Question

Identify and summarize three reported data breeches occurring in the U.S. since January 1, 2017. Identify date of breech, victim business, potential # identities compromised.

Answer 1

Identify and summarize three reported data breeches occurring in the U.S. since January 1, 2017. Identify date of breech, victim business, potential # identities compromised.

Year 2017 – One of the major data breaches – Intercontinental Hotel Group( IHG) – Date – Feb7,2017 – IHG the company that owns popular hotel chains like Crown Plaza , Holiday Inn, Kimpton Hotels , announced a data breach that effected 12 of its properties .

Case history – Malware was found on servers which processed payments made at on-site restaurant and bars .

Travellers that used cards at the front desk did not have information taken

The malware was active and started stolen data include cardholders names , Card number , expiration dates , internal verification codes   

FAFSA –IRS data retrieval tool – Date April 2017 – IRS revealed that up to 100,000 tax payers may have had their personal information stolen in a scheme involving the IRS data retrieval tool , which is used to complete the “ Free application for federal student Aid”

In march 2017, federal official observed that a potential data breach and took the tool down

Currently the agency suspects that less than 8000 fraudulent returns were filed , processed and returns issued costing $ 30 Mio , 5200 returns were stopped by IRS filters and 14000 illegal refund claims.

2018 – FedEx – date Feb15, 2018 – discovered that personal information of 119000 FedEx customers sitting on unsecured Amazon Web service ( AWS) Cloud storage server.

Orbitz- Date March 20,2018 – this company is subsidiary of Expedia . Orbit announced that it has discovered a possible data breached affecting 880,000 consumers .

A hacker had used a legacy website to gain access to payment card and other personal information between Jan’2016 and Dec of last year .

The personal information includes birthday , address , full name , phone number email etc.

Year 2019 – EyeSouth Partners – date Feb 6,2019 – over 24000 patient of Georgia based Eye South partners are being notified of a breach. The breach occurred after an unauthorized third party gained access to an employee email account –

Down Jones – Date March 1,2019 – a data base containing 2418862 identity records on government officials and politicians from every country in the world was leaked online from a Down Jones watchlist

Year 2020 – Peekaboo Moments – date Jan 14’2020- a unsecured database on an elastic search server linking back to Peekaboo Moments .

An app where parents post images and videos of their children was left exposed .

An undisclosed number of email addresses , geographic location data , detailed device data have impacted . The app has downloaded 1 Mio times since launching in 2012 .