The largest data breaches, affecting millions of users, are all too common. Here are some of the biggest and most serious violations in recent memory.
"And how the" Russian Hackers "participated in these large-scale processes - but this is not accurate in the next post either"
Adobe
Date: October 2013.
Leaked: 153 million user records.
Details: As reported in early October 2013 by security blogger Brian Krebs, Adobe reported after discovering a data breach that hackers had stolen nearly 3 million encrypted customer credit card records, transaction details, and login credentials for an unspecified number of users. ...
Later that month, Adobe raised that estimate to include identifiers and encrypted passwords for 38 million “active users”. Krebs said the file, released just a few days earlier, contains over "150 million pairs of usernames and hashed passwords from Adobe." An investigation into the incident revealed that the hack also revealed customer names, IDs, passwords, and debit and credit card information.
In an agreement signed in August 2015, Adobe is required to pay $ 1.1 million in legal fees and an undisclosed amount to users to resolve claims for violation of the Customer Records Act and unfair business practices. In November 2016, the amount paid to customers was $ 1 million.
Canva
: 2019 .
: 137
: 2019 . - Canva , , , , , 61 bcrypt ( , ). 137 .
Canva , « , , ».
, Gnosticplayers, ZDNet, , , Canva . , OAuth , Google.
, OAuth. , Canva , 4 Canva, , , , .
eBay
: 2014 .
: 145
: eBay , 2014 . 145 , , , . - , 229 — , .
. , , . .
Equifax
: 29 2017 .
: 147,9 .
: Equifax, , 7 2017 . , - , « » 147,9 . . 29 , , , , «» . ( , , , , ) 143 . 209 000 . 2017 147,9 .
Equifax . , , , . «» .
Dubsmash
: 2018 .
: 162
: 2018 . - Dubsmash 162 , , PBKDF2 , .
Dark Web Dream Market . , , MyFitnessPal, MyHeritage (92 ), ShareThis, Armor Games CoffeeMeetsBagel.
Dubsmash , , , , , , .
: 2012 2016
: 165
: , LinkedIn «» , . .
2012 , 6,5 ( SHA-1) . 2016 . , , MySpace, 165 LinkedIn 5 ( 2000 ). LinkedIn , , , .
Yahoo
: 2013-14
: 3
: Yahoo 2016 , 2014 . , « », , , 500 . Yahoo , .
Then, in December 2016, Yahoo exposed another breach in 2013 by another attacker that compromised names, dates of birth, email addresses and passwords, as well as security questions and answers from 1 billion user accounts. Yahoo revised this estimate in October 2017 to include all 3 billion user accounts .
The initial announcement of the hack was unfortunate as Yahoo was in the process of acquiring Verizon, which ultimately paid $ 4.48 billion for Yahoo's main internet business. These violations are estimated to have lowered the company's value by $ 350 million.