Fuse Networks Blog

A Look at this Year’s Worst Cybercrimes

A Look at this Year’s Worst Cybercrimes

It’s fair to say that today's organizations are faced with more online threats than ever before. To properly manage the information systems that they depend on for productivity, redundancy, and operational management, they need to ensure that they are doing what they need to do to mitigate problems stemming from the continuous flow of threats.

To give our readers just a taste of what they are up against, we’ve decided to put together a list of the most devastating hacks, infiltrations, and malware attacks that have happened so far in 2018. Additionally, we provide some telling statistics that will put into perspective just how important your network security and cybersecurity initiatives are.

Public
January

  • The Department of Homeland Security was affected by a data breach that exposed information about 247,167 current and former employees.

March

  • Atlanta, Georgia was targeted by a ransomware attack called SamSam. This resulted in a massive problem for their municipal infrastructure. The ransom price given was $51,000, but Atlanta’s leadership refused to meet these demands. Overall, the numbers show that Atlanta has spent more than 10 times that number in the fallout of the attack. Some estimates place the actual cost of this event at nearly $20 million.
  • India’s national ID database, Aadhaar, leaked data of over a billion people. This is one of the largest data breaches in history. A user could pay 500 rupees, equal to about $7, to get the login credentials that allowed anyone to enter a person’s 12-digit code for their personal information. For 300 rupees, or about $4.20, users could also access software that could print an ID card for anyone associated with the database.
  • Cambridge Analytica, a data analytics company that U.S. President Donald Trump used to help his campaign, harvested personal information from over 50 million Facebook users without asking for their permission. Facebook hasn’t called this a data breach, but Cambridge Analytica has since been banned from using the service thanks to this event.

June

  • A hack of a U.S. Government-funded active shooter training center exposed the personal data of thousands of U.S. law enforcement officials. This also exposed which police departments aren’t able to respond to an active shooter situation.

Private
January

  • 280,000 Medicaid records were exposed when a hacker attacked the Oklahoma State University Center for Health Sciences. Among the information exposed were patient names, provider names, and full names for affected individuals.

February

  • An unsecured server owned by Bongo International, a company acquired by FedEx, leaked over a hundred-thousand files of FedEx customers. Some of the information leaked included names, drivers’ licenses, national ID cards, voting cards, and utility bills.

March

  • Orbitz, a travel booking site, fell victim to a security vulnerability that exposed 880,000 customers’ payment card information. There was also about two whole years of customer data stolen from their server.
  • French news site L’Express left a database that wasn’t password-protected up for weeks, despite being warned about the security issues regarding this.
  • 134,512 records regarding patients and financial records at the St. Peter’s Surgery and Endoscopy Center in Albany, NY were accessed by hackers.
  • MyFitnessPal, an application used by Under Armor, exposed about 150 million people’s personal information to threats.
  • The WannaCry ransomware claimed another victim in Boeing, which stated that “a few machines” were protected by Microsoft’s 2017 patch.

May

  • Thanks to Twitter storing user passwords in a plaintext file that may have been exposed by internal company staff, the social media titan had to force hundreds of millions of users to change their password.
  • An unauthenticated API found on T-Mobile’s website exposed the personal information of all their customers simply through the use of their cell phone number. The following information was made available: full name, address, account numbers, and tax IDs.
  • A bug found in Atlassian development software titles Jira and Confluence paved the way for hackers to sneak into IT infrastructure of several companies and one U.S. government agency.
  • Rail Europe, a popular server used by American travelers to acquire rail tickets, experienced a three-month data breach that exposed credit card information to hackers.

June

  • A marketing company named Exactis had 340 million records stolen from it, but what’s most shocking about this is that they had accumulated information about nearly every American out there. In response to the breach, there was a class action lawsuit made against the company.
  • Adidas’s website was hacked, resulting in a loss of a few million users’ personal and credit card information.
  • A hacker collective called Magecart initiated a campaign to skim at least 800 e-commerce sites, including Ticketmaster, for sensitive information.

That list of traumatic security issues all occurred in the first half of 2018. This doesn’t consider the major hacks that are still affecting people from 2017 and before. Some examples include the Friendfinder hack that exposed 412 million user accounts, and the well-documented Equifax data breach that leaked the financial information of over 147 million people. Here are some of the statistics to help put in perspective the state of Internet threats at present:

