Forest Global Training Partners

Cyber Risks · Krebs on Security

Starbucks Hacked? No, But You Might Be

Summary: Krebs on Security reported that a wave of stories claiming Starbucks was hacked actually traced to customers who reused their Starbucks account passwords on other sites that had been breached, with attackers trying those credentials en masse; Starbucks denied any hack or intrusion into its servers or mobile applications. Krebs noted that large numbers of compromised Starbucks accounts were for sale on noob-friendly hacker forums in the days before the initial story, along with posted methods for extracting value from hacked accounts.

What's compelling: The fraud was driven by password reuse, and Krebs points out that brands like Starbucks, Hilton Honors and Starwood could be doing more, such as offering two-step authentication, while affected companies take an image hit as the story devolves into allegations of a data breach.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related