VISTA InfoSec

APRIL 5, 2024

The following are some of the consequences when data privacy and security are compromised: Productivity loss. Operational interruption happens when cybersecurity is breached. A file falling into the wrong hands or credentials being revealed to unauthorized personnel could spell lost productivity and revenue. Tainted reputation.

Best Practices 278

Best Practices Business Continuity Continuity Compromise 278

Payments Dive

JANUARY 20, 2023

It’s unclear where or how customer account credentials were obtained. Impacted customers were notified of the incident nearly a month after it was discovered.

Data Breach 78

Data Breach Breach PayPal Credential 78

PYMNTS

OCTOBER 17, 2018

Visa announced today the commercial expansion of its Visa Token Service for “credential-on-file token requestors.” Network tokens offer merchants an appealing solution to boosting the security of transactions while also helping merchants manage the account credentialing that is now the reality of multichannel retail payments.

Credential 86

Credential Digital Payments PayPal Payments 86

Payments Source

NOVEMBER 6, 2018

The breach may have occurred through a technique called "credential stuffing," in which hackers who have stolen passwords for other websites try them out on an online banking site.

Breach 71

Breach Data Breach Credential Accounts 71

PYMNTS

JANUARY 18, 2019

The largest public data breach ever has been discovered, according to Gizmodo. The breach is just one data batch of at least six more, collected by someone trying to sell the stolen info, which amounts to almost 1 terabyte of stolen information. The Collection #1 breach has a staggering 2.7 billion combos.

Data Breach 63

Data Breach Breach Credential Compromise 63

PYMNTS

MARCH 31, 2020

Marriott International experienced a massive data breach in an “incident” that involved a property system. The hotel firm said in a notice that it “at the end of February 2020, the company identified that an unexpected amount of guest information may have been accessed” with the sign-in credentials of two franchise property staffers.

Data Breach 56

Data Breach Breach Credential Assessments 56

VISTA InfoSec

JUNE 3, 2024

According to a Verizon report , over 80% of hacking-related breaches are due to compromised passwords. Credential stuffing , a form of cyberattack where attackers use stolen credentials to gain unauthorized access to user accounts, highlights the need for strong password policies.

MFA 130

MFA Credential PCI DSS Compliance 130

PYMNTS

JULY 24, 2020

and Canadian online grocery delivery service, blamed reused passwords for the recent account hacks that led to the theft of its customers’ personal data that landed on the dark web. PYMTS reported hundreds of thousands of Instacart customers had their personal data sold online, including the last four digits of their credit cards.

Accounts 75

Accounts Compromise Data Breach Phishing 75

PYMNTS

APRIL 24, 2019

Reports have appeared all over social media, particularly via Reddit and Twitter , about Chipotle user accounts being pirated, with hundreds of dollars’ worth of food ordered to customer cards that those customers never saw. She further noted that the firm is pretty sure credential stuffing is the root cause in this case.

Credential 67

Credential Breach API Addressing 67

EBizCharge

OCTOBER 25, 2023

Now more than ever, businesses are focusing on preventing data breaches and implementing response protocols to mitigate breaches if they occur. According to the 2023 IBM Data Breach Report , the global average cost of data breaches was $4.45 What are data breaches?

Data Breach 52

Data Breach Best Practices Breach Phishing 52

Fintech News

MAY 1, 2025

Data from Verizon Businesss 2025 Data Breach Investigations Report reveal that system intrusion has risen considerably over the past four years, escalating to become the dominant threat pattern across APAC. In 2024, these attacks accounted for 20% of breaches in APAC, marking a 49-point decline from 69% back in 2020.

APACS 74

APACS Data Breach Breach Ransomware 74

PYMNTS

JUNE 6, 2016

Reports of data breaches and cyberattacks are serious, but what happens when those claims are untrue? According to Krebs on Security , last week, several identity theft protection companies incorrectly named Dropbox as the source of a data breach that compromised nearly 73 million usernames and passwords.

Data Breach 42

Data Breach Breach Identity Theft Compromise 42

Finextra

JUNE 13, 2025

Payment details often reside in multiple locations across an organisation — from shared folders to manual payment files — making it hard to track who has access, where data is stored, and how it’s being used. Tokenisation replaces sensitive bank account information with a secure, randomised token — a placeholder with no exploitable value.

