Skip to content

The Top 5 Biggest Data Leaks in 2021

Data breaches are a common phenomenon in the world of data and can pose serious threat to organizations. When a data breach occurs, a company’s reputation is at risk, and fines from legal authorities may be imposed. The costs of such breaches can be enormous. According to IBM’s Cost of a Data Breach Report, issued in conjunction with the Ponemon Institute, in 2021 the average cost of a data breach reached $4.24 million per incident, in healthcare it was $7.13 million. Let us walk you through the biggest data breaches of 2021.

#1 Twitch

Number of records leaked: 5 billion

The Amazon-owned streaming service experienced a data breach in October. There was an error in a Twitch server configuration change that resulted in access to 100GB of data by a malicious third party and data leak.

An investigation was launched immediately, the company fixed the configuration and secured the systems. This leak was caused by a human error, hence an insider threat.

Types of data exposed: 

  • User data
  • Client list
  • Twitch’s source code
  • Security tools
  • Three years of payment information
 

#2 Astoria Company

Number of records leaked: 30 million

Astoria Company LLC focuses on lead generation from various websites and collects data for its clients.

In January, the team at Night Lion Security discovered several new breached databases of Astoria Company for sale on the dark web. Night Lion notified Astoria Company, the company was not aware of the breach.

Types of data exposed: 

  • Social security numbers
  • Bank accounts
  • Driver’s license numbers
  • Names
  • Email addresses
  • Dates of birth
  • Mobile phone numbers
  • Physical addresses
  • IP addresses
  • Credit history
  • Medical data
  • Home and vehicle information
 

#3 Park Mobile

Number of records leaked: 21 million

Park Mobile provides the largest cashless parking app in the U.S. In March, the company experienced a data breach in which the personal data of 21 million customers was sold online by Russian hackers.

The breach occurred due to vulnerability in a third-party software that is being used by the company. Park Mobile immediately launched an investigation, notified legal authorities, and recommended that customers change their passwords.

Types of data exposed: 

  • License plate numbers
  • Email addresses
  • Phone numbers
  • Vehicle nicknames

 


#4 ClearVoiceResearch.com

Number of records leaked: 15.7 million

ClearVoice Research focuses on market research surveys. In April, the company discovered that a backup file of one of their survey databases from 2015 was exposed and sold online.

The company launched an investigation, located the backup file, secured it and eliminated any further exposure. Other files were checked to see whether they were secured properly against other breaches.

ClearVoice Research reset the passwords of people whose data might have been compromised and implemented security measures to prevent the recurrence of such an event.

Types of data exposed: 

  • Names
  • Email addresses
  • Addresses
  • Home addresses
  • Phone numbers
  • Dates of birth
  • Passwords from 2015
  • Responses to various questions (such as health conditions, political affiliation and ethnicity)

 


#5 Jefit

Number of records leaked: 9.05 million

Jefit is a workout tracking app. In March, the company experienced a data breach due to a security bug. The breach impacted clients’ accounts that were registered before 20th September 2020.

The company secured the servers and impacted accounts immediately and launched an investigation and contacted the authorities. Jefit also adopted new security measures to avoid another breach in the future.

Types of data exposed: 

  • Account usernames
  • Email addresses associated with the accounts
  • Encrypted passwords
  • IP addresses when creating the account

How to avoid data breaches

There are various ways to avoid data breaches. The tips below might help you to protect your company’s valuable data.

  • Identify all the sensitive data in your company and review who can access it and why.
  • Review security policies and make sure they are not too difficult to understand and follow.
  • Educate your employees and reiterate why data security is important.
  • Implement a DLP solution that helps you to perform security audits and set and manage security policies.

Eighty-five percent of companies experience a data breach and 60% of small businesses close within 6 months due to a major data leak. At Safetica, we help all companies, large and small, from various sectors to protect their data against leakage and insider threats. 

