A list of The Top Cyber Security Breaches of 2022
Twitter is facing accusations of a cover-up regarding a massive data breach that has affected millions of users in the US and EU. Cybersecurity expert Chad Loder alerted the public to the breach on November 23, 2022, stating that it occurred no earlier than 2021 and had not been previously reported. This comes after Twitter admitted to a separate data breach in July 2022 that affected millions of accounts.
An alarming data breach has exposed over 1.2 million credit card numbers on a notorious hacking forum. The carding marketplace, known as BidenCash, made the stolen information available for free on October 12, 2022. The leaked data includes credit card numbers set to expire between 2023 and 2026 and other sensitive details necessary for online transactions. These types of marketplaces are used for trading stolen credit card information for financial fraud, often involving significant sums of money.”
On September 22, 2022, Australian telecom company Optus experienced a severe data breach that allowed access to the personal and medical information of 11 million people. The compromised data included names, dates of birth, phone numbers, email and home addresses, driver’s license and/or passport numbers, and Medicare ID numbers. This breach has left Optus customers at risk of identity theft and other malicious actions.
On November 16, 2022, a hacker made a shocking announcement on the dark web: they were selling the personal information of a staggering 500 million WhatsApp users from 84 countries. The dataset, which the hacker claimed was up-to-date, included the details of 32 million US users, 11 million UK users, and 6 million German users. In addition, the hacker promised buyers “very recent mobile numbers” of WhatsApp users. This event has sparked concern and caution among the messaging app’s global user base.
On October 3, 2022, Australian healthcare provider Medibank discovered suspicious activity on its internal systems. Four days later, a hacker contacted the company
trying to “negotiate” the removal of customer data. Medibank refused to succumb to the hacker’s demands and publicly announced the data leak, which affected 9.7 million people. This incident has caused concern for Medibank’s customers and serves as a reminder of the constant threat of cyber security breaches.
Uber & Rockstar
In the span of just one week, two significant companies fell victim to a skilled hacker. On September 15, 2022, Uber’s internal servers were breached after a contractor’s device was infected with malware, and their login information was sold on the dark web. The hacker then accessed additional employee accounts, giving them access to various internal tools. They even boldly posted a message to a company-wide Slack channel and altered Uber’s Open DNS to display a graphic image to employees on specific internal sites. This incident serves as a warning to companies to prioritise cyber security and protect their employees’ and customers’ data.
In July 2022, a hacker going by the name ‘devil’ announced on a hacking forum that they had obtained the data of 5.4 million Twitter accounts and were willing to sell it. The stolen information included email addresses and phone numbers from various groups of people, including celebrities and businesses. The hacker, ‘devil,’ said they would not accept offers below $30,000 for the database. Twitter has since confirmed this data breach occurred and is taking steps to protect the affected accounts.
In June 2022, a devastating cyber security breach at student loan servicer Nelnet Servicing exposed the sensitive information of over 2.5 million users. An investigation later revealed that a weakness in the system allowed a third party to access student loan account registration data, including names, addresses, phone numbers, and social security numbers, from June to July 22, 2022. This breach has caused concern for those affected and serves as a reminder of the importance of protecting personal information online.
In October, fast fashion brand SHEIN and its parent company, Zoetop Business Company, were hit with a $1.9 million fine by the state of New York for failing to disclose a data breach that affected 39 million customers. The breach, which occurred in July 2018, allowed a third party to gain unauthorized access to SHEIN’s payment systems. According to the New York Attorney General’s office, SHEIN’s payment processor was alerted to the issue by a credit card network and a credit card issuing bank, both of which had evidence of the infiltration and theft of card data. This fine serves as a reminder of the consequences of not correctly disclosing and addressing data breaches.
On September 11, 2022, a data breach at fintech start-up Revolut exposed the personal information of more than 50,000 customers. A third party was able to access Revolut’s database and obtain names, addresses, and partial payment card information for 50,150 users. While Revolut stated that complete card details were masked, the Lithuanian government confirmed that the company took swift action to stop the breach and protect its customers’ data once the incident was discovered. This event serves as a reminder of the importance of protecting personal information online.
To make sure you’re protected against Cyber Security Breaches, book a discovery call with us today. We are happy to help.