  • In 2017 over 130 large-scale breaches were reported, a 27 percent increase over 2016.
  • Nearly 1-in-3 organization have experienced some sort of cyberattack in the past.
  • Cryptojacking (stealing cryptocurrency) increased 8,500 percent in 2017.
  • 100,000 organizations were infected with the WannaCry ransomware (400,000 machines).
  • 5.4 billion WannaCry attacks were blocked in 2017.
  • The average monetary cost of a malware attack is $2.4 million.
  • The average time cost of a malware is 50 days.
  • Ransomware cost organization’s over $5 billion in 2017.
  • 20 percent of cyber attacks come from China, 11 percent from the United States, and six percent from the Russian Federation.
  • Phone numbers are the most leaked information.
  • 21 percent of files are completely unprotected.
  • 41 percent of companies have over 1,000 sensitive files left unprotected.
  • Ransomware is growing at 350 percent annually.
  • IoT-based attacks are growing at about 500 percent per year.
  • Ransomware attacks are expected to quadruple by 2020.
  • 7.7 percent of web requests lead to malware.
  • There were 54 percent more types of malware in 2017 than there were in 2016.
  • The cybersecurity market will be worth over $1 trillion by 2025.

If this list is as scary to you as it is to us, you’ll do your best to secure your network, data, and infrastructure from Internet-based threats. For more information about how to facilitate a comprehensive cybersecurity strategy, call us today at 855-GET-FUSE (438-3873).

Tip of the Week: 5 Useful Browser Tips
Hackers Continuously Target Major Sporting Events
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Wednesday, November 21 2018

Captcha Image

Newsletter Sign Up

  • No-Spam Guarantee: We hate spam as much or more than you do and will NEVER rent, share or give your information away to anyone else. We will only use your information to communicate with you direct, and you can also remove yourself from our list at any time with a simple click..
  • Company Name *
  • First Name *
  • Last Name *

      Mobile? Grab this Article!

      QR-Code dieser Seite

      Tag Cloud

      Security Tip of the Week Technology Tech Term Best Practices Network Security Hackers Privacy Computer Data Backup Business Computing Android Software Data recovery Productivity Collaboration Efficiency Innovation IT Support Cybersecurity User Tips Email Mobile Device Data Malware Communication Google Internet IT Services Cybercrime Applications Small Business Cost Management Business Management Artificial Intelligence Browser Managed Service Business Technology Smartphone Office 365 Cloud Communications Backup Two-factor Authentication Maintenance Passwords Ransomware BDR Access Control Data Security Saving Money Phishing Information Business Blockchain Hardware Mobile Device Management Patch Management Bandwidth Google Maps Social Engineering Disaster Recovery Vulnerability Internet of Things Remote Monitoring Hacking Apps Vulnerabilities Data loss Vendor Scam Update Facebook Workplace Tips Gmail Microsoft Office Managed IT services Holiday Websites Tech Terms Document Management Bitcoin Network Smartphones Social Media Automation Data Breach Conferencing Mobile Devices Alert Saving Time Directions Bluetooth Printing Paperless Office Customer Resource management Excel Antivirus Download Robot Data Protection Health IT Microsoft Management Emergency IT Management Microsoft Excel Company Culture Browsers Network Management Evernote Augmented Reality Username NCSAM Cost Wireless Headphones Content Government Analytics Database Telephone System Tip of the week Upload Computer Care Chromebook Computing Identity Theft Accountants Encryption Hard Drive Productivity Fuse Networks Virtualization Distributed Denial of Service Information Technology IT Comparison Managed IT Services Mobile Security Microchip Cleaning BYOD Legal Proxy Server Gadgets Budget Tactics Electronic Medical Records Legislation Trends Computing Infrastructure Devices Sports Backup and Disaster Recovery Error Knowledge Google Calendar Cryptocurrency Laptop Entertainment Training Hard Drive Disposal Big Data App Downloads Freedom of Information Support Specifications Processor Website Computers Law Enforcement SharePoint Downtime Help Desk Users Addiction Cloud Computing Data Analysis Miscellaneous Apple Gamification Networking Compliance Telephone Desktop Equifax Service Level Agreement email scam HTML Screen Reader Cortana Mobility News Mobile Technology CIO Television Digital Multi-factor Authentication Navigation Nanotechnology WiFi project management Piracy Vendor Management Fileless Malware Emails Managed Service Provider Unified Communications Business Cards Regulations User Tip Spam Printer Social Network Business Continuity Google Docs Startup Going Green Audit eWaste VPN Windows 10 Monitoring Disaster Fake News Virtual Reality Bookmark Machine Learning Mouse Virtual Assistant Device security Outsourced IT Operating System Travel Money Software License VoIP Presentation Wi-Fi Managing Stress Printers Lithium-ion battery Fun Multi-Factor Security Employer-Employee Relationship Wireless Technology 5G Tech Support Safety IBM The Internet of Things Marketing Hacker Hard Drives Competition Search Customer Relationship Management IP Address Server Hosted Solutions Quick Tips Customer Service Twitter Mobile Office Upgrade Regulation Domains Wireless Windows 10 Public Speaking Hiring/Firing