CISA Left Its Passwords on GitHub, Mac's Worst Malware Yet & The Verizon DBIR Breakdown

First up this week, um, 7-Eleven confirms a data breach, which has been claimed by the ShinyHunters.

So 7-Eleven, the world's biggest convenience store chain, has confirmed an unauthorized third party got into its systems holding franchisee documents on the 8th of April.

The data exposed came from people who applied to become franchisees, so we're talking names, driver's licenses, Social Security numbers, and addresses.

And of course, affected people have won the jackpot.

They get two years of free credit monitoring.

Um, ShinyHunters have claimed 600,000-plus records and listed 7-Eleven on their leak site.

And when no payment came, dumped 9.4 gigabytes of an archive publicly.

The notification, this is, this is a really interesting thing with this.

The notification to the Maine Attorney General says only two Maine residents were impacted, which is interesting considering-

Mm-hmm

... how big 7-Eleven are.

But of course, um, it's Salesforce, um, I think.

Um, yeah, they hit their Salesforce environment.

Breach was detected on the 8th of April.

They're on the leak site on the 17th of April.

600,000 records.

Um, 7-Eleven obviously refused to pay.

So now Zara, Carnival, Pitney Bowes all hit by Salesforce-linked campaigns.

So ShinyHunters are getting people good with that, let's say.

Mm-hmm.

Does seem like it.

If you ever applied to become a franch- franchisee of 7-Eleven, then your details are n- out there.

So keep an eye out for phishing emails.

Your Social Security number, that doesn't change, ever.

It's like our-- It's equivalent, I think, to our National Insurance number.