11:06 PM EST
Joined: 10-10-2015
Posts: 3
Anyone had their credit card number stolen just after using cigarbid.com? Its the only place I'd used my card for awhile and the only site that had it stored at their site and then the other day my CC company notified me that someone in Turkey was racking up charges on it. Could be cigarbid.com got hacked and they don't know it.
Big_Bear Offline
#125 Posted: Fri, Jul 15 2016, 12:20 PM EST
Joined: 09-27-2008
Posts: 2,664
Interesting post.

The FTC said that id theft can't be detected so we don't know. I am sure that CigarBid uses the best technology they have available to them. But frankly that wouldn't matter because the FTC also said that id theft can't be prevented. If you think CBid's systems are more robust than the FDIC systems (see thread before yours) then I wouldn't worry much.

It's interesting that the article above was posted recently (07/13/2016), but it was reporting on hacks that happened 3, 5, and 6 years ago. It sometimes takes awhile fore the hacked info to be used.

Sometimes folks will tell me that they haven't been affected by hackers. I ask them "How do you know?"

The fact is that the vast majority of the people on this forum have had their personal info compromised. But they won't find out about it for a year or two from now.





.
DrafterX Offline
#126 Posted: Fri, Jul 15 2016, 2:08 PM EST
Joined: 10-18-2005
Posts: 98,551
Wow.. clean-up on isle 4... talk about potential reputation damage... Think
Big_Bear Offline
#127 Posted: Fri, Jul 15 2016, 5:06 PM EST
Joined: 09-27-2008
Posts: 2,664
To be clear, I'm not saying that most of us have had our personal identification compromised BECAUSE we are active in this forum. I'm saying it because your odds of having your identity stolen is 1 in 30 (children it's 1 in 10). Some people have their info"out there" but no one is using it to impersonate them. Having your info "out there" is not the same as identity theft.

Compromised - someone has your identifying data

Identity theft - someone uses that data to impersonate you.

So more than 1 in thirty have their identifying info compromised. And I'm comfortable guessing that, in light of the numbers of high-level high-government secured servers hacked (almost weekly), the vast majority of us have our info "out there."

I've had my LinkedIn account compromised. So far, to my knowledge, no person is using the info to say they're me.

I have no connection to these people, but you can go to https://haveibeenpwned.com/ and enter your e-mail address. It will check databases of breached content to see if you've been compromised.

It's free.



.
Damarie@Cigarbid Offline
#128 Posted: Mon, Jul 18 2016, 9:01 AM EST
Joined: 08-08-2011
Posts: 115
gmelhaff wrote:
Anyone had their credit card number stolen just after using cigarbid.com? Its the only place I'd used my card for awhile and the only site that had it stored at their site and then the other day my CC company notified me that someone in Turkey was racking up charges on it. Could be cigarbid.com got hacked and they don't know it.


PM sent Gmelhaff
Big_Bear Offline
#129 Posted: Wed, Aug 3 2016, 10:58 AM EST
Joined: 09-27-2008
Posts: 2,664
The Morning Download: Bitcoin Hack Underscores Persistent Challenge of Securing Digital Currency

By Steve Rosenbush | Aug 3, 2016 8:01 am ET

Good morning. Bitfinex, the Hong Kong-based exchange where bitcoin is traded, said it was hacked, sending the price of the digital currency lower, the WSJ reports. The possible theft of $65 million in bitcoin follows the $60 million theft in June of rival digital currency ethereum, which together constitute something of a digital currency crime wave. “Securing the bitcoin trading platform has proved elusive,” the WSJ notes.

There’s plenty of incentive to close the security problems, given that blockchain, the underlying technology, can make markets more efficient by removing the middleman. (See our CIO Explainer: What Is Blockchain?) International Business Machines Corp. said it is using blockchain to resolve customer disputes, as CIO Journal reported.

