United Kingdom – Marriage Tax Refund

Human error is the culprit in a data breach at a British tax relief advisory service. The error left the personally identifiable information of 100,000 clients exposed after it misconfigured its WordPress CMS, leaving a directory listing of PDF documents available for public view, with no password protection. Here’s the full story

Read more

United States – NetGain Technologies

A ransomware incident led to shutdowns and slowdowns across Netgain’s data hosting environment. The company was forced to completely shut down all systems on 12/4 for containment and remediation. Service has been restored to customers but they may still experience performance issues. Here’s the full story

Read more
Managed Services

Six Essential Components of a Business Continuity Plan

The terms Business Continuity (BC) and Disaster Recovery (DR) have often been used interchangeably. DR usually involves recovering data and software systems in a timely manner to save the business. The concept of disaster recovery with initial focus on natural disasters, in recent times has evolved to a more holistic concept of Business Continuity. We define BC…

Read more
Cybersecurity

South Africa – Nando’s Peri-Peri

A credential stuffing incident gave customers of this popular high street restaurant chain a little more than they bargained for after several customers discovered that huge orders had been placed using their online accounts. to comply with COVID-19 operating regulations, Nando’s customers who are getting takeout are required to scan a QR code with their…

Read more
Cybersecurity

United States – Barnes & Noble

Barnes & Noble has been starring in its own horror story, as a massive network outage for its Nook customers rolled into the discovery of a massive cyberattack. The bookseller informed customers that it had experienced a data breach that exposed customers’ transaction histories and PII. Recovery and restoration efforts are underway. It’s unknown if…

Read more
Cybersecurity

United States – Pfizer

In a monster week for pharma hacking, Pfizer leads the pack with a substantial data breach that it brought on itself. In a huge blunder, unsecured and unencrypted data containing logs, transcripts, and details of patient helpline conversations was leaked from a misconfigured Google Cloud storage bucket. The exposed data included detailed information regarding hundreds…

Read more
Managed Services

4 Checks to Authenticate Sender of an Email

With phishing and spam emails on the rise, they not only pose cybersecurity threat to the recipient’s organization, but also end up wasting productivity of those who are on the receiving end. In most cases, people have to sift through such emails which requires opening emails and reading such emails before they are identified as suspicious…

Read more