Page 15 - Threat Intelligence 9-5-2019

Data Breach

Russell Stover Chocolates hit by data breach - what customers need to know. Candy maker Russell Stover
Chocolates announced Friday that a recent data security breach at its stores potentially affected the
information of customers’ credit and debit cards. There is no evidence, however, that the hack impacted
online payments, the company said. The company determined that an unauthorized actor may have accessed
its point-of-sale systems through malware, between Feb. 9 and Aug. 7, and acquired certain customer
payment data, including first and last names, payment card numbers and expiration dates. As of press time,
there was no evidence that any information was used improperly. This is the latest in a series of security
breaches targeting sensitive information. According to intelligence-data website Risk Based Security, the first
six months of 2019 alone have seen nearly 4,000 publicly disclosed breaches, exposing 4.1 billion
compromised records.

Source: https://finance.yahoo.com/news/russell-stover-chocolates-hit-data-205822199.html

Malware Takes Down Lumber Liquidators’ Network. North American hard-surface flooring retailer Lumber
Liquidators this week revealed that it managed to restore most of its network after a malware attack disabled
parts of it for nearly a week. The incident, the company said, was discovered on August 21, when its network
and computer systems started showing signs of a malware infection that “ultimately disabled certain
corporate and store systems nationwide.” Lumber Liquidators hasn’t provided information on the malware
used in the attack, but its description of the incident suggests it was ransomware.
Source: https://www.securityweek.com/malware-takes-down-lumber-liquidators’-network

Over 328,000 Users Hit by Foxit Data Breach. PDF solutions provider Foxit last week informed customers that
it had recently detected unauthorized access to data associated with its “My Account” service. The company
told Security Week that the incident impacted 328,549 users. The compromised data includes names, email
addresses, passwords, phone numbers, company names, and IP addresses, but payment information was not
exposed. The My Account passwords of affected users have been reset and a security management firm has
been called in to investigate the incident and help Foxit protect its systems against future attacks. “Foxit has
notified law enforcement agencies and data protection authorities and is destined to cooperate with the
agencies’ investigations,” the company said.

Source: https://www.securityweek.com/over-328000-users-hit-foxit-data-breach

www.accumepartners.com
15