search

vz-risk / VCDB

VERIS Community Database
Other
574 stars 179 forks source link

Round 2 of Click2gov hacking- Superion #14241

Open swidup opened 5 years ago

swidup commented 5 years ago

Round 2 begins: https://www.databreaches.net/eight-cities-impacted-in-second-wave-of-click2gov-breaches-gemini-advisory/

https://www.scmagazine.com/web-services-security-e-commerce-security/eight-cities-payment-records-impacted-in-click2gov-portal-breach/

Deerfield Beach, Palm Bay, Milton and Coral Springs in Florida; Bakersfield, California; Pocatello; Broken Arrow, Oklahoma; and Ames, Iowa

Record count on Ames https://www.desmoinesregister.com/story/news/crime-and-courts/2019/09/25/click-2-gov-data-breach-pay-ames-parking-tickets-hacked-data-compromised-iowa-state-unversity/2444772001/

Round 2 begins: https://www.databreaches.net/eight-cities-impacted-in-second-wave-of-click2gov-breaches-gemini-advisory/

https://www.scmagazine.com/web-services-security-e-commerce-security/eight-cities-payment-records-impacted-in-click2gov-portal-breach/

Deerfield Beach, Palm Bay, Milton and Coral Springs in Florida; Bakersfield, California; Pocatello; Broken Arrow, Oklahoma; and Ames, Iowa

Record count on Ames https://www.desmoinesregister.com/story/news/crime-and-courts/2019/09/25/click-2-gov-data-breach-pay-ames-parking-tickets-hacked-data-compromised-iowa-state-unversity/2444772001/

swidup commented 5 years ago

This is a second round of breaches. The first round was issue #11525. Code this as a new incident.

Palm Bay record count: https://www.floridatoday.com/story/news/crime/2019/09/24/palm-bay-utility-hack-payment-information-credit-card-water-bills/2420117001/

swidup commented 5 years ago

https://www.tulsaworld.com/news/broken-arrow-residents-possibly-hit-by-data-breach-targeting-online/article_42ef285a-abd2-5aab-a9e5-05ae2d80a7b2.html Count of Broken Arrow

swidup commented 5 years ago

https://www.newson6.com/story/41121248/cyber-expert-explains-broken-arrows-data-breach Broken Arrow

swidup commented 5 years ago

https://www.eastidahonews.com/2019/09/pocatello-residents-notified-after-data-breach-of-citys-online-portal/ City of Pocatello

swidup commented 4 years ago

https://bakersfieldnow.com/news/local/city-of-bakersfield-discovers-cyber-security-breach Bakersfield

https://www.bakersfield.com/news/city-to-ditch-online-payment-system-that-was-breached-twice/article_8c04d274-e6f1-11e9-8145-db828c51eef6.html Impact

swidup commented 4 years ago

City of Lacey https://www.king5.com/article/news/local/lacey-utility-hack-bills-credit/281-ab1fc486-dfda-45d4-ba68-a7d1cad3b372

swidup commented 4 years ago

College Station https://www.kbtx.com/content/news/College-Station-stop-online-utility-payments-while-investigating-data-breach-565091582.html

https://www.theeagle.com/news/crime/college-station-data-breach-probe-concludes/article_d39c372c-3d94-11ea-8b84-336ab5948b19.html

swidup commented 4 years ago

https://www.wtvy.com/content/news/Dothan-Utilities-customers-online-payment-data-hacked-565175012.html City of Dothan

swidup commented 4 years ago

https://communityimpact.com/dallas-fort-worth/keller-roanoke-northeast-fort-worth/public-safety/2019/12/05/security-incident-affects-about-3000-fort-worth-water-customers/ City of Fort Worth

swidup commented 4 years ago

Cucamonga Valley Water District Responds to breach https://www.cvwdwater.com/CivicAlerts.aspx?AID=238

swidup commented 4 years ago

https://www.newswest9.com/article/news/local/odessa-security-breach-exposes-debit-credit-card-information/513-92da3c6a-229f-4ef1-8ea8-b4eb78cd56fc City of Odessa

swidup commented 4 years ago

https://www.wacotrib.com/news/crime/firm-identifies-records-from-waco-exposed-in-breach-of-water/article_74152710-e503-518d-8fb8-8042b7cfe952.html City of Waco, and evidence the data was misused

swidup commented 4 years ago

City of Sugar Land https://www.chron.com/neighborhood/sugarland/news/article/Sugar-Land-payment-system-data-breach-among-a-14909537.php

swidup commented 4 years ago

City of Marietta https://www.mdjonline.com/news/marietta-utility-customer-data-found-on-dark-web-after-third/article_a233488c-212a-11ea-bc41-ef628c149a23.html

swidup commented 4 years ago

Sioux City https://siouxcityjournal.com/news/local/data-security-breach-impacts-city-of-sioux-city-customers/article_9a1f98a2-783d-5a8e-a4b9-e9db2c3f5ce4.html

swidup commented 4 years ago

City of San Angelo

https://www.gosanangelo.com/story/news/local/2019/11/13/san-angelo-water-utility-billing-has-second-security-breach/4179667002/

https://www.gosanangelo.com/story/news/local/2019/12/26/new-online-payment-system-begins-san-angelo-water-customers/2752463001/

Impact to business relationship

swidup commented 4 years ago

city of Aurora https://kdvr.com/2019/12/31/aurora-warns-water-customers-about-data-breach-involving-payment-system/

swidup commented 4 years ago

https://www.databreaches.net/or-the-city-of-bend-discloses-click2gov-breach/ City of Bend

swidup commented 4 years ago

Port Orange https://www.clickorlando.com/news/local/2020/01/10/port-orange-utility-customers-might-have-had-credit-card-information-compromised/

swidup commented 4 years ago

Mount Airy https://www.mtairynews.com/news/82123/possible-malicious-activity-targets-city-payments

swidup commented 4 years ago

https://carsonnow.org/story/02/11/2020/financial-information-compromised-carson-city-residents-who-pay-water-bill-online Carson City

swidup commented 4 years ago

https://statescoop.com/ux-user-experience-click2gov-data-breach-cities/ Detail on how the attackers got the data.

swidup commented 4 years ago

https://www.bankinfosecurity.com/payment-card-skimmer-attacks-hit-8-cities-a-14512

swidup commented 4 years ago

Palm Bay impact https://www.hometownnewsbrevard.com/news/click2gov-payment-security-investigation-update/article_06a3b9e2-c512-11ea-9c8a-3b5eb0a4fa1c.html