Perhaps it’s unreasonable to expect digital technology to eliminate crime as we know it. But there’s something uniquely disarming about the risk of theft in cyberspace, where vulnerabilities can appear to be more systemic in nature.




= = = = = = = = = = = = = = = = = = = =

http://blogs.wsj.com/cio/2016/08/03/the-morning-download-bitcoin-hack-underscores-persistent-challenge-of-securing-digital-currency/





- - -

Anybody using ApplePay or PayPal?


.
Big_Bear Offline
#130 Posted: Wed, Aug 24 2016, 10:35 AM EST
Joined: 09-27-2008
Posts: 2,664
Reporters at New York Times, other U.S. media, hacked - CNN

http://www.msn.com/en-us/news/us/reporters-at-new-york-times-other-us-media-hacked-cnn/ar-BBvYeqD?OCID=ansmsnnews11

WASHINGTON, Aug 23 (Reuters) - The FBI and other U.S. security agencies are investigating cyber breaches targeting reporters at the New York Times and other U.S. news organizations that are thought to have been carried out by hackers working for Russian intelligence, CNN reported on Tuesday, citing unnamed U.S. officials.

"Investigators so far believe that Russian intelligence is likely behind the attacks and that Russian hackers are targeting news organizations as part of a broader series of hacks that also have focused on Democratic Party organizations, the officials said," CNN said.

Reuters could not immediately confirm the report. The FBI declined to comment, and representatives for the U.S. Secret Service, which has a role in protecting the country from cyber crime, did not immediately reply to a request for comment.

The intrusions were detected in recent months, according to CNN. Citing the U.S. officials, it said the Times had hired private security investigators to work with national security officials in assessing the breach.

Representatives for the Times could not be immediately reached for comment.






.
Mr. Jones Offline
#131 Posted: Wed, Aug 24 2016, 8:02 PM EST
Joined: 06-12-2005
Posts: 19,423
I recently got a very small car loan to buy a
Used car...
Lifelock never even called me to check if it was legit...
The only time I hear from them is 3-4 times a year when they say everything is ok...
But they always tell me when I get billed
$99.00 per year for the service.

Big bear, what company-nies? Do you like or use?

I know you have mentioned a few,
But can you
Refresh their names again...
And yearly fees?

Thanks,
Mr. Jones
Covfireman Offline
#132 Posted: Thu, Aug 25 2016, 1:17 AM EST
Joined: 09-03-2015
Posts: 809
Depending on who your homeowners insurer is some of those have coverage for it and their coverage is alot broader than these specialty companies like life lock .


Why worr about it just keep a few identities. If one gets to dirty change to a new one . Never use your own identity then it can't be stolen
Big_Bear Offline
#133 Posted: Thu, Sep 22 2016, 11:54 AM EST
Joined: 09-27-2008
Posts: 2,664
Report: Yahoo may confirm massive data breach

SAN FRANCISCO — Internet portal and search firm Yahoo may confirm this week a massive data breach that exposed information about tens of millions of its users, according to the technology news website Recode.

The confirmation would follow a Yahoo investigation into claims that surfaced in early August that a hacker using the name "Peace" was trying to sell the usernames, passwords and dates of birth of Yahoo account users on the dark web — a black market of thousands of secret websites.

A Yahoo representative was not immediately available to comment on the report.

The breach may affect up to 200 million user accounts, Recode reported.

= = = = = = = = = = = = = = = = = = = = =


http://www.usatoday.com/story/tech/2016/09/22/report-yahoo-may-confirm-massive-data-breach/90824934/




.
Big_Bear Offline
#134 Posted: Thu, Oct 20 2016, 1:00 PM EST
Joined: 09-27-2008
Posts: 2,664
Arrested Russian linked to theft of 117 million LinkedIn passwords

▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃

A Russian citizen arrested in Prague was wanted in connection to the theft of 117 million LinkedIn passwords and login credentials, the social networking firm confirmed.

