Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
In the episode of the Tech Stuff podcast, the host, Jonathan Strickland, introduces the topic of significant data breach incidents throughout United State history. This is an interesting continuation from, probably, the previous discussion on the matter.
The severity of a breach can no longer be measured just in terms of number, however in type,” says Jonathan. “It is usually very complex.” Indeed, these cybersecurity incidents are highly complex.
In reviewing the FriendFinder Networks breach, Jonathon describes that this breach involved very private data and, arguably, an embarrassing issue perhaps to the extent where victims might be unlikely to speak about their situation.
The podcast talks about the Cambridge Analytica scandal linked with Facebook. It has made a tremendous impact, violating data privacy and overall trust of the people in these social media sites.
Next, Jonathan talks about Facebook’s general tendency to get exposed to data breaches. There are too many users involved in the site, and its information is like a jackpot for hackers.
With an estimated three billion users, Facebook is, for cybercriminals, a very desirable platform to attack, and the site is, as such, a regular target for many data breach attempts, be they for harvesting personal information or as a means of manipulating public narratives.
Jonathan describes the Facebook data breach that occurred in 2021 where hackers exploited a vulnerability to scrape data from over 530 million user accounts. This describes the stellar challenge of securing such a vast platform.
The host explains how hackers have scraped publicly available information from Facebook profiles using a scraping software. Elaborate on the scale and possible ill-use of such scraped information data.
Correlating it to the same general issues that have haunted LinkedIn, Jonathan explains the common approach that hackers use to scrape publically visible data and the CONSEQUENCES of such profiling for the privacy of the respective users.
The episode starts by covering Facebook’s response to this 2021 data breach issue that ensured the exploited vulnerability was fixed on the company’s platform but then got grilled from regulatory entities.
Starting with what the implications were, as the episode unfolds it covers data scraping. It has provided an excellent need to ensure robust measures are in place to protect user information.
Jonathan presents the regulatory actions that befell Facebook due to the data breach, from the huge fines by the DPC in Ireland, for the violation of its duty on the protection of user data.
As part of the highlight, Jonathan explains such strict data protection laws as the General Data Protection Regulation in the European Union. He details how social media business like Facebook has to comply in full with sets rules. In contrary, he admits this cannot be compared to the United States where data protection rules are not strict enough.
For instance, the DPC fined Facebook for improper data handling practices in 2021, as well as breaches of data from teenage users on Instagram. Such are demonstrations of the impact that might result from non-compliance with regulations.
Jonathan refers to several other instances through which users’ data was exposed due to insufficient protection measures, indicating to other data security issues that Facebook has incurred. Again these are issues that are thorny and appear to always need enormous attention.
Later, the episode describes the First American Financial Corporation data breach as one of the massive breaches across the financial sector, reflecting the critical vulnerabilities in the data security practices.
In that connection, Jonathan provides details on the First American Financial data breach through an unsecured web link; this implies almost 900 million financial records containing sensitive information were free for unauthorized access.
This reveals the scale of such a breach and its impact on people, which de-emphasizes the need for such organizations, especially financial institutions, ensuring that there are safe and sound data policies which can effectively address the different breaches.
Jonathan goes over the regulatory responses to this breach, which include fines levied by the SEC and the State of New York. This shows that there were accountability measures against the corporation.
The episode also discusses a follow-up ransomware attack that occurred in First American Financial Corporation. This attacks illustrate that the cybersecurity threats continue to face the company and the entire financial industry.
Jonathan does another episode on a massive data breach, that of the Real Estate Wealth Network. He describes, in detail, how elementary security lapses led to the exposure of personal data of thousands of people.
The podcaster details how real estate wealth failed to password its database, laying bare more than 1.5 billion records containing individuals’ personal and financial information, including prominent personalities.
Jonathan lists different types of information exposed in the breach and how it could be misused and used for fraud purposes. This includes tax IDs, property records information on bankruptcy etc.
The episode covers the response of the company towards the breach, and this was done in a fairly quick and responsive manner by acknowledging the problem and securing the database. Compared to other cases, it does stand as a more responsible way of running data management.
In doing so, he reveals the possibility of information leakage and risks related to it including from spearfishing and identity theft to other cybercrime malware, hence unfit measure required in ensuring database information is seamlessly and effectively guarded.
The event presents the most severe breach of Microsoft Exchange server data ever recorded in history. This remarkable feat was made through highly developed hacking skills conducted by the Hafnium group.
Jonathan details the China-backed Hafnium group’s exploitation of zero day vulnerabilities in Microsoft Exchange Servers, pointing to reasons as to why the direct breach was devastating.
The discussion has put forward the widespread impact resulting from the breach and thousands of companies across the world are affected. Securing onsite email servers is hard.
The podcast also reviews how FBI counteracted this breach rather unusually by hacking its way into the systems compromised by the attackers to neutralize them, reflecting the extreme steps taken to guard sensitive information.
Jonathan starts by giving an overview of zero-day vulnerabilities, their effect on cybersecurity, and how important it is to take proactive measures and timely patching to avert risks arising from such vulnerabilities.
The episode concludes by introducing the Yahoo data breaches, the largest ever to have been reported and seen to date, with over three billion users遭affected, which brought noticeable lapses in security practices to the limelight.
Jonathan expresses the magnitude of the scale with regard to the Yahoo data breaches — almost 40 percent of the world’s population got affected — and the severe damage to user privacy and data security.
How this data breach on the part of Yahoo took place between 2013, when the first round of the attack took place, and 2016, when it was disclosed to the public, is detailed in the podcast. It goes on to explain how this made a lasting effect on the reputation and operations of the firm.
Jonathan tells of the 2013 Yahoo breach in which “the security of a giant is compromised,” allowing hackers to access the user account data. It is important because it corresponds to a readiness of firms not to shy away from the robust cybersecurity measures that are put in place.
It will discuss the Yahoo response developed towards the breach. How Yahoo downplayed the attacks’ severity and what that meant for a potential acquisition deal with Verizon where the buyout price significantly diminished.
At the show’s end, Jonathan recaps all the major data breaches explained and emphasizes the more than critical need for robust cybersecurity measures and the collective responsibility of companies and individuals over sensitive information.