Staples has informed some customers that data relating to their orders has been accessed without permission, but dubbed the data as ‘Non-sensitive” according to researcher Troy Hunt. Cybersecurity experts reacted below.
Experts Comments
September 15, 2020
For Staples to say that customer order data is non-sensitive is ridiculous. Any social engineer attacker can use that type of data for a phone phishing campaign like this: ‘When you bought (name of purchased product) under xxxxxxxxxxxx confirmation number, we seem to have overcharged you. Can you please provide your full details of the credit card on file with the xxxx last four digits, so I can get that refund for you?’
We don’t know how the breach happened but we do know that this is.....Read More
Like(
September 15, 2020
While the Staples breach appears to be "low impact" in that no sensitive customer information was released, even supposedly non-sensitive information can be leveraged by a savvy attacker. Knowing what a person or business has ordered, and when, can be just the hook an threat actor needs to formulate an effective phishing email or other social engineering attack. In this day and age, there is very little information that can't be leveraged in some way for nefarious purposes.
Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Laurence Pitt, Global Security Strategy Director, provides expert commentary at @Information Security Buzz.
"Any breach in which personal data is stolen needs to be treated as highly serious and punishable...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-staples-data-breach
Facebook Message
@Laurence Pitt, Global Security Strategy Director, provides expert commentary at @Information Security Buzz.
"Any breach in which personal data is stolen needs to be treated as highly serious and punishable...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-staples-data-breach