Major Data Breaches & Hacking News in July 2024

July 24, 2024

While many people were celebrating Independence Day and soaking up the sun on the beach this July, identity thieves were celebrating major wins in data breaches. Companies such as AT&T, Authy, Neiman Marcus, Prudential Financial, Advance Auto Parts, and Shopify have all faced significant security incidents compromising user data and corporate information. Read on to get the details about each incident:

AT&T

Organization Description: AT&T is a multinational telecommunications conglomerate and the world's largest telecommunications company.

Breach Size: 109 million+

Data Exposed: A massive data breach at AT&T exposed the call logs of 109 million customers. The compromised data includes phone numbers call and text records. This breach not only impacted nearly all their mobile customers, but also anyone that received a call or text message from their customers. The data was compromised between April 14th and April 25th but was not reported until mid-July. AT&T is investigating the breach and has implemented additional security measures to protect customer data.

Everyone's buzzing about this! It's huge news, but no need to stress. If you were one of the 100 million or more affected, watch out for phishing or smishing (SMS phishing) scams. With IDSeal, we've got your back! You can rest easy and feel totally secure with our 360-degree shield around your identity. All IDSeal plans not only include identity monitoring for your sensitive information, but also device protection for your mobile phone and laptop. See our pricing plans to select what’s best for protecting you and your family.

Authy

Organization Description: Authy is a popular two-factor authentication service that enhances the security of online accounts.

Breach Size: 33 million+

Data Exposed: Authy warned its users to update their iOS or Android apps following a vulnerability that exposed user data. The compromised information includes over 33 million phone numbers leaked by a group named ShinyHunters via a CSV file. The vulnerability, discovered in late June, has now made users vulnerable to SMS phishing and SIM-swapping attacks.

Neiman Marcus

Organization Description: Neiman Marcus is a luxury department store chain known for its high-end merchandise.

Breach Size: 31 million+

Data Exposed: A breach at Neiman Marcus exposed more than 31 million email addresses. It was discovered in May but not disclosed until June. In a separate incident notification published on its website, Neiman Marcus revealed that the data exposed in the attack included names, contact information, Social Security numbers, and employee identification numbers. Neiman Marcus is investigating the incident and has implemented additional security measures to protect customer data.

Prudential Financial

Organization Description: Prudential Financial is a major financial services company offering insurance, investment management, and other financial products.

Breach Size: 2.5 million+

Data Exposed: Prudential Financial disclosed that a data breach impacted more than 2.5 million individuals, exposing names, driver's license numbers, and other sensitive information. The breach in early February resulted from a suspected cybercrime group after they breached their systems. Prudential is notifying affected individuals and has enhanced its security protocols to prevent similar incidents in the future.

Advance Auto Parts

Organization Description: Advance Auto Parts is a leading automotive aftermarket parts provider.

Breach Size: 2.3 million

Data Exposed: Advance Auto Parts experienced a data breach affecting 2.3 million current and former employees, as well as job applicants. The compromised data includes full names, Social Security numbers, driver's licenses, and government ID numbers. Discovered in mid-June, the breach is under investigation, and the company is working with cybersecurity experts to secure its systems. The exposed data could be used for targeted phishing and identity theft.

Shopify

Organization Description: Shopify is a leading e-commerce platform that allows businesses to create online stores.

Breach Size: 180,000

Data Exposed: The breach, linked to a third-party app, compromised sensitive customer data, including Shopify IDs, names, email addresses, mobile numbers, order counts, total spending, and subscription statuses. Shopify discovered the breach in early July and immediately mitigated the impact. The exposed data poses risks for financial fraud and targeted phishing attacks. Shopify is working with cybersecurity experts to strengthen security measures and prevent future incidents.

Hacking & Phishing News

Social Engineering Attacks

Social engineering attacks are on the rise. These attacks exploit human psychology to gain access to confidential information. They often involve phishing emails, pretexting, or baiting tactics to trick individuals into revealing sensitive data. Increasing awareness and training among employees and individuals can mitigate the risks associated with social engineering.

Cloud Security Risks

As more organizations move their data to the cloud, security risks associated with cloud storage are becoming more prominent. Misconfigured cloud settings, weak access controls, and insufficient monitoring can lead to significant data breaches. Ensuring proper cloud configuration, robust access management, and continuous monitoring are essential to protect data in the cloud.

These breaches and emerging threats are critical reminders of the importance of using a top-tier device and identity theft protection system such as IDSeal so that you can be alerted anytime your identity has been stolen, or before your device becomes infected. Staying protected and receiving alerts is one thing, but helping you restore your identity is equally important.

Learn More

IDSeal will continuously search the dark web and alert you when your information is found. If your identity is stolen, we provide white-glove service to help restore your identity with up to $1 million in coverage for eligible losses and fees due to identity theft.²

Implementing personal security practices such as using strong, unique passwords, enabling multi-factor authentication, monitoring financial statements, and being aware of phishing or smishing scams can significantly reduce identity theft risk.