By: Joe Purcell  REF: securitypronews

Staff Writer
Thursday:06.30.11

It's been a busy week for hacking and data loss news: (1) T&T Supermarket lost up to 58,000 records of customers and job applicants, (2) Gannet Government Media Corp lost names, passwords, emails, duty status, pay grade, and branch of service of various military personnel, (3) Arizona Department of Public Safety supposedly lost names, addresses, phone numbers, passwords, SSN numbers, online dating account information, voicemails, chat logs, and pictures of some officers' girlfriends, and the security breach of the week goes to (4) Groupon's Indian subsidiary, Sosasta, which exposed 300,000 email accounts and passwords. Though some of these occurred earlier in the month, the organizations are just now reporting the incidents.

1. T&T Supermarket

The T&T attacks against its customers and suppliers took place on June 6, 7, 11, and 14-17 which redirected customers ordering online or job applicants to a malicious site. According to one article, information like credit card numbers, date of birth, and SSN numbers were not collected and therefore could not have been compromised. The company just reported the incident last Friday and how the attack was accomplished is still being investigated.

2. Gannet Government Media Corp

On June 7th, attackers accessed names, passwords, and emails; duty status, paygrade, and branch of service of military personell. The organization produces defense News and other publications tailored to the US Army, Navy, Air Force and Marine Corps, according to Reuters. This could be part of the recent Operation Anti-Security, which we will mention later. The organization just reported the incident this past Monday, and the source and method of the attack have yet to be determined.

3. Arizona Department of Public Safety

Perhaps this too is part of Operation Anti-Security. The "private emails, social networking accounts, photos and other personal information which was claimed from at least a dozen officers" were posted online, according to an article. The group said it was looking for humiliating information and may have obtained even more information, such as emails, passwords, and SSN numbers.

4. Groupon's Sosasta (Breach of the Week)

Groupon's Indian subsidiary, Sosasta, exposed 300,000 email addresses and passwords last Saturday allegedly by storing a plain text SQL file which was then indexed by Google. According to The Register, the emails were discovered by Daniel Grzelak (@dagrz) by searching for "filetype:sql", "password", and "gmail." He then posted on Twitter that he had notified Risky Business. However, the company was quick to respond and reported the incident this past Monday.

Continue reading this article.
 

More Information and trial copies of Secure Hive Click Here!