Page 15 - Threat Intelligence 10-3-2019

Data Breach

Over 20 Million Russian Tax Records Exposed in Privacy Snafu. Over 20 million Russian tax records were
found publicly exposed in a misconfigured Elasticsearch database last month, in yet another privacy snafu.
Security researcher Bob Diachenko teamed up again with Comparitech to discover the unsecured server, which
contained personally identifiable information (PII) on Russian citizens dating from 2009-2016. Lacking
password protection or any other authentication mechanism, the Amazon Web Services Elasticsearch cluster
was first indexed by search engines in May 2018. Diachenko discovered it on September 17 and notified the
Ukraine-based owner.
Source: https://www.infosecurity-magazine.com/news/over-20-million-russian-tax/

Zendesk Breach Hits 10,000 Corporate Accounts. Customer support software giant Zendesk has discovered a
security breach dating back to 2016, affecting thousands of corporate clients. After being alerted to the
incident by a third party, the firm last week identified 10,000 Zendesk Support and Chat accounts which had
been accessed by an unauthorized third party. Although this number contained some trial accounts and others
that are no longer active, Zendesk has a number of high-profile clients including Airbnb, Uber and OpenTable
that could be affected.

Source: https://www.infosecurity-magazine.com/news/zendesk-breach-hits-10000/

Turkey fines Facebook $282,000 over privacy breach. ANKARA (Reuters) - Turkish authorities have fined
Facebook Inc (FB.O) 1.6 million lira ($282,000) for violation of data protection laws which affected nearly
300,000 people, the Personal Data Protection Board (KVKK) said on Thursday. Facebook has been facing a
lawsuit in the United States from users seeking to hold the company liable for allowing third parties, including
Cambridge Analytica, to access their data.

Source: https://www.reuters.com/article/us-facebook-lawsuit-privacy-turkey/turkey-fines-facebook-
282000-over-privacy-breach-idUSKBN1WI0LJ

Nearly 60% of businesses suffered a data breach in the past 3 years. In the spirit of October being the 16th
Annual National Cybersecurity Awareness Month, a recent Bitdefender study outlined the cybersecurity
conditions of infosecurity companies across the globe. The report found that cybersecurity breaches persist:
57% of companies have experienced a breach in the past three years, and 24% have already suffered a breach
halfway through 2019.
Source: https://www.techrepublic.com/article/nearly-60-of-businesses-suffered-a-data-breach-in-the-
past-3-years/

www.accumepartners.com
15