Tag #Third-Party Risk

Showing 1 to 5 of 5 results

theglobeandmail.com

🌐 85% Global Worthiness

Jul 22, 22:14

\$4 Billion Canadian Hedge Fund Waratah Capital Suffers Data Breach

Waratah Capital Advisors, a \$4-billion Canadian hedge fund, experienced a cybersecurity breach on June 24th, potentially exposing client data (names, SINs, account sizes) via a third-party IT provider's backup systems; the firm is offering 24 months of credit monitoring.

\$4 Billion Canadian Hedge Fund Waratah Capital Suffers Data Breach

Waratah Capital Advisors, a \$4-billion Canadian hedge fund, experienced a cybersecurity breach on June 24th, potentially exposing client data (names, SINs, account sizes) via a third-party IT provider's backup systems; the firm is offering 24 months of credit monitoring.

Progress

36% Bias Score

ShareSaveArticle

Reduced Inequality

12345678

Previous 1 of 8 Next

How did the attack vector used in the Waratah breach differ from previous incidents, and what vulnerabilities does it expose?

This breach highlights the vulnerability of even large financial institutions to sophisticated cyberattacks, impacting high-net-worth individuals and potentially causing significant financial and reputational damage. The use of a third-party IT provider underscores the expanded attack surface in modern financial services. The incident follows similar breaches at other Canadian firms, such as LifeLabs and Desjardins.

theguardian.com

🌐 85% Global Worthiness

Jul 6, 01:11

Qantas Data Breach Exposes 6 Million Customers

Up to 6 million Qantas customers had their personal information stolen after attackers successfully used social engineering via a phone call to access a third-party system, highlighting vulnerabilities in corporate security and a rising trend of similar cyberattacks in Australia.

Qantas Data Breach Exposes 6 Million Customers

Up to 6 million Qantas customers had their personal information stolen after attackers successfully used social engineering via a phone call to access a third-party system, highlighting vulnerabilities in corporate security and a rising trend of similar cyberattacks in Australia.

Progress

44% Bias Score

ShareSaveArticle

Reduced Inequality

12345678

Previous 1 of 8 Next

How did the attackers gain access to Qantas's systems, and what vulnerabilities did they exploit?

This attack is part of a larger trend in Australia, following similar breaches at Optus, Medibank, and the superannuation sector. The attackers used social engineering, specifically "vishing", to bypass security measures. This demonstrates the growing sophistication and effectiveness of these attacks.

cnbc.com

🌐 90% Global Worthiness

Dec 31, 01:06

Chinese Hackers Breach US Treasury Systems via Third-Party Software

On December 8th, a state-sponsored Chinese hacking group exploited a vulnerability in the third-party software BeyondTrust to breach US Treasury Department systems, accessing unclassified employee data; the compromised service has been taken offline.

Chinese Hackers Breach US Treasury Systems via Third-Party Software

On December 8th, a state-sponsored Chinese hacking group exploited a vulnerability in the third-party software BeyondTrust to breach US Treasury Department systems, accessing unclassified employee data; the compromised service has been taken offline.

Progress

44% Bias Score

ShareSaveArticle

Peace, Justice, and Strong Institutions

12345678

Previous 1 of 8 Next

What specific actions did the Chinese hackers take to compromise the US Treasury Department's systems, and what immediate consequences resulted?

A state-sponsored Chinese hacking group exploited a vulnerability in third-party software, BeyondTrust, to breach US Treasury Department systems on December 8th, accessing unclassified documents from employee desktops. The compromised service has been taken offline, and the Treasury is working with federal agencies and outside investigators to assess the full impact.

forbes.com

🌐 85% Global Worthiness

Jul 14, 16:12

McDonald's Data Breach Exposes AI Security Risks

Security researchers accessed McDonald's AI-powered hiring platform with the password "123456", exposing over 64 million applicants' data, highlighting critical security flaws and the need for improved AI governance.

McDonald's Data Breach Exposes AI Security Risks

Security researchers accessed McDonald's AI-powered hiring platform with the password "123456", exposing over 64 million applicants' data, highlighting critical security flaws and the need for improved AI governance.

Progress

52% Bias Score

ShareSaveArticle

Reduced Inequality

12345678

Previous 1 of 8 Next

What immediate steps should McDonald's and other organizations take to improve their AI security protocols and prevent similar data breaches?

McDonald's hiring platform, using the default password "123456", was accessed by security researchers, exposing over 64 million applicants' personal data. This highlights significant security flaws in the AI-powered platform and underscores the need for improved tech governance.

forbes.com

🌐 85% Global Worthiness

Jul 2, 22:14

Qantas Data Breach Exposes Data of 6 Million Customers

Qantas Airways experienced a data breach affecting 6 million customers, exposing names, contact details, and birth dates via a compromised third-party customer service platform; no financial data was accessed, and flight operations are unaffected.

Qantas Data Breach Exposes Data of 6 Million Customers

Qantas Airways experienced a data breach affecting 6 million customers, exposing names, contact details, and birth dates via a compromised third-party customer service platform; no financial data was accessed, and flight operations are unaffected.

Progress

44% Bias Score

ShareSaveArticle

No Poverty

12345678

Previous 1 of 8 Next

What specific security measures were lacking that allowed this data breach to occur?

The Qantas data breach highlights the vulnerabilities of relying on third-party vendors for sensitive customer data. The incident underscores the need for robust cybersecurity measures across all sectors, especially those handling personal information. Qantas is cooperating with authorities and providing support to affected customers.

Showing 1 to 5 of 5 results