SecurityWeek reports that Meta is notifying about 1,500 people after hackers got into some of its GitHub repositories using an employee’s stolen credentials. Meta says most of the taken data was business code, but a small amount of personal data was also involved. Affected people are being offered credit and dark web monitoring, and Meta says it rotated secrets and added controls to keep user data off GitHub.
Source: securityweek.com
…
Infosecurity Magazine reports that ASOS confirmed an unauthorized intrusion into third-party platforms it uses to communicate with customers. Names, contact details and some non-payment account information were accessed, but the company said no payment-card information or account passwords were impacted. Customers should watch their accounts for suspicious activity and be careful with unexpected messages that could use stolen contact details.
Source: infosecurity-magazine.com
SecurityWeek reports that iRhythm is notifying more than 360,000 people after hackers stole personal information from third-party-hosted business applications. The exposed data includes names, addresses, email addresses, dates of birth, phone numbers, and account and device details such as account numbers, serial numbers, insurance numbers, and dates of service. Affected people should watch for suspicious account activity and be alert for identity theft attempts.
Source: securityweek.com
The Record reports that the FBI arrested another suspected ShinyHunters member after the group breached its jobs site. The hackers stole sensitive data on nearly every FBI employee, including medical records, home addresses, phone numbers, and work locations, and also exposed records about local police officers on task forces. People affected by similar breaches should change passwords, turn on two-step verification, and watch accounts for unusual activity.
Source: therecord.media
