Money Credit and You© Latest News and Information

Backoff Malware Breach Continues

October 16, 2014

(Forbes) – Data breach has now hit six large companies, including top franchises Kmart, Dairy Queen and JP Morgan Chase. Recently Dairy Queen announced that 400 store locations had been compromised by Backoff malware. This seems to be an ongoing battle with hackers, and your personal finances.

Here is the latest report on data breaches, according to Forbes:

Dairy Queen – Dairy Queen confirmed that nearly 400 Dairy Queen locations (and one Orange Julius location) were compromised by Backoff malware in August. When news of a potential breach first broke in August, Dairy Queen denied the the breach initially but then began an investigation. The investigation revealed that the attackers used compromised account credentials from a third party vendor to get into Dairy Queen’s systems. Customers’ names, card information, and expiration dates were all accessed in the breach. Dairy Queen now believes that the malware has been contained, and the company’s website lists all affected stores as well as the dates of the attack.

Home Depot announced that 56 million cards had been compromised in a data breach that lasted five months.

JP Morgan Chase  – Last week, JP Morgan Chase confirmed that 76 million households and 7 million small businesses were impacted in a data breach in June and July.  JP Morgan says that financial data—including account numbers, passwords, dates of birth, Social Security cards—was not accessed in the breach. Customers who use Chase.com, JPMorganOnline, Chase Mobile or JPMorgan Mobile may have had their contact information accessed, including names, addresses, phone numbers and email address. Unlike in many breaches, JP Morgan Chase says customers don’t need to change passwords, monitor their credit, or get new credit cards, but the bank is warning customers to be wary of phishing attempts following the breach.

Goodwill revealed that 868,000 cards had been compromised in a point-of-sale attack.

AT&T An employee accessed personal information belonging to approximately 1,600 AT&T customers in August, Reuters reports. AT&T informed these customers in a letter that their Social Security numbers, driver’s license numbers, and internal AT&T information were all potentially compromised by the employee, who has since been fired. AT&T is offering free credit monitoring services to customers, and recommends they change their account passcodes.

North Dakota State College of Science – Personal information belonging to more than 15,000 students and employees at NDSCS may have been accessed in a data breach. On September 1, NDSCS’s IT Services discovered malware on a number of computer servers that contained student and employee names, Social Security numbers and mailing addresses. The college says it hasn’t found any evidence that the information has been accessed, but all affected persons are being notified. The college has since taken steps to beef up its security.

Flinn Scientific – At least 500 Flinn Scientific customers have been notified that their personal information was compromised in a malware attack on the company’s store, beginning on May 2. The breach wasn’t discovered until September 8, and the website was secured on that date. Flinn Scientific believes that there have been no attacks since September 8, and the company has implemented additional security measures. Flinn Scientific is offering customers free credit monitoring.

Touchstone Medical Imaging – A “seldom used folder” at Touchstone Medical Imaging Center was accidentally left open to the Internet, potentially compromising the personal information of some patients who were billed before 2012. In a letter to patients, Touchstone explained that the company first discovered the folder in May, but believed that the files weren’t readable. Then in September, Touchstone realized that the files were indeed readable—meaning that the patients’ names, dates of birth, Social Security numbers, health insurer names, radiology procedures, and diagnoses were accessible online. Touchstone doesn’t believe that the information was accessed or used improperly.

Other recent breaches include Kmart, PF Chang’s, Michaels, and Neiman Marcus.

Are you a victim of fraud or money scam? Share your story with us on the Money Credit and You Facebook page! Show.

Source: Forbes