Page 15 - Threat Intelligence 10-10-2019

Data Breach

Comments On Sensitive Medical Data On 1 Million People Stolen In New Zealand Tū Ora Breach. Tū Ora
Compass Health from New Zealand, a primary health organization (PHO) has disclosed a security breach that
led to the exposure of medical and personally identifiable information (PII) of roughly 1 million people. The
NGO notified the National Cyber Security Centre, Ministry of Health, Police, and other law enforcement
agencies of the incident after its discovery on August 5 following the Tū Ora website’s defacement.

Source: https://www.informationsecuritybuzz.com/expert-comments/comment-sensitive-medical-
data-on-1-million-people-stolen-in-new-zealand-tu-ora-breach/

Tens of thousands of customers may have had their credit card information stolen in a data breach affecting
at least 6,500 online stores. Hackers may have absconded with tens of thousands of online shoppers' credit
card information in an attack on cloud infrastructure company, Volusion. According to ZDNet, multiple cyber
security firms have confirmed the hack on Volusion, a software company that claims to provide infrastructure
for more than 30,000 merchants. Among the affected parties are the Sesame Street Live online store which
sells various merchandise from the popular kids show and the official website for the late painting icon, Bob
Ross.

Source: https://www.dailymail.co.uk/sciencetech/article-7552153/Thousands-customers-credit-card-
data-stolen-hack-6-500-online-stores.html

Credit Info Exposed in TransUnion Data Security Incident. An unauthorized person was able to gain access to
a TransUnion Canada web portal and use it to pull consumer credit files. This was done by using credentials
stolen from a TransUnion customer who had access to the portal. BleepingComputer has learned that starting
last week TransUnion Canada began sending out data security incident notifications via postal mail to
consumers whose information was accessed via an unauthorized login. These notifications state that an
unauthorized user utilized a TransUnion business portal to perform credit file lookups between June 28th and
July 11th, 2019. The attacker was able to gain access to the portal using a TransUnion customer's account
whose credentials were stolen.

Source: https://www.bleepingcomputer.com/news/security/credit-info-exposed-in-transunion-data-
security-incident/

www.accumepartners.com
15