Data Security 59

Data Security Payments Data Security ISO 20022 59

VISTA InfoSec

JUNE 27, 2024

In a recent development that has raised concerns across the education sector, Los Angeles Unified School District (LAUSD) has confirmed a significant data breach involving student information.

FBI 130

FBI Breach MFA Cybersecurity 130

PYMNTS

JUNE 28, 2016

Account passwords for German telecommunications company Deutsche Telekom are for sale on the dark web, but the company said on Monday (June 25) that it has not been the victim of a cyber attack. Instead, the firm has suggested that the leaked data, estimated to range from 64,000 records to 120,000 records, was obtained from another source.

Data Breach 40

Data Breach Breach Credential Phishing 40

PYMNTS

APRIL 14, 2019

According to reports citing Microsoft, the company confirmed that a “limited” number of webmail users — including @msn.com and @hotmail.com — saw their accounts compromised by hackers. It also appears the bad guys didn’t access login credentials including passwords. Microsoft said affected users should change their passwords.

Breach 68

Breach Accounts Credential Compromise 68

PYMNTS

SEPTEMBER 19, 2019

The threat of a data breach is now an ever-present part of life for customers and the banks that serve them. A reported 3,813 data breaches across a number of industries — collectively exposing 4.1 billion stolen credentials. billion stolen credentials. This is where AI and ML technologies can come in handy.

AI 57

AI Accounts Data Breach Credential 57

PYMNTS

SEPTEMBER 19, 2019

Thinkful, an online education site for developers, has revealed that it has been hit with a data breach. “We As soon as we discovered this unauthorized access, we promptly changed the credentials, took additional steps to enhance the security measures we have in place, and initiated a full investigation.”.

Data Breach 40

Data Breach Breach Request for Comment Credential 40

The Paypers

MAY 27, 2025

A cybersecurity researcher has discovered an online database containing over 184 million account credentials from Google , Microsoft , Facebook, Instagram, and other major platforms.

Data Breach 48

Data Breach Breach Credential Database 48

The Fintech Times

DECEMBER 18, 2023

“A never-ending stream of data breaches combined with highly sophisticated and technical attacks means the stolen personal information available on the dark web is continuously replenished. Cybercriminals use that information to impersonate people in positions of authority.

Cybersecurity 139

Cybersecurity Ransomware RDC Credential 139

Payments Source

NOVEMBER 19, 2017

Widespread data breaches have sparked a rise in account-takeover fraud using stolen consumer credentials, prompting merchants to crack down on suspicious purchases. But too many legitimate customers are getting caught in the process.

Account Takeovers 61

Account Takeovers Data Breach Credential Breach 61

PYMNTS

JANUARY 27, 2020

Businesses have good reason to be concerned about data breaches. Cybercriminals’ accomplishments come at the expense of targeted businesses, with a recent study finding that individual data breaches cost firms around the globe an average of $3.92 million in 2019 — a 1.5 percent increase from 2018. Fighting the Phishers.

Phishing 99

Phishing Data Breach Breach Fraud Prevention 99

PYMNTS

SEPTEMBER 22, 2016

” Yahoo is apparently on the verge of reporting a massive data breach of its service — a giant hack that has exposed the data behind hundreds of millions of user accounts. ” Peace was, by his own admission, selling credentials of 200 million Yahoo users from 2012 on the dark web for just over $1,800.

Breach 87

Breach Data Breach Credential Adjustments 87

Fintech News

JANUARY 17, 2024

With scams accounting for 54 percent of all cases, there’s a 200 percent increase in voice scams from the previous year. As banks transition to digital-first models, criminals exploit online vulnerabilities to open fraudulent accounts using synthetic IDs.

Deepfake 125

Deepfake APACS Scams Authentication 125

PYMNTS

JULY 30, 2019

The documents said Thompson accessed the data through a “misconfiguration” of a firewall on a web application. . Capital One revealed the massive data breach in a news release on July 29, 2019. The breach impacts about 100 million individuals in the United States and around 6 million in Canada.