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Safetica
Safetica is to provide small and mid-sized companies with the same quality data protection that corporations have – affordably, and without any additional IT administration or disruptions in operation.

訊連科技舉辦「2022 智慧安控新機遇」研討會 介紹以全球頂尖技術打造,結合門禁考勤及防疫的智慧安控解決方案

【2022年2月9日,台北訊】 AI人工智慧領導廠商訊連科技(5203.TW)宣布將於 2022 年 2 月 23 日舉行「2022 智慧安控新機遇」研討會。會中將介紹FaceMe® Security 7新版本的多人動態式人臉辨識解決方案,提供門禁考勤及口罩偵測、體溫測量等防疫功能,可適用於智慧辦公室、智慧工廠及智慧建築等多樣場景,也推出全新「以圖找圖」的智慧人臉搜尋功能。此外,並邀請 Intel® 、Network Optix及晶睿通訊等產業專家,分享最新人工智慧於邊緣裝置的應用,及安控產業的最新趨勢。

疫情當前,員工上班量體溫、配戴口罩已是每日例行公事,然需使用額溫槍量測及使用刷卡方式打卡,不僅造成不必要之人力、時間成本,亦有潛在的接觸風險。訊連科技推出 FaceMe® Security 動態式人臉辨識軟體,方便員工以「刷臉」方式,無須刻意站在鏡頭前,自然行走即能完成人臉辨識,在 1 秒內同時完成出勤打卡、口罩偵測、體溫測量等後疫情世代必備工作,為企業實現「零接觸」門禁暨員工健康管理。

FaceMe® Security可相容於現行各式 IP 攝影機、邊緣裝置、工作站與伺服器,無須全面升級安控設備,僅需額外安裝軟體及搭配部分具有人臉辨識能力之電腦或工作站,以低於20%之成本,即可為企業無縫升級刷臉門禁、防疫等多樣應用。

訊連科技也與晶睿通訊、Network Optix 等安控廠商合作,將 FaceMe® Security 解決方案整合至主流VMS影像管理系統。當偵測到特定人士或事件發生時,便會即時發送告警,輔助保全迅速應對。

而為加強物聯網設備的 AI 運算能力,FaceMe® 亦針對多項 Intel® 物聯網服務進行優化,以提升企業在 Intel® 平台導入 AI 人臉辨識的運算效能與彈性。訊連科技為Intel® 物聯網解決方案聯盟成員,透過與 Intel® 深化合作,訊連科技將加速布局智慧安控與 AIoT 領域的落地應用。

「2022 智慧安控新機遇」研討會活動訊息

  • 時間:2022 年 2 月 23 日 13:30 – 16:30
  • 地點:華南銀行國際會議中心 201 會議廳(台北市信義區松仁路 123 號 2 樓)
  • 活動亦同時透過線上直播進行
  • 活動連結:https://mailchi.mp/cyberlink/solutions_day_2022

關於Version 2

Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴,Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區,客戶來自各行各業,包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

關於CyberLink
訊連科技創立於1996年,擁有頂尖視訊與音訊技術的影音軟體公司,專精於數位影音軟體及多媒體串流應用解決方案產品研發,並以「抓準技術板塊,擴大全球行銷布局」的策略,深根台灣、佈局全球,展現亮麗的成績。訊連科技以先進的技術提供完美的高解析影音播放效果、以尖端的科技提供完整的高解析度擷取、編輯、製片及燒錄功能且完整支援各種高解析度影片及音訊格式。產品包括:「威力導演」、「PowerDVD」、「威力製片」、「威力酷燒」等。

7 Questions to Ask an Edge Computing Provider

Edge computing is now well established as an opportunity to drive innovation by putting compute resources closer to where they are needed. From manufacturers who are applying edge computing on the factory floor to monitor machine data and inspect outputs or a chain of retail stores that have deployed edge-based solutions to run their critical applications, the appetite for edge computing is growing by the day.

