Page 15 - Threat Intelligence 9-24-2019

Data Breach

Indonesia, Malaysia Probe Lion Air Customer Data Leak. Authorities are probing a customer data leak at Lion
Air, Indonesia's communications ministry said Friday, in a breach that reportedly affected millions of the
carrier's customers. Two of the airline's subsidiaries, Malaysia-based Malindo Air and Thai Lion Air,
acknowledged passenger data may have been stolen from remote servers operated by Amazon. "Thai Lion Air
has come to be aware that some personal data concerning our passengers hosted on a cloud-based
environment may have been compromised," it said in a statement. Lion Air -- Southeast Asia's biggest airline
by fleet size -- said it was cooperating with an Indonesian-Malaysian investigation into the apparent hack,
which also affected Lion units Batik Air and Wings Air. The leak involved the names, birthdays, addresses,
phone numbers and other details of up to 35 million customers, the Jakarta Post reported, citing a source.

Source: https://www.securityweek.com/indonesia-malaysia-probe-lion-air-customer-data-leak

Thinkful confirms breach. On the heels of its acquisition by Chegg, developer education site Thinkful said an
unauthorized third party had breached its systems. “We recently discovered that an unauthorized party may
have gained access to certain Thinkful company credentials so, out of an abundance of caution, we are
notifying all of our users,” company Vice President of Operations Erin Rosenblatt told users in an email. “As
soon as we discovered this unauthorized access, we promptly changed the credentials, took additional steps
to enhance the security measures we have in place, and initiated a full investigation.” While the company
didn’t give details about the hack, it said there was no evidence of access to account data, including Social
Security numbers, financial data and IDs, according to a report from Techcrunch.
Source: https://www.scmagazine.com/home/security-news/data-breach/thinkful-confirms-breach/

Almost entire population of Ecuador has data leaked. (CNN)The detailed information of potentially every
person in Ecuador has been leaked online, in a massive and unprecedented national data breach, it was
revealed on Monday. More than 20 million people, including an estimated 7 million minors, were exposed in
the leak, which was uncovered by internet security firm vpnMentor during a routine project. Ecuador is home
to about 16.5 million people, meaning that the entire population could have been affected. The additional few
million may be because the leaked data also included the details of deceased individuals, according to the
Ecuadorian State Attorney General's Office. It is not known at this stage precisely how many living Ecuadorians
have been affected. According to the vpnMentor report, released Monday, the breach was found on an
unsecured server in Miami, which appeared to be owned by Ecuadorian consulting and analytics company
Novaestrat. The breach exposed a host of personal information for the millions affected -- their full names,
date and place of birth, home and email addresses, national identification numbers and taxpayer numbers,
employment information, and more.

Source: https://www.cnn.com/2019/09/17/americas/ecuador-data-leak-intl-hnk-scli/index.html

www.accumepartners.com
15