British American Tobacco's Romanian Platform Faces Data Breach; Ransomware Demands Bitcoins - E Hacking News Hacker News and IT Security News
Nouvelles du front Roger Wilco	 8 décembre 2019	 Affichages : 20
British American Tobacco (BAT)' s Romanian web platform compromised due to a ransomware attack and data breach.
BAT which is a United Kingdom-based company is one of the most gigantic manufacturers of nicotine and tobacco products.
Reportedly, the data breach was first ascertained on an Irish "unsecured Elastisearch server" with around 352 GB of data. Allegedly, the hackers had breached the data's location.
The ransom request was waiting for the onlookers on the server in the form of a "readme" file wherein they had demanded a "Bitcoin payment" in exchange for "not deleting their data".
Per sources, the cyber-researchers had discovered the data breach on a "server connected to the web platform YOUniverse.ro" which is part of the Romania promotional campaign for BAT, pursuing adult smokers.
The compromised data encompasses users' "Personally Identifiable Information" (PII), like name, gender, email address, phone number, date of birth, source IP and cigarette and tobacco product preference.
Allegedly, tobacco advertising is mostly prohibited by the Romanian law, while exempting certain sorts of promotional campaigns and event sponsorship aiming at existing smokers over 18 years of age.
The platform in question aided Romanians to win tickets to events and parties studded with local and international performing stars.
Regardless of the numerous attempts made by the team to contain the breach, the database had been unprotected for the past two months and was finally contained on November 27, 2019.
According to sources, the research team has been after the company's local branch, the global company, the server's host, Romania's National Authority for Consumer Protection (ANPC) and the Certification Authority (CA) for some clarification.
The CA was the only organization to revert to the team. The Romanian journalists who were contacted along with the authorities are yet to answer.
Read more https://www.ehackingnews.com/2019/12/british-american-tobaccos-romanian.html
Public Cloud Infrastructures suffering from Security Loopholes and Vulnerabilities, researchers say
Indian Security Researcher Finds Starbucks API Key Exposed on GitHub - E Hacking News News
New Hacking Group Deploying Backdoors and Ransomware in Windows via Word docs
Warning! Ireland's National Cyber Security Strategy; Fight Against Cyber-Crime - E Hacking News Security News
Email Server of Special Olympics of New York Hacked; Later Used To Launch a Phishing Campaign - E Hacking News News and IT Security News
The Russian Embassy in Washington sent a note of protest to the State Department