Privacy watchdogs in the U.K. and Canada have launched a joint investigation into the data breach at 23andMe last year.
In its data breach notices, the company said it didn’t detect the hackers’ activities for around five months, from April until September 2023.
23andMe said it only became aware of the account breaches in October 2023, when hackers advertised the stolen data on the unofficial 23andMe subreddit and a well-known hacking forum.
Hackers broke into around 14,000 accounts of 23andMe customers by reusing their passwords from previous breaches, a technique known as password spraying.
That’s how the hackers were able to scrape information on 6.9 million users by only hacking 14,000 accounts.
India’s largest audio and wearables brand BoAt is investigating a possible data breach after hackers advertised a cache of alleged customer data online.
A sample of alleged customer data was uploaded on a known cybercrime forum, which includes full names, phone numbers, email addresses, mailing addresses and order numbers.
In a statement emailed to TechCrunch, BoAt said it was investigating the matter but did not disclose specifics.
At BoAt, safeguarding customer data is our top priority,” the company said.
The brand, however, postponed its public listing plans later, after seeing a slowdown in the public market.
Video game giant Activision is investigating a hacking campaign that’s targeting players with the goal of stealing their credentials, TechCrunch has learned.
Somehow, the hackers are getting malware on the victim’s computers and then stealing passwords for their gaming accounts and crypto wallets, among others, according to sources.
Zeebler described the effort as an “infostealer malware campaign,” where malware designed as legitimate-looking software unknowingly installed by the victim surreptitiously steals their usernames and passwords.
Zeebler told TechCrunch that he found out about the hacking campaign when a PhantomOverlay customer had their account for the cheat software stolen.
After that, Zeebler said he contacted Activision Blizzard as well as other cheat makers, whose users appear to be affected.
Database management giant MongoDB says it’s investigating a security incident that has resulted in the exposure of some information about customers.
In an update published on Sunday, MongoDB said does not believe hackers accessed any customer data stored in MongoDB Atlas, the company’s hosted database offering.
For one customer, this included system logs, MongoDB said.
System logs can include information about the running of a database or its underlying system.
MongoDB declined to say how many customers may be affected by the compromise of its corporate systems.
Beginning in early 2018, the Biden administration began ramping up pressure on TikTok over national security concerns stemming from its ties to China. This pressure was apparently Cooperated with by…
Experts say that the FBI’s confirmation of its own malicious cyber activity is a sign that network security has become increasingly important. In light of such incidents, it’s crucial for…