Breach 87

Breach Law Enforcement Data Breach Social Security 87

PYMNTS

JUNE 29, 2020

The most popular technique, credential abuse, involves fraudsters using compromised passwords and other login information to gain access to sensitive systems. One 2018 study found that 81 percent of open banking-related breaches were the result of stolen or weak passwords. There were 85.42 million were aimed at the financial industry.

MFA 96

MFA Risk Security API 96

PYMNTS

JULY 9, 2018

Timehop , the mobile app that gathers photos from social media, disclosed on Monday (July 9) that it was the subject of a data breach. In a blog post, the company said that on July 4 it experienced a network intrusion that led to a breach of some of its customers’ data.

Data Breach 40

Data Breach Breach Multifactor Authentication Credential 40

PYMNTS

NOVEMBER 7, 2019

Capital One employees raised red flags over security risks before the company suffered a massive data breach. About five years ago, the company started moving its data to the cloud. The alleged hacker, Paige Thompson , was a former employee of Amazon Web Services, which hosted the Capital One database that was breached.

Data Breach 40

Data Breach Breach Security FBI 40

Fintech Finance

NOVEMBER 6, 2024

Crucially, by using Mastercard Click to Pay, online shoppers no longer need to have an account or a saved card-on-file with a merchant in order to use biometric authentication with payment passkeys, making quick, easy, secure guest checkout a reality.

Visa 98

Visa APACS Transactions Authentication 98

PYMNTS

JANUARY 23, 2020

billion consumer accounts fell victim to data breaches during the first half of 2019 — to the tune of $4 million in lost revenue per breach. More than 90 percent of Americans have fallen victim to online scams, data breaches, identity theft or other forms of fraud, though certain varieties are more common than others.

Phishing 64

Phishing Data Breach Breach Scams 64

PYMNTS

JANUARY 25, 2021

They often hack into these consumers’ accounts using passwords stolen from other sites that use the same login credentials, for example. A Lloyds Bank study found that this type of fraud has increased fivefold over the past year, accounting for up to 1 percent of all loan applications.

Credential 94

Credential Data Breach Phishing Cybersecurity 94

FICO

MARCH 22, 2022

Account takeover fraud (ATO) occurs when an unauthorized person takes control of an account. The fraudster takes steps to actively control the account, for example by applying for a new card or changing the account contact information or password. Source: Cifas Fraudscape 2021. ATO – Old School and High-Tech.

Account Takeovers 52

Account Takeovers Accounts Authentication Data Breach 52

PYMNTS

JANUARY 27, 2021

Financial institutions (FIs) around the world are confronting these issues with numerous digital implementations , as 85 percent of banks are offering some form of digital account opening, for example. One study found that the use of malicious botnets to register false accounts increased by more than 70 percent in Q3 2019, for example.

Innovation 85

Innovation Security Bots Identity Theft 85

PYMNTS

MAY 6, 2016

Usernames and passwords are being traded by the millions around Russia’s criminal underworld — evidence of one of the largest breaches in history. million stolen accounts have been identified — the majority of which belong to users of Mail.ru, Russia’s most popular email service. These credentials can be abused multiple times.”

Compromise 42

Compromise Accounts Request for Comment Breach 42

Fintech News

JUNE 10, 2024

Akira affiliates gain initial access by exploiting vulnerabilities, brute-forcing services like Remote Desktop Protocol (RDP), social engineering, and using compromised credentials. Once inside, they create new domain accounts and escalate privileges using various tools. Employee education plays a critical role in cybersecurity.

Ransomware 103

Ransomware Authorization Phishing Cybersecurity 103

PYMNTS

AUGUST 19, 2019

In the latest Mobile Order-Ahead Tracker , PYMNTS explores the latest developments in the world of QSR rewards programs and how credential stuffing and account takeovers are plaguing the industry. Chipotle is on the route to recovery after suffering setbacks due to food safety concerns, falling sales – oh, and an April data breach.

Account Takeovers 63

Account Takeovers Data Breach Bots Credential 63

Seon

JANUARY 29, 2024

Having trouble protecting your user accounts? In this guide, we’ll see why accounts are targeted, how fraudsters acquire them, and, of course, which steps you should take to secure them. This is your complete guide to understanding and detecting account takeover (ATO) fraud in your business. What Is Account Takeover Fraud?

Account Takeovers 52

Account Takeovers Accounts Fraud Prevention Phishing 52