One of the first and most important steps for any edge journey begins with finding the right solution vendor. There are now dozens of vendors who offer some flavor of edge functionality – but as is the case with any enterprise technology, you’ll need to be able to read through the marketing fluff to determine which capabilities matter most to your specific use case. What follows are just a few questions that should be part of every evaluation along with a brief explanation as to why they’re important.

1. How resilient is your edge solution? What type of automated failover capabilities does the edge solution possess?

For most edge deployments, skilled IT staff are typically not on-site to troubleshoot issues when they arise. This is especially true for organizations that maintain numerous remote branch offices where technical resources are in short supply. The resilience of a prospective edge solution should be considered as a core selection criteria so you’ll want to ask several questions about how a prospective vendor ensures availability in the event of a disruptive event. A mature edge solution should be able to demonstrate how their systems can automatically failover to another node and minimize downtime in the event of a disruption.

2. What type of software do you use to manage the edge systems and what type of automation capabilities does your solution possess?

A robust edge computing solution is more than just an integrated stack of compute, networking and storage equipment (and few so-called edge vendors meet this minimum standard!). What makes edge truly deliver value, lies in the ability to intelligently orchestrate these infrastructure components as a unified whole so that your edge systems can quickly adapt to evolving conditions. The software that keeps these systems running is like the cerebral cortex of your edge network and a mature edge solution should also include built-in automation capabilities that can successfully mitigate small issues before they cascade into a full-blown outage. Beyond evaluating the intelligence of a prospective edge solution, you should also be mindful of its usability. If the software is too complex then usage will be limited to those select individuals who fully understand it. Finally, any worthy edge solution provider should be able to provide a live demonstration of their software’s capabilities. Even better, they should offer a free trial version of their edge solution to help you evaluate it in your real-world environment.

3. Are there any additional licensing fees for virtual machines?

Before you can sell your leadership team on an edge computing solution, you’ll need to understand the fully loaded costs of the infrastructure you’re buying. Imagine purchasing a new car only to find out that at the end of every year that you need to pay additional fees to fully utilize all of its capabilities? Therefore it’s important to consider all of the costs – for instance, do you need an additional license for a hypervisor like VMware or for advanced virtualization features like software defined storage? Do you need to purchase additional tools to remotely monitor remote hardware and software (i.e. VMWare vCenter or other cloud based management tools). You can read more about the hidden costs of VMware in this CRN interview with Scale Computing CEO, Jeff Ready.

4. How will maintenance and upgrades of remote devices and systems be handled?

The ease in which you can maintain your edge infrastructure should also be a key consideration when evaluating a potential solution. By their very nature, edge systems exist and operate in remote locations. This might mean a remote office far away from headquarters or it could be something even more extreme such as a freighter in the middle of the ocean. And because trained IT staff won’t be available to maintain and update these systems, it’s imperative that you understand the time and effort that will be required to keep your edge deployment up-to-date and fully operational. For organizations that have deployed edge to multiple different locations, it’s also important to assess an edge vendor’s ability to centrally deploy new functional and security updates across their estate and whether they are able to roll these out in a non-disruptive fashion.

5. How easily does your edge solution integrate with different cloud environments?

While many in the industry believe that the edge and the cloud are in fierce competition with one another, the reality is that there is a role and function for both and they should ideally complement each other. As the authors of this FCC whitepaper write, “instead of being in competition with each other, forward-looking organizations, and even many public cloud service providers, are beginning to consider how to selectively employ both.” A mature edge provider should be able to demonstrate integrations with the major public cloud providers including Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and IBM Cloud and should also be able to seamlessly run VMs in container environments such as Kubernetes and Docker.

6. How much training does your solution typically require for staff to be productive?

Every new solution that is introduced into your environment represents another layer of potential complexity. And while every tool will require some degree of training for the individuals tasked with managing your edge environment, the complexity of some tools will require significantly more time and effort than others. Because your IT staff already has too much on their plate, you don’t want them to have to spend days or weeks working to get certified on a new system. The most feature-rich edge solutions should pay as much attention to the usability and intuitiveness of their platform as they do to their capabilities matrix.

