Cooler Master Hit By Data Breach Exposing Customer Information

erek

[H]F Junkie
Joined
Dec 19, 2005
Messages
11,298
The threat actor also shared data samples, allowing BleepingComputer to confirm with numerous customers listed in the breach that their data was accurate and that they recently requested support or an RMA from Cooler Master. Other data in the samples included product information, employee information, and information regarding emails with vendors. The threat actor claimed to have partial credit card information, but BleepingComputer could not find this data in the data samples. The threat actor now says they will sell the leaked data on hacking forums but has not disclosed the price. Cooler Master said in a statement to BleepingComputer: "We can confirm on May 19, Cooler Master experienced a data breach involving unauthorized access to customer data. We immediately alerted the authorities, who are actively investigating the breach. Additionally, we have engaged top security experts to address the breach and implement new measures to prevent future incidents. These experts have successfully secured our systems and enhanced our overall security protocols. We are in the process of notifying affected customers directly and advising them on next steps. We are committed to providing timely updates and support to our customers throughout this process."”

Source: https://yro.slashdot.org/story/24/0...-by-data-breach-exposing-customer-information
 
1717124814304.png
 
Does Coolermaster hold data going all the way back to 2013? That was the last time I did one of them Mail in rebates. How worried should we be?
 

Law Student Claims Unfair Discipline After He Reported a Data Breach

Anonymous Coward 10 hours ago
43
An anonymous Slashdot reader shared this report from Computer Weekly: A former student at the Inns of Court College of Advocacy (ICCA) says he was hauled over the coals by the college for having acted responsibly and "with integrity" in reporting a security blunder that left sensitive information about students exposed. Bartek Wytrzyszczewski faced misconduct proceedings after alerting the college to a data breach exposing sensitive information on hundreds of past and present ICCA students...
 

Google Contractor Used Admin Access To Leak Info From Private Nintendo YouTube Video (404media.co)7

Posted by msmash on Tuesday June 04, 2024 @05:25PM from the wild-wild-west dept.
A Google contractor used admin privileges to access private information from Nintendo's YouTube account about an upcoming Yoshi game in 2017, which later made its way to Reddit before Nintendo announced the game, according to a copy of an internal Google database detailing potential privacy and security incidents obtained by 404 Media. From the report:The news provides more clarity on how exactly a Redditor, who teased news of the new Yoshi game, which was later released as Yoshi's Crafted World in 2019, originally obtained their information. A screenshot in the Reddit post shows a URL that starts with www.admin.youtube.com, which is a Google corporate login page. "Google employee deliberately leaked private Nintendo information," the entry in the database reads. The database obtained by 404 Media includes privacy and security issues that Google's own employees reported internally.
 
All aboard the incompetence express.

Hacker Tool Extracts All the Data Collected By Windows' New Recall AI101

Posted by BeauHD on Wednesday June 05, 2024 @09:00AM from the would-you-look-at-that dept.
An anonymous reader quotes a report from Wired:When Microsoft CEO Satya Nadella revealed the new Windows AI tool that can answer questions about your web browsing and laptop use, he said one of the"magical" things about it was that the data doesn't leave your laptop; theWindows Recall system takes screenshots of your activity every five seconds and saves them on the device. But security experts say that data may not stay there for long. Two weeks ahead ofRecall's launch on new Copilot+ PCs on June 18, security researchers have demonstrated how preview versions of the tool store the screenshots in an unencrypted database. The researchers say the data could easily be hoovered up by an attacker. And now, in a warning about how Recall could be abused by criminal hackers, Alex Hagenah, a cybersecurity strategist and ethical hacker, has released a demo tool that can automatically extract and display everything Recall records on a laptop.
 
Ransomware and hacking in general are rampant right now, largely because large corporations, government entities, hospitals, schools, etc. often cut corners on their cybersecurity budgets or are stuck on incredibly outdated hardware and software. They simply don't care until it's too late.

This one is a bit scary for average folks that don't know better: https://www.bleepingcomputer.com/ne...toolkit-uses-pwas-to-steal-login-credentials/

This method allows there to be a legitimate "url" ... so checking the address doesn't help here.
 
  • Like
Reactions: erek
like this
Ransomware and hacking in general are rampant right now, largely because large corporations, government entities, hospitals, schools, etc. often cut corners on their cybersecurity budgets or are stuck on incredibly outdated hardware and software. They simply don't care until it's too late.

This one is a bit scary for average folks that don't know better: https://www.bleepingcomputer.com/ne...toolkit-uses-pwas-to-steal-login-credentials/

This method allows there to be a legitimate "url" ... so checking the address doesn't help here.

53 LA County Public Health Workers Fall for Phishing Email. 200,000 People May Be Affected (yahoo.com)


The data breach happened between Feb. 19 and 20 when employees received a phishing email, which tries to trick recipients into providing important information such as passwords and login credentials. The employees clicked on a link in the body of the email, thinking they were accessing a legitimate message, according to the agency...
 
Back
Top