Data Breach
BleepingComputer reports that Chainalysis first said the impact of an October 30 incident was limited, but later updates showed that usernames and password hashes for all customers were exposed in an on path attack. TechRadar adds that names and live tokens were also exposed. The company took its login portal
Data Breach
DigiCert has told customers that a server migration mistakenly left an internal business system reachable from the internet, according to BleepingComputer. SC Media reports the system included a self registration feature that let outsiders create accounts, and an authorization flaw allowed those accounts to read archived customer data between June
Data Breach
BleepingComputer reports that Iris Ohyama, a Japanese household products maker, suffered unauthorized access to a third party cloud service used by its Iris Plaza online store. The company disclosed the incident on October 29 and suspended the site. Roughly 7.7 million people may be affected, including up to 5.
Data Breach
CM Alliance's October roundup reports that an anonymous hacker gained access to Denmark's Central Person Register through a former employee's account, which was reportedly protected only by the password 123456. About 8.8 million people had names, addresses, and personal registration numbers exposed. The