One contributing factor to this rising trend is the wide availability of artificial intelligence (AI) technology and generative artificial intelligence (GenAI) tools, which makes it easier for attackers to desing and deploy cyberattacks of varying intensities.
In the latest bout, several high-profile consumer and data companies such as Bumble, Match Group, Panera Bread, and CrunchBase, have confirmed cybersecurity incidents after a coordinated wave of attacks attributed to a group calling itself ShinyHunters.
The incidents affected different systems across each company, with varying degrees of data exposure, according to reports citing company spokespersons.
TL;DR
- Bumble, Match Group, Panera Bread, and CrunchBase confirmed separate cyber incidents.
- The attacks are linked to a hacker group known as ShinyHunters.
- Companies said sensitive credentials, financial data, and private messages were not accessed.
- Exposed information was limited, primarily involving contact details or internal documents.
Details of the cyber incidents show that while the attacks were serious enough to trigger law enforcement notifications, companies have emphasized that core user data and critical systems remained largely protected.
So, how was which company affected? Check it out:
Bumble: Contractor Phishing Led To Limited Network Access
Bumble Inc., the parent company of dating apps including Bumble and Badoo, confirmed that one of its contractor accounts was compromised through a phishing incident.
This led to an unauthorized actor gaining access to a small portion of Bumble’s internal network.
However, the company stated that it believes this access has since ended, and Bumble also said the attack did not compromise its member database, user accounts, application direct messages, or user profiles.
Following the discovery, Bumble contacted law enforcement and engaged cybersecurity experts to further investigate the breach.
Match Group: Limited User Data Exposure Without Credential Compromise
Match Group Inc., which owns and operates some of the most popular dating platforms, including Match.com, Tinder, Meetic, OkCupid, Hinge, Plenty of Fish, OurTime, and others, also said it faced a cybersecurity incident in which a limited amount of user data was affected.
However, Match revealed that there was no indication that login credentials, financial information, or private communications were accessed during the incident.
Match did not immediately respond to additional requests for comment.
Panera Bread: Data Storage Software Breached, Contact Information Exposed
Panera Bread separately confirmed that it experienced a cybersecurity incident involving a software application used to store data. The restaurant chain said it had alerted authorities after discovering the breach.
The company said that the data involved in this breach was contact information, and did not disclose further details on the scope of the incident or what specific categories of contact information may have been accessed.
CrunchBase: Corporate Network Documents Accessed And Contained
CrunchBase, a data provider website widely used for company and investment information, also confirmed that it was impacted.
Here, a spokesperson said documents on its corporate network were affected but emphasized that the company had contained the incident and prevented further damage.
However, the company did not provide additional details on the nature of the documents involved in the attack.
ShinyHunters: Vishing Used To Steal SSO Credentials
The cyberattacks have been claimed by a hacking group known as ShinyHunters, which has previously been associated with high-profile data breaches.
Cybersecurity firm Mandiant, owned by Google, recently warned about an ongoing ShinyHunters campaign.
According to Mandiant, the group has been using novel vishing techniques, or voice phishing, to trick victims into revealing single sign-on credentials, which are then used to remotely access corporate systems.
Topics For More Insights
While investigations are ongoing, authorities have been notified, and affected firms work with cybersecurity experts to assess the full impact of the attacks, the rising rate of cyberattacks across big companies raises concerns.
In the past few days, athletic and sports brand Nike said it was investigating a massive data leak.
Adding to this was UStrive exposing the personal data of its users, Betterment exposing customer data, and the Illinois Health Department exposing the data of 700,000 residents.
Join The Discussion