New T-Mobile Data Breach Compromised Customer Info

Recently the US branch of the global telecom company T-Mobile disclosed a security breach that impacted a small percentage of its customer base.

Specifically, the security breach revealed certain information belonging to a small number of the company's prepaid cellphone users.

The exposed data included customer names, billing addresses, account numbers, rate plans, plan features and user phone numbers. The company stressed that no payment card information or passwords were compromised.

T-Mobile has contacted and has begun working with law enforcement agencies to further investigate the matter. If you were among the impacted users, you should have already received an SMS today from the company.  If you haven't received a notification and you're concerned that you may have been impacted, you can get a definitive answer from T-Mobile by contacting them at privacy@t-mobile.com.

This has been a fairly good year for Telecoms in general.  Other than Sprint's data breach earlier in the year, this is only the second data breach in 2019 involving a major Telecom company.

As breaches go, this one is quite minor, and odds are quite small that you have been impacted by it.  Again though, if it's something you're worried about, the company has made it easy to get peace of mind.  Overall, T-Mobile's handling of the incident has been better than average. In the weeks ahead as the investigation draws to a close, if there are new details to be learned, the company will no doubt disclose them when and as they are able.

With 2019 rapidly drawing to a close, it seems unlikely that we'll see a spate of Telecomm data breaches. 2019 is likely to be remembered as a year where the Telecomm companies dodged a bullet. Overall, the total number of data breaches continues to surge higher, a trend which is likely to continue for the foreseeable future.

Protect your company from data breaches by setting up safety and protective measures with the help of professional IT experts. Call SpartanTec, Inc. in Greenville now. 

SpartanTec, Inc.
Greenville, SC 29601
(864) 326-5914
https://spartantec-greenville.business.site/

Cities Served
Greenville, Spartansburg, Mauldin, East Park, Overbrook, West Greenville, Greer

Employees Targeted By Hackers Posing As HR Department

Just when you think scammers couldn't get any lower, they find new ways to prove you wrong.  Recently, a new phishing scam has been spotted in the wild, this one baiting potential victims with the possibility of pay raises.

The scammers structured their email so that they appeared to come from the Human Resources department of their victims' companies.

They asked the recipient of their phishing email to open an Excel spreadsheet bearing the name "salary-increase-sheet-November-2019.xls."  A shortcut to the remotely hosted spreadsheet was naturally provided.

The body of the email explained that "The Years Wage increase will start in November 2019 and will be paid out for the first time in December, with recalculation as of November."  Needless to say, this tends to catch most people's attention.  After all, who doesn't want a raise, right?

If a recipient clicked on the link, he or she would then be asked to provide Office 365 login credentials in order to see the file.  Of course, the file contains dummy data and has nothing to do with getting a raise; it's simply a useful hook to get an unwitting user to hand over their credentials.

The scammers not only constructed a convincing looking email, but the Office 365 login screen looks exactly like a legitimate login screen. This goes far in explaining the campaign's unusually high success rate.

The researchers who have been following the issue urge Office 365 users to enable multi-factor authentication via Office 365 or a third-party solution. They also encourage business owners to enroll their staff in phishing awareness training programs designed to help employees spot and report phishing attempts more easily.

Be on high alert for this one.  So far it has proved to be a highly effective campaign. Always stay alert.

Let SpartanTec, Inc. in Greenville help you by setting up the appropriate cyber security measures to protect your computers and network. 

SpartanTec, Inc.
Greenville, SC 29601
(864) 326-5914
https://spartantec-greenville.business.site/

Cities Served
Greenville, Spartansburg, Mauldin, East Park, Overbrook, West Greenville, Greer

Your Google Calendar Settings May Be Sharing Your Info

Twelve years ago, Google introduced a new feature to Google Calendar that allowed users to share their calendars with others.  It's a great feature and invaluable in a corporate environment because it gives teams an easy way to collaborate.  Google itself even touted the "make it pubic" feature of their calendar as being a cool way to use their search engine to discover upcoming events.

Unfortunately, as with most things, there's a potential downside.  Recently, a security researcher named Avinash Jain discovered more than 8,000 publicly accessible Google Calendars, searchable via Google's own search engine.  Many of these calendars contain sensitive information (which is bad enough), but worse, they allow any user to add new events that can cause real harm to the system hosting the calendar. This is done via maliciously crafted events or poisoned links.

As Avinash Jain reports:

"I was able to access public calendars of various organizations leaking out sensitive details like their email IDs, their event name, event details, location, meeting links, zoom meeting links, google hangout links, and much, much more.

This is more of an intended setting by the users and intended behavior of the service. The main issue however, is that anyone can view anyone's public calendar, add anything on it - just by a single search query without being shared the calendar link.

Jain goes onto say that several calendars belonging to many of the top 500 Alexa company's employees were made public, which is certainly cause for concern.

This most recent finding adds to the chorus already warning of the dangers of calendar sharing.  Just a few months ago, researchers from Kaspersky Lab discovered scammers abusing Google Calendar in a variety of ways. For example, there were phishing scams that contained poisoned links masquerading as google calendar event links.

Stay vigilant and be sure you have all employees check their Google Calendar security settings so you're not revealing more than you intended to.

It is also crucial to make sure that your computers or the entire business network is not in any way at risk of any kind of online breach. Call SpartanTec, Inc. in Greenville now and let our team set up and efficient strategy to protect your business.

SpartanTec, Inc.
Greenville, SC  29601
(864) 326-5914

https://spartantec-greenville.business.site/

Cities Served
Greenville, Spartansburg, Mauldin, East Park, Overbrook, West Greenville, Greer