Category : Blog
Top 10 Biggest data breach happened in the 21st century :
Data breaches are now very common. The 21st century is a data-driven age. Storing and using sensitive user data by companies are also common things. This data storing companies are the most favorite target for hackers. These companies are now facing more cyber attacks.
This major cyber attack also leads to a data breach. Where millions of user data are leaked online. This makes user privacy at risk. Sometimes user data is sold on the dark web or just leaked online.
The main reason for a data breach is companies don’t take cybersecurity seriously. They don’t check and measure their IT security. Hackers always try to find the vulnerabilities and hack into their system.No matter what type of companies they are small or big, the hackers always try to hack into their system to get sensitive data.
Here we will take a look at the Biggest Data Breach in the 21st century.
Date: October 2013
In this data breach, 153 million user records were leaked. As reported in early October of 2013 by security blogger Brian Krebs, Adobe originally reported that hackers had stolen nearly 3 million encrypted customer login data and credit card data for an undetermined number of user accounts.
The security researcher reported that a file posted includes more than 150 million usernames and hashed password pairs of Adobe users. Weeks of research showed that the hack had also exposed customer names, IDs, passwords, and debit and credit card information.
Date: May 2014
145 million eBay users data were leaked in this data breach.eBay reported that an attack exposed its entire account list of 145 million users in May 2014, including names, addresses, dates of birth and encrypted passwords.
The online auction giant said hackers used the credentials of three corporate employees to access its network and had complete access for 229 days, that is enough time to compromise the user database.
Date: May 2016
360 million accounts affected in this data breach.MySpace was the leading social media platform before the emergence of Facebook. But it was not concerned about its data security. And the company never really took user data seriously. Myspace pages can be hacked and users can embed whatever content they desire.
An investigation by independent security researchers suggested that the breach occurred sometime in the mid-2000s.In 2016, a Russian hacker going by the nickname Peace put the MySpace data of more than 360 million accounts on sale.
Date – November 2018
Marriott is one of the hotel chains whose data were hacked and leaked online.Marriott said in November 2018 that hackers had stolen personal information of more than 500 million guests who had booked rooms or stayed at properties run by its Starwood subsidiary.
The data breach began in 2014, about two years before Marriott acquired Starwood Hotels, and continued through much of 2018. The stolen details included names, street addresses, emails, passport numbers, genders, and dates of birth of more than 500 million customers.
Date: August 2013
This is by far the biggest data breach in the history of the Internet. In August 2013, unidentified hackers broke into Yahoo servers to steal the data of more than 3 billion users. It means every single account on Yahoo, Tumblr, Flickr, and other Yahoo-owned properties was compromised. But Yahoo reported the security breach only in 2016. The company also revealed that another hack conducted by “a state-sponsored actor” in late 2014 compromised the data of 500 million users. The US government indicted Russian hackers for the 2014 data breach.
Date: October 2015
235 million user accounts were leaked in this data breach.NetEase is a provider of mailbox services through the likes of 163.com and 126.com. It was reported that email addresses and plaintext passwords of some 235 million accounts from NetEase customers were being sold by a dark web marketplace vendor known as DoubleFlag. The same vendor was also selling information taken from other Chinese giants such as Tencent’s QQ.com.
This data breach also shows that many companies still don’t use any encryption.
Date: December 2018
162 million user accounts were leaked in this data breach.In December 2018, Dubsmash the New York-based video messaging service had 162 million email addresses, usernames, PBKDF2 password hashes, and other personal data such as dates of birth stolen, all of which was then put up for sale on the Dream Market dark web market the following December. The information was being sold as part of a collected dump also including the likes of MyFitnessPal (more on that below), MyHeritage (92 million), ShareThis, Armor Games, and dating app CoffeeMeetsBagel.
Date – 2016
As the major social network for business professionals, LinkedIn has become an attractive place for attackers looking to conduct social engineering attacks. However, it has also fallen victim to leaking user data in the past.
In 2012 the company announced that 6.5 million unassociated passwords (unsalted SHA-1 hashes) were stolen by attackers and posted onto a Russian hacker forum. However, it wasn’t until 2016 that the full extent of the incident was revealed. The same hacker selling MySpace’s data was found to be offering the email addresses and passwords of around 165 million Linkedin users.LinkedIn acknowledged that it had been made aware of the breach, and said it had reset the passwords of affected accounts.
Date: July 2017
147.9 million users were affected in this data breach.Between May and July 2017, hackers broke into credit reporting agency Equifax’s systems to access the data of more than 143 million users. Though Equifax later said that it’s 145 million, security experts put the number of affected users at around 147.9 million.
It is one of the most damaging data breaches in history. However, Equifax didn’t report the breach until September 2017. Hackers managed to get millions of user data , including names, street addresses, driver’s license numbers, birth dates, and even social security numbers. Hackers exploited a vulnerability in the open-source software Apache Struts to access its servers.
Date : September 2018
87 million leaked in this data breach.This happened for the Cambridge Analytica scandal where the data-collecting firm illegally harvested users’ info without their permission.Some security researchers told that this secret operation was politically motivated. And though the breach occurred a couple years ago, it’s only this year that investigatory conclusions have come out and it shows that 87 million user data were exposed by hackers.
Data breach is now very common. Even small companies are getting hacked. So companies should secure their It infrastructure. They can regularly check their It security and do a security audit. Sometimes it’s not possible to set up a cyber security team. Because of costing and not finding skilled cyber security professionals.So they can use VAPT service for IT security audits. The VAPT service or Vulnerability Assessment and Penetration Testing service help to find the vulnerability in the system and the company can fix the problem to protect from any type of cyber attack.