Threat and Vulnerability Intelligence Database

Example Searches:

	Otelier - 436,855 breached accounts Description: In July 2024, a threat actor gained access to the hotel management platform Otelier and retrieved customer data from well-known hotel brands including Marriott, Hilton, and Hyatt. The data included 437k customer email addresses (a further 868k generated email addresses from the booking.com and Expedia platforms were not loaded into HIBP), names, physical addresses, phone numbers, booking information related to travel plans, purchases recorded by the platform and in a small number of cases, partial credit card data. The data was provided to HIBP by a source who requested it be attributed to "[email protected]". Source: HaveIBeenPwnedLatestBreaches January 18th, 2025 (3 months ago)
	Otelier Breach Exposes Marriot, Hilton Bookings and Client Info Description: Hotel management platform Otelier has suffered a major data breach, exposing millions of guest reservations and personal details from well-known hotel brands such as Marriott, Hilton, and Hyatt. The breach, which began in July 2024 and persisted until October, resulted in nearly 8TB of data being stolen from the company's Amazon S3 cloud storage. Otelier, … The post Otelier Breach Exposes Marriot, Hilton Bookings and Client Info appeared first on CyberInsider. Source: CyberInsider January 18th, 2025 (3 months ago)
	Otelier data breach exposes info, hotel reservations of millions Description: Hotel management platform Otelier suffered a data breach after threat actors breached its Amazon S3 cloud storage to steal millions of guests' personal information and reservations for well-known hotel brands like Marriott, Hilton, and Hyatt. [...] Source: BleepingComputer January 17th, 2025 (3 months ago)
	US sanctions Chinese firm, hacker behind telecom and Treasury hacks Description: The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned Yin Kecheng, a Shanghai-based hacker for his role in the recent Treasury breach and a company associated with the Salt Typhoon threat group. [...] Source: BleepingComputer January 17th, 2025 (3 months ago)
	FCC orders telecoms to secure their networks after Salt Tyhpoon hacks Description: The Federal Communications Commission (FCC) has ordered U.S. telecommunications carriers to secure their networks following last year's Salt Typhoon security breaches. [...] Source: BleepingComputer January 17th, 2025 (3 months ago)
	How to Bring Zero Trust to Wi-Fi Security with a Cloud-based Captive Portal? Description: Recent data breaches have highlighted the critical need to improve guest Wi-Fi infrastructure security in modern business environments. Organizations face increasing pressure to protect their networks while providing convenient access to visitors, contractors, temporary staff, and employees with BYOD. Implementing secure guest Wi-Fi infrastructure has become essential for authenticating access, Source: TheHackerNews January 17th, 2025 (3 months ago)
	MSI - 249,990 breached accounts Description: In July 2024, MSI inadvertently exposed hundreds of thousands of customer records related to RMA claims that were subsequently found to be publicly accessible. The data included 250k unique email addresses alongside names, phone numbers, physical addresses and warranty claims. When contacted about the incident, MSI advised that "there is no evidence the information was ever accessed" and that "the security incident we had did not trigger state data breach notification obligations" due to the absence of "(social security number, driver's license number….etc)". Source: HaveIBeenPwnedLatestBreaches January 17th, 2025 (3 months ago)
	FTC Orders GoDaddy to Fix Inadequate Security Practices Description: The FTC claims that the Web hosting company's security failures led to several major breaches in the past few years. Source: Dark Reading January 16th, 2025 (3 months ago)
	Wolf Haldenstein law firm says 3.5 million impacted by data breach Description: Wolf Haldenstein Adler Freeman & Herz LLP ("Wolf Haldenstein") reports it has suffered a data breach that exposed the personal information of nearly 3.5 million individuals to hackers. [...] Source: BleepingComputer January 16th, 2025 (3 months ago)
	Wolf Haldenstein Data Breach Exposed 3.5 Million Americans Description: Wolf Haldenstein Adler Freeman & Herz LLP, a prominent U.S. law firm, has disclosed a data breach affecting nearly 3.45 million individuals. The breach, caused by an external hacking incident, compromised sensitive personal and medical information. The firm first detected suspicious network activity on December 13, 2023, and took immediate steps to secure its systems. … The post Wolf Haldenstein Data Breach Exposed 3.5 Million Americans appeared first on CyberInsider. Source: CyberInsider January 16th, 2025 (3 months ago)