7. Can we speak to other customers in our industry who have deployed your edge solution?

Finally and perhaps most important of all, before making a final decision about a particular edge provider, you’ll want to speak to other businesses in your industry and their firsthand experience with a particular vendor as their insights can help identify potential issues and questions to ask by getting the unvarnished truth from other technology professionals who have actually applied the technology. Peer-review sites like Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius also provide an essential lens into the real-world application of edge technologies and should be part of any due diligence process before making a final purchase decision.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

New cybersecurity project to decrease online vulnerability with the help of Flanders Innovation & Entrepreneurship funding

Antwerpen, Bonheiden, Brussel, Gent and Leuven, Belgium, February 1st, 2022. A team of three Flemish technology and services companies and three research groups have started working on the APAX project. A two-year project, Automated Posture Analysis that Scales (APAX) will investigate the risks related to the digital presence of online assets in an automated manner that can adapt itself to the requirements of hyper scaling. The goal of the project is to achieve a higher level of cybersecurity and avoid negative impact from vulnerabilities such as Log4J by maximising the usage of automated processes.

Industry project partners Awingu, Ceeyu and Toreon will join forces to research, explore and build technologies thanks to a cybersecurity funding initiative from VLAIO, the Flemish government agency for innovation and entrepreneurship. The three companies will apply ongoing research and inspire academics for future work to help automate the analysis of threats and challenges in cybersecurity. They will do so using the expertise from research partners VUB Software Languages Lab and VUB Artificial Intelligence Lab, together with industry association LSEC.

Limited resources

With the ongoing digitalization and continuous evolving cloud, internet technologies and applications running on them, new cybersecurity challenges appear while many older ones have not yet been resolved. The recent Log4J vulnerability that started early December 2021 continues to ripple throughout 2022 and will likely last for months or even years to come. The vulnerability kept cybersecurity teams busy during the end-of-year holiday period. All systems and applications needed to be inspected and analysed for potential business risks that needed mitigation. Most organizations identified this as a labour-intensive activity, eating away their limited resources. They realised that an automated approach to protection, is a better way to go.

Maximize automation

The fundamental goal of the APAX project is to avoid malicious activities to happen and to avoid active business systems and applications from being inaccessible, infringed, unreliable, held hostage or being abused to trade illicit content. To keep up with these challenges and evolutions, cybersecurity will need to evolve from a manual, labour-intensive approach to automated prevention, detection, mitigation, reaction, incident handling, process management, reporting, analysis, and recovery. This must, of course, happen in close collaboration with the operating parties, supporting businesses, people, and processes.

Increase efficiency

The APAX project partners will work on improving minimally 50 partially automated assessments for cybersecurity postures. Further automation will increase the efficiency of cybersecurity experts and halve the time spent on each individual case. Maximizing automation decreases the cybersecurity reaction time and reduces the repetitive work of security specialists, allowing them to focus on their expert work.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Parallels 
Parallels® is a global leader in cross-platform solutions, enabling businesses and individuals to access and use the applications and files they need on any device or operating system. Parallels helps customers leverage the best technology available, whether it’s Windows, Linux, macOS, iOS, Android or the cloud.

About Ceeyu
Ceeyu provides a cloud-based analysis of a company’s digital presence, outside-in. This posture analysis displays all IT assets visible to any internet user, including malicious ones applying a similar analysis to gather intelligence to determine their attack paths. Ceeyu aims to quickly expand its intelligence gathering, support to standardize the results and automate the analysis to minimize its cost and provide continuously near real-time posture analysis.

About Toreon
Toreon is the largest Flemish originated cybersecurity expert services company. Grown from a team of specialized professionals, the company expanded rapidly organically. Toreon analyses the cybersecurity posture from the inside-out. A cybersecurity analysis can quickly require between 100 and 200 different scans that need to be executed, resulting in information that requires analysis. To optimize its services to its customers, but also to optimize the internal expert resources, Toreon has started to automate these analyses, but aims to further expand this process automation and by adding automated intelligence.

