Data breaches in 2020 are off to a dangerous start as unsecured databases continue to expose consumer information by the millions. In 2019, the Federal Trade Commission (FTC) received more than 3.2 million reports for fraud and scams, and today’s sophisticated hackers are continually refining their tactics to compromise sensitive personal and business information. Be sure to catch our upcoming 15-minute webinar on how to safeguard yourself and your business from these threats.
Here are the recent data breaches that made headlines in January 2020:
Restaurant and entertainment corporation Landry’s announced a point-of-sale malware attack that exposed it’s customers’ Personally Identifiable Information (PII) including credit and debit card numbers, expiration dates, verification codes, and cardholder names.
Peekaboo Moments, an app for parents post memories of their children, left an unsecured database on an Elasticsearch server. Email addresses, geographic location data, detailed device data, and links to photos and videos posted by an undisclosed number of parents have been impacted. The app has been downloaded 1 million times since launching in 2012.
Children’s clothing retailer Hanna Andersson exposed customer’s sensitive payment information. Online shoppers who placed an order between September 16, 2019, to November 11, 2019, had their names, shipping addresses, billing addresses, payment card numbers, CVV codes, and expiration dates impacted by the Magecart skimming attack.
Over 280 million Microsoft customer support records were disclosed by an unsecured database. The database exposed email addresses, IP addresses, and support case details but no personal information.
Over 85,000 medical marijuana patients and recreational users had their names, date of births, phone numbers, emails, street addresses, patient names and medical ID numbers, cannabis variety and the quantity purchased, total transaction costs, date received, and photographs of scanned government and employee IDs exposed. THSuite, the point-of-sale system of marijuana dispensaries, is responsible for disclosing their customers’ personal information after leaving their database unprotected.