"Following the 2012 breach of LinkedIn member information, we have remained actively involved with the FBI's case to pursue those responsible," LinkedIn said in a statement. "We are thankful for the hard work and dedication of the FBI in its efforts to locate and capture the parties believed to be responsible for this criminal activity."

Czech police, who announced the Russian's arrest on Wednesday, said that he was wanted by the FBI on suspicion of hacking U.S. targets. Interpol had also issued a international warrant -- or "red notice" -- for his arrest.

▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃



http://money.cnn.com/2016/10/20/technology/russian-hacker-arrested-linkedin-password/index.html





.
Big_Bear Offline
#135 Posted: Thu, Dec 15 2016, 2:39 PM EST
Joined: 09-27-2008
Posts: 2,664
Suspected JP Morgan hacker arrested after returning from Moscow

NEW YORK -- A U.S. citizen living in Moscow was arrested Wednesday after he flew to the United States to surrender to face charges he stole contact information for over 100 million customers of U.S. financial institutions, brokerage firms and financial news publishers, authorities said.

Joshua Samuel Aaron, 32, was arrested at Kennedy Airport on Wednesday. He pleaded not guilty to a 22-count indictment charging him with conspiracy, computer hacking, securities fraud and wire fraud, among other charges.

▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃▃

http://www.cbsnews.com/news/joshua-samuel-aaron-suspected-jp-morgan-hacker-arrested-after-returning-from-moscow/



.
Big_Bear Offline
#136 Posted: Mon, Jan 2 2017, 12:36 PM EST
Joined: 09-27-2008
Posts: 2,664
So by now most of us are pretty comfortable when we see the word "hacked" in the news.

Back when fender started this thread, incidents were few and far between. Nowadays you can't use a search engine without cybersecurity being in the headlines.

It seems to be the new normal.

If you're reading this you've very likely been hacked (although your identity may not have been stolen yet).

Since I'm in the business, I often get asked about some basic steps that people should consider.

Some of my advice can't be posted because of forum rules.

If you'd like to find out more you can e-mail me at [email protected]

Please don't PM me. That's a really awkward system and a PITA to use.

Hope this helps!



.
Big_Bear Offline
#137 Posted: Thu, Jan 5 2017, 3:22 PM EST
Joined: 09-27-2008
Posts: 2,664
QuestDiagnostics
3 Giralda Farms
Madison, New Jersey 07940

December 12, 2016

[Patient Name]
[Patient Address line one]
[Patient Address line two]

Dear [Patient Name]:

Quest Diagnostics regrets to notify you of a breach of your Protected Health Information (PHI) which we became aware of on November 28, 2016. Here are the details of the breach:

On November 26th an unauthorized third party accessed the MyQuest by Care360® internet application and obtained PHI of approximately 34,000 patients. The data included name, date of birth, lab results, and, in some instances, telephone numbers.

The affected information did not include Social Security numbers, credit card information, insurance or other financial information.

When the intrusion was discovered, we immediately took steps to stop any further unauthorized activity. We are taking steps to prevent similar incidents from happening in the future, and are working with a leading cybersecurity firm to assist with our investigation and to further evaluate our systems. We have also reported the incident to federal law enforcement authorities.

Quest Diagnostics has no evidence that any information has been misused in any way, so we do not believe that you need to take any steps at this time to protect yourself in response to this breach.

We sincerely apologize for this breach of your information. We have established a dedicated toll free number for you to call if you have any questions regarding this incident. The number is (888) 320-9970 and can be reached Monday through Friday, between 9:00 a.m. and 7:00 p.m. Eastern Time.

