Recent Cyber Security Events That May Affect You – Round Two!

Hey everyone,

I am back with another round of ‘Cyber Security Events That May Impact You (Round Two)’. This week, there is no shortage of news and as always, your personal information is constantly at risk. It’s easy to feel overwhelmed by the sheer number of cyber threats, but understanding the risks and taking simple steps can make a huge difference in protecting yourself.

Recent High-Profile Data Breaches:

• Marks & Spencer (May 2025): A cyberattack on the retailer resulted in the theft of customer data, potentially including names, addresses, phone numbers, dates of birth, and online order histories. While payment details and passwords weren’t compromised, the stolen information could still be used for identity theft. This highlights the ongoing risk, even for large companies with robust security measures.

• Hertz (April 2025): A cyberattack on one of Hertz’s vendors exposed customer names, birthdates, contact information, driver’s licenses, and payment card information. Some customers also had their Social Security numbers stolen. This demonstrates that vulnerabilities in a company’s supply chain can have a direct impact on consumers.

• Planned Parenthood (April 2025): A data breach at a lab providing services to Planned Parenthood affected approximately 1.6 million people. This shows that even seemingly unrelated companies can hold sensitive personal data.

• Skyward Specialty Insurance (April 2025): A misconfigured database made certain documents publicly accessible, leading to a ransomware attack. This breach underscores the importance of proper data security and highlights the increasing threat of ransomware.

Common Types of Cyberattacks:

These breaches are a result of common cyberattack methods that you should be aware of:

Phishing: This involves deceptive emails, texts, or websites designed to trick you into revealing your personal information or downloading malware.
Ransomware: This malicious software encrypts your files and demands a ransom for their release.
Malware: This is a broad term for malicious software, including viruses, spyware, and trojans, which can steal data, damage your system, or enable further attacks.
Data Breaches: These happen when hackers gain unauthorized access to an organization’s systems, stealing sensitive information.
Supply Chain Attacks: This targets vulnerabilities in a company’s vendors or suppliers to gain access to its systems and data.
Compromised Credentials: Hackers often exploit stolen usernames and passwords to access systems.

How to Protect Yourself:

While you can’t prevent every attack, you can significantly reduce your risk by:

• Strong Passwords: Use unique, complex passwords for every online account. Consider using a password manager to help you generate and manage them securely.
• Multi-Factor Authentication (MFA): Enable MFA whenever possible. This adds an extra layer of security, requiring a second verification method (like a code sent to your phone) in addition to your password.
• Software Updates: Keep your software (operating system, apps, antivirus) updated to patch security vulnerabilities. Turn on automatic updates if possible.
• Secure Wi-Fi: Avoid using public Wi-Fi for sensitive transactions. If you must use it, use a VPN for extra protection.
• Be Wary of Suspicious Emails and Links: Don’t click on links or open attachments from unknown senders. Verify the sender’s identity before interacting.
• Regularly Monitor Your Accounts: Check your bank statements, credit reports, and online accounts for any unauthorized activity.
• Back Up Your Data: Regularly back up your important files to an external hard drive or cloud storage.

Staying Informed:

Cybersecurity threats are constantly evolving. Stay informed about the latest threats and best practices by checking in here frequently, as well as following reputable cybersecurity news sources and government agencies.

Have you experienced a security incident? Need consulting or simply advice to help you or your business to stay secure? Check out Clarify Cyber!