[Weekly Security News] American Express card data exposed in third-party breach

[Weekly Security News] American Express card data exposed in third-party breach

[March 13 2024]

1. American Express card data exposed in third-party breach

American Express Co(AmEx). has told an undisclosed number of cardholders that their account information may have been breached in a recent hacking of a merchant processor and stated the notice that previously issued American Express Card account numbers, expiration dates and customer names may have been compromised. Although the systems that owned or controlled by AmEx were not compromised by this incident, a 3rd party service provider engaged by numerous merchants experienced unauthorized access to its system.

Source : CBS News, Security Week, Cyber News

 

2. Switzerland: Play ransomware leaked 65,000 government documents

The National Cyber Security Centre (NCSC) of Switzerland has released a report on its analysis of a data breach following a ransomware attack on Xplain, disclosing that the incident impacted thousands of sensitive Federal government files. In a new statement published today(7 Mar), the Swiss government confirmed that 65,000 government documents were leaked in the breach. 95% of those files impact the administrative units of the Federal Department of Justice and Police (FDJP).

Source : Bleeping Computer, Infosecurity Magazine, SC Media

 

3. Jersey’s financial services regulator suffers data breach

Jersey financial service Commission(JFSC), one of the top five organisations in Jersey that need water-tight security, has had a security vulnerability since Jan 2021, being discovered three years later in Jan 2024. This vulnerability allowed access to non-public names and addresses. JFSC is working with the Jersey Office of the Information Commissioner to determine how this happened.

Source : Channele Eye, BBC News

 

Check out Penta Security’s Cloudbric product lines:

Cloud-based Fully Managed WAAP: Cloudbric WAF+

Agent based Zero Trust Network Access Solution: Cloudbric PAS

Agentless Zero Trust Network Access Solution: Cloudbric RAS

Blockchain: Blockchain Security Solution

Click here for inquiries regarding the partner system of Cloudbric
Make sure to follow us on our social media platforms (LinkedIn, Twitter, and Facebook)

Check out Penta Security’s product lines:

Web Application Firewall: WAPPLES

Database Encryption: D’Amo

Identity and Access Management: iSIGN+ 

Car, Energy, Factory, City Solutions: Penta IoT Security

Click here for inquiries regarding the partner system of Penta Security
Make sure to follow us on our social media platforms (LinkedIn)