Sincerely,
Carl A. Landorno
Executive Director, Compliance Operations & Privacy Officer

= = = = = = =

from wikipedia
https://en.wikipedia.org/wiki/Quest_Diagnostics

Quest Diagnostics Incorporated is a Fortune 500 company providing clinical laboratory services with headquarters in Madison, New Jersey. Founded in 1967 as Metropolitan Pathology Laboratory, Inc., it became an independent corporation with the Quest name on December 31, 1996. In addition to the United States, Quest Diagnostics also runs operations in United Kingdom, Mexico, Brazil, Puerto Rico and a laboratory in India and also has collaborative agreements internationally with various hospitals and clinics. It is a member of the Fortune 500 and the S&P 500, with corporate headquarters located in Madison, New Jersey. The company has approximately 44,000 employees, generates more than $7 billion in revenue and offers access to diagnostic testing services for cancer, cardiovascular disease, infectious disease and neurological disorders.


= = = = = = =

This begs a lot of questions.






.
Big_Bear Offline
#138 Posted: Tue, Jan 10 2017, 2:17 PM EST
Joined: 09-27-2008
Posts: 2,664
This is in follow up to #113 above:

Yahoo says one billion accounts exposed in newly discovered security breach

= = = = = = =

By Jim Finkle and Anya George Tharakan

(Reuters) - Yahoo Inc warned on Wednesday that it had uncovered yet another massive cyber attack, saying data from more than 1 billion user accounts was compromised in August 2013, making it the largest breach in history.

The number of affected accounts was double the number implicated in a 2014 breach that the internet company disclosed in September and blamed on hackers working on behalf of a government. News of that attack, which affected at least 500 million accounts, prompted Verizon Communication Inc to say in October that it might withdraw from an agreement to buy Yahoo's core internet business for $4.83 billion.


http://finance.yahoo.com/news/yahoo-says-1-billion-accounts-002200349.html




.
delta1 Offline
#139 Posted: Tue, Jan 10 2017, 2:21 PM EST
Joined: 11-23-2011
Posts: 28,788
I've had three credit card accounts jacked this past year...could be worse...didn't lose anything but time and aggravation having to close accounts, fill out affidavits, open new accounts.
deadeyedick Offline
#140 Posted: Tue, Jan 10 2017, 6:36 PM EST
Joined: 03-13-2003
Posts: 17,089
I was just notified that my card was used for two $50 charges for phone calls from a prison in Alabama. Iff'n it was Cali I would blame MACS.
Big_Bear Offline
#141 Posted: Tue, Jan 17 2017, 1:57 PM EST
Joined: 09-27-2008
Posts: 2,664
Delta - That's sounds like identity theft. How much time do you think you spent? Just curious.

Deadeye - Sounds like fraud, not necessarily id theft.

Most of us have been the victim of a hack. It's just a matter of time before someone uses the info.

$400 on a credit card is no big deal. They usually just remove it with a phone call and you're done. When someone opens a small business line of credit, that $200,000 is going to take more than a phone call. Of course if you go to jail because someone got booked and used your ID, well, it's a much more complicated and dangerous situation.

Our program does complete restoration with one phone call. Lifelock is just now catching on the restoration is WAY better than monitoring. We've been on it for years.

Credit monitoring is a car alarm; restoration service is like car insurance.

I think the $100/year per family is well worth it.








.
Big_Bear Offline
#142 Posted: Thu, Feb 16 2017, 11:40 AM EST
Joined: 09-27-2008
Posts: 2,664
More Yahoo accounts may have been compromised

Associated Press 02/15/2017

LONDON — Yahoo is warning users of potentially malicious activity on their accounts between 2015 and 2016, the latest development in the internet company's investigation of a mega-breach that exposed 1 billion users' data several years ago.

Yahoo confirmed Wednesday that it was notifying users that their accounts had potentially been compromised but declined to say how many people were affected.

In a statement, Yahoo tied some of the potential compromises to what it has described as the "state-sponsored actor" responsible for the theft of private data from more than 1 billion user accounts in 2013 and 2014. The stolen data included email addresses, birth dates and answers to security questions.

