10 million JD Sports customers impacted by cyber-attack
JD Sports, a sportswear chain, announced a possible data breach that may have put information of 10 million customers at risk. The hackers may have accessed names, addresses, email accounts, phone numbers, order details, and the last four digits of bank cards for online orders from November 2018 to October 2020.
The company said it was reaching out to affected customers and stated the impacted data is "limited". It further noted that it does not hold full payment card information and does not believe that hackers gained access to account passwords.
Retailers are often targets of cyber-crime due to the collecting and storing of a vast array of personal and financial information including names, addresses, credit card numbers, and purchase histories, making them a valuable target for cyber criminals. In addition, retailers often handle a large volume of transactions, making them an attractive target for financial fraud.
Additionally, many retailers have outdated or insufficient cyber security measures, making them vulnerable to attacks. As a result, retailers must prioritise protecting their customers' data and investing in strong cyber security measures to stay ahead of potential cyber threats.
The amount of customer records potentially accessed as a result of the JD Sports incident is shockingly high and pertains to a two-year period of online orders.
While passwords and payment information were not disclosed, Personal Identifiable Information (PII) such as contact information were. This exposes users to targeted phishing attacks for the purpose of fraud. The scope of the attack was extended to subsidiary brands of the JD sports group. Anyone who has made an online order from the JD Sports group over the time period in question should be extra vigilant of phishing emails and fraud.
Russian cyber hacktivist gang Killnet attacks multiple Ukrainian allies
A pro-Russia hacking group, Killnet, has claimed responsibility for a cyber-attack that disabled the websites of over a dozen US hospitals this week.
The group, known for launching DDoS attacks, stated it took down the websites of 14 US hospitals, including Stanford Healthcare, Duke University Hospital, and Cedars-Sinai. Killnet also launched DDoS attacks against several medical facilities in the Netherlands with the University Medical Centre Gröningen being the largest.
Killnet has been conducting DDoS attacks against government agencies and firms since the start of the war in Ukraine. Targets have included British, Spanish, and Norwegian hospitals.
Further highlighting the geopolitical risks The UK’s National Cyber Security Center (NCSC) last week warned of increased targeted attacks from Iran or Russia, mainly in the form of phishing attacks aiming to steal sensitive information.
Cyber-attack on financial data group impacts trading
Ion Markets, a financial data group, has suffered a cyber-attack that impacted its cleared derivatives unit. The Dublin-based firm said the attack was contained to a specific environment, and services are being remediated. The Futures Industry Association is working with clearing houses, trading platforms, and regulators to evaluate the extent of the attack's impact on trading, processing, and clearing. This comes a week after a glitch at the New York Stock Exchange caused market chaos.
A client alert stated that all emails from ION or affiliates were being investigated by security staff. Fidessa, acquired by ION in 2018, notified that a cyber incident involving LockBit and VMware servers was the cause of the issue preventing access to certain systems. LockBit is ransomware that blocks access to computer systems and often demands a ransom payment. Fidessa stated that the spread was limited to cleared derivatives front, middle, and back office services for clients and no other products or business lines were affected.
