The personal information of millions of American car owners who sign up for a highway assistance program offered by the company drivesure is being provided online. The cybercriminals unlawfully hacked the business and then broke up with multiple directories on cracking forums, the safety vendor Risk Based Secureness said in a blog post in January 5 this year. The databases included names, handles, cellular phone quantities and electronic digital mails along with info on the customers’ vehicles which include their generate, model and VIN quantity.
In addition , the hackers produced over 93 thousand bcrypt hashed account details public. Although bcrypt much more secure than SHA1 or perhaps MD5, it could possibly still be brute forced in the event the passwords will be weak, corresponding to Risk Based Reliability. Using strong passwords and the removal of extra consideration details just like mobile amounts or electronic mails that you will not use reduces the amount of PII that cyber thieves have access to.
Data theft by companies that sell software or products and services to others continues to be problems. Just this week the auditor for the state of Washington admitted that its employees may have obtained their private information stolen by a hacker who have gained entry to the company’s system following purchasing a product from the firm Accellion that helps organizations transfer large files.
Also, the cybersecurity company SolarWinds suffered a drivesure data breach break of its systems that led to employee data theft from a large number of employees in various spots across the country. Source chain hacks are a common risk for businesses that work with many other businesses to provide goods and services.