= = = = = = = = =

http://www.msn.com/en-us/news/technology/more-yahoo-accounts-may-have-been-compromised/ar-AAmYTcB?OCID=ansmsnnews11





.
MACS Offline
#143 Posted: Thu, Feb 16 2017, 11:44 AM EST
Joined: 02-26-2004
Posts: 79,776
deadeyedick wrote:
I was just notified that my card was used for two $50 charges for phone calls from a prison in Alabama. Iff'n it was Cali I would blame MACS.


Pffft. I ain't gotta pay for phone calls.
Mr. Jones Offline
#144 Posted: Thu, Feb 16 2017, 1:45 PM EST
Joined: 06-12-2005
Posts: 19,423
***KUDO's to.... BIG_BEAR !!!!

For continuing to TOP THIS THREAD
and all the GREAT INFORMATION!!!

Thanks again, always an informative READ...

ONE THING I HAVE LEARNED FROM THIS THREAD...

"IT PAYS V.E.R.Y. WELL ....TO BE A EXPERT HACKER"
& you can sit in your mom's basement
while you do it...
.routing the trail through thousands of fake
Controllers, relays, routers and mainframes world wide...
Then set up alias's and shell companies plus banking accounts all over the world...
Krazeehorse Offline
#145 Posted: Thu, Feb 16 2017, 2:25 PM EST
Joined: 04-09-2010
Posts: 1,958
My identity was stolen once. Credit score actually went up.
frankj1 Offline
#146 Posted: Thu, Feb 16 2017, 8:00 PM EST
Joined: 02-08-2007
Posts: 44,221
Krazeehorse wrote:
My identity was stolen once. Credit score actually went up.

I gotta be your biggest fan! What a great line.
Big_Bear Offline
#147 Posted: Mon, Feb 20 2017, 12:30 PM EST
Joined: 09-27-2008
Posts: 2,664
For the curious:

2017 Experian Data Breach Industry Forecast


http://www.experian.com/assets/data-breach/white-papers/2017-experian-data-breach-industry-forecast.pdf



.
Big_Bear Offline
#148 Posted: Thu, Mar 9 2017, 1:24 PM EST
Joined: 09-27-2008
Posts: 2,664
Identity thief mistakenly given inmates' Social Security numbers
- - -
MANSFIELD, Ohio — The Ohio Department of Rehabilitation and Corrections mistakenly released the Social Security numbers of more than 2,000 inmates at the Chillicothe Correctional Institution to a convicted identity thief as part of a public records request.

"This is a situation that we are taking very seriously. We are taking prompt action in investigating the circumstances surrounding the release of this protected information. We are actively looking into identity theft monitoring services for those whose information was released," said JoEllen Smith, a spokeswoman with the Ohio Department of Rehabilitation and Corrections.

- - -

http://www.msn.com/en-us/news/crime/identity-thief-mistakenly-given-inmates-social-security-numbers/ar-AAo1Tk7?OCID=ansmsnnews11




.
Big_Bear Offline
#149 Posted: Mon, Mar 13 2017, 11:26 AM EST
Joined: 09-27-2008
Posts: 2,664

The World Wide Web's inventor warns it's in peril

- - -

Tim Berners-Lee, who invented the World Wide Web, now wants to save it.

The computer scientist who wrote the blueprint for what would become the World Wide Web 28 years ago today is alarmed at what has happened to it in the past year.

"Over the past 12 months, I’ve become increasingly worried about three new trends, which I believe we must tackle in order for the web to fulfill its true potential as a tool which serves all of humanity," he said in a statement issued from London. He cited compromised personal data; fake news that he says has "spread like wildfire"; and the lack of regulation in political advertising, which he says threatens democracy.

- - -

http://www.msn.com/en-us/news/technology/the-world-wide-webs-inventor-warns-its-in-peril/ar-AAo9BHm?OCID=ansmsnnews11



.
elRopo Offline
#150 Posted: Mon, Mar 13 2017, 11:29 AM EST
Joined: 02-17-2014
Posts: 905
I thought All Gore invented it
Users browsing this topic
Guest
4 Pages<1234>
Back to Top