Today, it is considered that technology has forever changed the way we do business, especially for the better. But despite all the convenience and convenience offered by modern technology, it also opens businesses to new security threats. Internet attacks and security breaches can be devastating for law firms and investing in security can be a priority. Network security is constantly evolving as hackers change their ways of accessing sensitive data in new ways. By 2019, a number of cyber attacks and security breaches have already been reported, which should serve as a warning to law firms seeking to avoid similar incidents. Moreover, in recent years there have been major security breaches.
However, data breaches are not a new phenomenon, and federal agencies have acknowledged the continuing threat of sports. But in 2019 there were unprecedented attacks, including previously inappropriate systems like Apple’s iOS. Most of the best hacks this year are made for clear financial purposes, not spam or hackers. However, very rarely are their traces of government agencies around the world trying to find people. On account of this, many legal bodies set OWASP threats fundamentals course which covers the core concept of recognizing the threats with specific InfoSec learning respectively.
Biggest Cyber Incidents Have Seen in 2019
Obviously, cyber threats are evolving, but before we start analyzing what scares us in the future, it’s important to review the larger security incidents we’ve seen this year, which are as follows:
JustDial Data Breach
The security breach of the local JustDial search engine has put 156 million users at risk. But the company was able to correct the mistake after the security investigator reported the problem. The researcher reported in the video that the hacker could use the JustDial phone number of each user as a user name and access the account using the bug advantage. In addition, the investigator also revealed that the bug would allow hackers to change details in JustDial – JD Pay’s payment options account, allowing them to transfer all their money into their account. JustDial explained that no data or loss of money was recorded. In other statements the management of mentioned that we understand security on JustDial. The bug was one of the API’s the hacker had access to. Though the bug was fixed by the workforces to practice the infosec learning accordingly and make sure to cipher the system strongly so that no one in the future can access it.
Facebook Data Leak
The Facebook admin has deleted millions of Facebook users’ phone numbers on the web from exposed admins. According to reports, the server was not password protected, so anyone could access it. The database contained over 419 million Facebook user accounts worldwide. The information contained unique Facebook ID and phone numbers associated with their accounts. In April 2019, researchers also discovered the vast amount of Facebook account information that was discovered on Amazon’s cloud server. Up-Guard security forces said they have found two instances of data breaches in different areas. Facebook also admitted breach of other data with about 100 third-party developers who had incorrect access to the data.
Door-Dash Hack
Door-Dash, a San Francisco-based food distribution service provider, has faced a major data breach that affected the data of 4.92 million people (customers, distributors, and retailers) using this platform of services. According to the company, unauthorized third parties accessed their user information on May 4, 2019. Door-Dash announced that it will affect users who joined the service platform on or before April 5, 2018, and those who joined the group after 5 p.m. April 2018.
Ecuador Data-Breach
Almost everyone in Ecuador has suffered massive data breaches that exposed the personal data of more than 20 million people. Among them was Julian Assange, president of the state and founder of Wiki-Leaks. VPN Mentor security firm has detected a breach of an Elastic-search server in Miami, owned by the Ecuadorian Novaestrat. The information presented says they come from a variety of sources, including the Bank of Ecuador, Ecuadorian documents, and car management called Aeade. The information shown includes names, date of birth, contact information, social security number, bank details, tax receipt, and travel information.
Instagram Data Breach
The Facebook photo-sharing app has detected an insecure data processor which is supposed to comprise on the individualized data of loads of influencers on Instagram, and online brand accounts. However, a security researcher who discovered the leak and reported on Tech-Crunch, said the database has over 49 million files online, allowing everyone to access the data. Uncovered information includes user bio’s, profile picture, subscriber number, city and state location, and contact information such as email address and phone number of the Instagram account holder. According to the researchers, the discovered database is owned by Chtrbox, a marketing company based in the Indian city of Mumbai. The database was downloaded offline and the case was investigated according to policies of OWASP threats fundamentals.
A Huge Cost of a Massive Breach
On the other hand, breaches of this magnitude significantly impact customer data and the victim’s end result, the report said:
- The average number of violations was 257 million customers.
- The average business expenses (legal fees, fines, remediation costs, etc.) are 344.9 million dollars.
- The average company loss from equities was 7.53 percent, a 5.34 billion dollars market value loss.
- It took an average of 45 days for the victim to return the market value of the crime.
On the other hand, such figures do not take into account the loss of customer confidence in the businesses they encounter, theft and fraud that customers may suffer as a result of data theft or other forms. Several other companies are listed in the report, and all of these crimes are educational material for corporate security personnel. Whether internal or external security breaches are a constant threat to small and large businesses. It may cost extra money to improve security, but this is an important detail to keep in mind today. With these examples, it is known that our data was never safe. Consumers and businesses can only take preventative security measures of infosec learning and adopt better data protection policies.