About VUB Labs
The VUB Software Languages Lab and the VUB Artificial Intelligence Lab are both innovative engineering departments from one of the leading Flemish universities in Belgium. Both have a long-standing scientific and industry-supporting background. Their expertise from the domain of applying AI-based automation and fuzzing technologies will be supporting the technology companies throughout the two-year project.

About LSEC
LSEC, an industry association that celebrates its 20th anniversary in 2022 will be focusing on the standardization work for automated postures, in relation to third party risk management analysis and relaying to developing industry standards in the US and EU. For more information, please contact Ulrich Seldeslachts, MD LSEC, Sebastien Deleersnyder, CTO Toreon, or any of the industry and scientific partners.

Cyber Threats: Rise In Prevalence, Rise In Costs

Threat Surfaces Are Expanding

The proliferation of devices requesting access to the network, driven largely by the adoption of BYOD policies and utilization of IoT devices, has forced network security teams to be more diligent about setting and enforcing effective access control policies. Despite best efforts, attempts to address this evolving problem are akin to putting a finger in the dike – rogue devices inevitably slip through the cracks, leaving corporate networks vulnerable to ransomware and countless other cyber threats.

What’s more, network complexity complicates the issue. Today, networks consist of an ever-increasing number of WANs, LANs, VLANS, SD-WANs, MPLS, VPNs, employees’ homes, coffee shops, hotels, airports – wherever authorized devices can connect to gain access to company resources. As if the industry needed another acronym – some are calling it Bring Your Own Network (BYON). Regardless of how we define the trend, access to everything (from everywhere) has changed the security dynamic.

The impact on corporate bottom lines is tangible. The risks and costs associated with network breaches are growing larger by the year. It seems as if every day a new Fortune 500 company is reporting a costly cyberattack. Data breaches from January through September 30, 2021 (9 months), exceeded the total number of events in the entire year of 2020 by 17% (1,291 breaches in 2021 compared to 1,108 breaches in 2020). Adding to the challenge, threat actors are becoming more sophisticated and prevalent, leaving organizations on their heels fighting to catch-up.

A New Age of Cyber Threats

Cyber threats have become alarmingly prevalent, with malware increasing 358% overall and ransomware increasing 435% in 2021 compared with 2019. All threats, from phishing to attacks on Internet of Things (IoT) devices and supply-chains, have grown exponentially. Attacks on IoT devices tripled in the first half of 2019 and supply chain attacks were up 78%.

Costs have escalated in tandem. The average ransomware payment rose 33% in 2020 over 2019, to $111,605. The total cost of cybercrime for each company increased 12% from $11.7 million in 2017 to $13.0 million in 2018. Data breaches cost enterprises an average of $3.92 million annually.

In an attempt to mitigate these costly risks, many companies have opted to deploy niche solutions and tools such as network and host intrusion detection, various threat intelligence feeds, and mobile device management. While useful in isolation, these disparate tools (e.g., Network Performance Management, SIEM, XDR, SOAR, etc.) create many different panes of glass, leaving gaps in network security and complicating IT infrastructures.  All this means extra work for already thinly-stretched IT teams. In this sense, less really is more.

Essential Areas of Cybersecurity

The cybersecurity software market is oversaturated with tools that have been designed for very siloed tasks. Many of these have been developed in direct response to new threats, and require a certain focus and sophistication that doesn’t lend itself to the average IT professional’s chaotic daily life. Instead, companies need to develop a simple, yet solid security foundation that consists of three essentials:

  1. Firewalls to monitor incoming and outgoing network traffic
  2. Network access control to enforce access policies, assess connected device risk and remediate non-compliant devices
  3. Endpoint protection like antivirus to prevent, scan, detect and eliminate malware and other viruses from devices

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。