Email addresses of almost a BILLION people are leaked
A cyber security expert from Germany has discovered that hundreds of millions of people’s personal information was exposed in a dataset by a company called Verifications.io.
Franklyn Jones, CMO, Cequence Security:
“We’re getting to the point where breaches of this magnitude barely illicit a yawn. And after a week, our attention will be diverted once again to the next major breach. Meanwhile, what often gets ignored is that these 982 million records will find their way on the dark web, where they will be acquired for secondary attacks – usually involving automating bots – that result in account takeover, business logic abuse, financial fraud, and more.”
Byron Rashed, VP of Marketing, Centripetal Networks:
“Businesses and consumers should always verify and deal with trusted businesses. In today’s digital environment, giving electronic information out about one’s self is exposing the individual to a variety of cyber crimes. Credentials can be leveraged by a threat actor for identity theft on a personal level and corporate network infiltration and data exfiltration for businesses.
Enterprises should enabling blocking of such malicious sources, which is key to preventing network infiltration and reducing and mitigating the risk of data exfiltration. Corporate policy should govern and prevent the use of their corporate credentials on non-work related sites as well. Education of employees is always the best first line of defense, since most breaches are caused by human error.”
Adam Laub, SVP Product Management, STEALTHbits Technologies:
“Given the frequency of data breach events and the quantity of information that’s already available on the dark web and elsewhere for billions of people around the world, this really is nothing more than a reminder that your information is out there for those that want it – for good or for bad.
“As we work towards making the keepers of our information more accountable for its security, we need to acknowledge and remind ourselves that the security of our data and our identities is really on each of us individually. This is not a pessimistic viewpoint, but rather a realistic viewpoint based on the world we live in. We need to be discerning with who we give our information to, vigilant with our password hygiene, and aware of our online activities, from banking to social media and everywhere in between.”