Search This Blog
Powered by Blogger.

Blog Archive

Labels

Load More
Trendy Right Now

Popular Posts

Showing posts with label Singtel. Show all posts
User Privacy
Data Breach Hackers Phishing Attacks Singtel User Privacy

Shein Parent Firm Zoetop Fined $1.9 Million

A $1.9 million fine was imposed on Zoetop, the parent company for the massive retailers Romwe and Shein, for failing to properly notify customers of a data breach that reportedly affected millions of users.

In 2018, 39 million Shein accounts' login information was stolen after its parent business, Zoetop, was attacked by hackers. Letitia James, the attorney general for New York, claimed that Zoetop had exaggerated the scope of the breach and had informed just a portion of the consumers who were impacted.

According to the office of the New York Attorney General, Zoetop failed to protect consumer data and failed to notify millions of account holders that their personal information had been compromised.

"To safeguard customers from fraud and identity theft, Shein and Romwe must tighten their cybersecurity protocols. This agreement should serve as a strong reminder to businesses that they need to improve their digital security protocols and communicate openly with customers, anything less won't be accepted" Letitia James, the attorney general of New York, said.

More generally, according to Patrick Wragg, manager of cyber incident response at Integrity360, there are significant risks associated with a company failing to disclose that it has been attacked.

Letitia James alleged that Zoetop had exaggerated the scope of the hack, first claiming that only 6.42 million Shein accounts had been compromised. The majority of the 39 million impacted account holders were not informed, and all of those accounts did not require a forced password reset. 

Romwe and Shein have grown to be well-liked online shopping venues for 'Gen Z' and millennial consumers looking for affordable, trendy fashion items.

However, Ms. James claimed that the companies' lax cyber-security made it simple for hackers to steal customers' personal information. To safeguard customers, the attorney general urged the businesses to 'button up their cyber-security measures.' 

Shein fully cooperated with the New York attorney general, according to a spokeswoman, and they are happy with how the situation turned out.

The revelation about Zoetop follows two data breaches in Australia that had an impact on Singtel subsidiary companies.


Read more »
Singtel
Accellion Data Breach Personal Information Singtel

Personal Information of Nearly 1,30,000 Singtel Users' Stolen in a Data Breach

 

Singapore’s leading telecom company Singtel confirmed the exploitation of a third-party file-sharing system Accellion which led to a massive data breach that affected nearly 1,30,000 clients. Private information of clients including National Registration Identity Card numbers and a combination of names, dates of birth, contact numbers, and addresses have been stolen by the hackers. 

Singtel, an associate of Bharti Airtel completed its initial investigation into the data leak and discovered which files on the Accellion file sharing system were illegally accessed. Hackers also managed to steal the bank account details of 28 former Singtel employees and credit card details of 45 staff members of a corporate client with Singtel mobile lines, the company stated in a news release.

Singtel said “some information from 23 enterprises, including suppliers, partners, and corporate customers, was also stolen. The company has started notifying all affected individuals and enterprises to help them and their staff manage the possible risks involved and take appropriate follow-up action.”

Yuen Kuan Moon, CEO of Singtel’s Group said in a news release that we are extremely apologetic for the inconvenience to our loyal customers due to this data breach and assured that we are taking all the necessary steps to beef up the security and negate the potential threats.

CEO said “data privacy is paramount; we have disappointed our stakeholders and not met the standards we have set for ourselves. Given the complexity and sensitivity of our investigations, we are being as transparent as possible and providing information that is accurate to the best of our knowledge. We are doing our level best to keep our customers supported in mitigating the potential risks.”

Telecom company explained that a large part of the stolen data comprises internal information that is non-sensitive such as data logs, test data, reports, and emails. Threat actors targeted Accellion file transfer appliance (FTA); a third-party file-sharing system used by Singtel to exploit the vulnerabilities.

When the company was initially alerted to exploits against the system in December last year, Singtel ‘promptly applied’ a series of patches provided by Accellion to patch the vulnerabilities. On January 23, Accellion advised that a new flaw has emerged that rendered the earlier patches previously applied in December incapable. Since January 23, the FTA system has been kept offline.
Read more »
Subscribe to: Posts (Atom)