Hackers Take Limo Service Firm for a Ride
Summary: A breach at CorporateCarOnline, a Kirkwood, Missouri company that brokers limousine reservations nationwide, exposed more than 850,000 credit card numbers with expiry dates, names and addresses, including 241,000 high- or no-limit American Express accounts. The plain-text archive was found on the same servers holding data stolen from PR Newswire and source code from Adobe, and the site carried a ColdFusion vulnerability, suggesting the same attacker or attackers were involved in all three compromises.
Why it matters: The stolen records include travel dates, locations and private jet tail numbers for Fortune 500 CEOs, members of Congress and celebrities, and among the 850,000-plus entries are travel records for Mandiant staff including CEO Kevin Mandia, who was later sent booby-trapped PDF limo invoices by a group he identified as based in China.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026