This was a historically awful year in data breaches . We saw some record - ruin breaches this twelvemonth that got the attention of the public , involving hackers accessing some very sensitive data , including Social Security numbers , credit card numbers , and more .
Let ’s look back at the worst cybersecurity incidents of the year and let them encourage all of us to be as prudent as we can with our activity online .
National Public Data, where hackers claim to steal 2.9 billion personal records
desktop check troupe National Public Data , also get laid as Jerico Pictures , sufferedone of the uncollectible data breacheswhen hackers allegedly stole 2.9 billion personal records . The class action lawsuit claimed that hackers leaked critical data such as full figure , destination , and relative data to thedark entanglement .
Many were surprised to be on the list of affect users since they were incognizant the company had their information in the first billet . The class natural process lawsuit also require that NPD use a terror - management system , conduct database scanning , and engage a third - party tax assessor to evaluate its cybersecurity connection for the next 10 years .
accord to a lawsuit , an identity operator theft aegis service provider informed the moved exploiter , Christopher Hofman , around July 24 , but the breach mayhap occurred in April . When sensitive information such as your Social Security act is exposed , it is full to take further action , such as contacting theSocial Security Administrationto inform them . you’re able to also site a acknowledgment freezing with major credit bureau such as TransUnion , Experian , and Equifax .
There is no prescribed information on how the hack receive the data , but it ’s beensuggested that unencrypted personal informationmight have been the cause . irrespective of whether or not you use one of thebest password managers , you may keep your data safe by creating astrong word .
Ticketmaster data breach where hackers allegedly stole 1.3TB of customer data files
In 2024 , menace actors hack into Ticketmaster ’s systems , and hackers claimed they sold the user data of 560 million client . This incident coincide with theDepartment of Justice lawsuitagainst Ticketmaster for allegedly monopolise markets across the live transition industry . User data , such as emails , speech sound numbers , partial - defrayal batting order data , names , and more , was at risk . The hackers offered the data they slip in Breach Forums ( owned by the drudge chemical group Shiny Hunters ) for $ 500,000 .
Ticketmaster file an8 - K filingwith the Federal Securities and Exchange Commission , which is what a company files when it suffer an unexpected major result of interest to investors and stockholder . The hackers that claimed responsibility are known as ShinyHunters and may also be behind the breach at Santander Bank .
Ticketmaster did n’t support how the hackers gained access , but asShinyHunters hackers secernate Wired , they breached a third - party contractor to access Ticketmaster ’s Snowflake swarm account and others . Ticketmaster has not confirmed this , so you should take the news with a grain of salt . Skyhigh Security mentionsthat hackers used selective information - stealing malware to get at the necessary login credentials . No one want to return victim to this type of malware , but you’re able to remain safe by doing things such as enabling multi - factor authentication , which tally an extra layer of security to your chronicle . It ’s something that evenAirbnb is using to keep user accounts good .
Change Health Group healthcare data breach with 100 million affected
Aransomware attackcaused bedlam across the country , staunch pharmacies and feign the data of100 million usersfor calendar week . The target was Change Healthcare , a UnitedHealth Group subsidiary company that manages medical provider finances . Hackers record the Change Healthcare employee arrangement due to a lack of multi - factor authentication on login credentials .
The breach get mayhem — hospitals and doctor were not pay , prescription were not fulfill , and insurance companies could not recoup aesculapian provider . “ The Change Healthcare hack is consider by many to be the biggest cybersecurity disruption to wellness charge in American history , ” Senator Ron Wyden said in thecommittee statement . Change Healthcare confirmed that the BlackCat ransomware group was responsible for for the onslaught .
It ’s authoritative to knowwhat ransomware is , and there are forethought you could take to detain secure , such as updating your software . You should also be cautious about the links or attachments you flick on and ensure they are from trustworthy sources . Using thebest antivirus softwareyou can afford is also a summation .
AT&T data breach with 73 million affected users
The secondly - largest bearer in the U.S. has experienced a lot this class , with at least one falling out feign 7.6 million current AT&T account holders and 65.4 million former account holders . The second breach the company went through materialize in March , but the second rupture fall out from May 1 to October 31 , 2022 . The compromised data also admit record from January 2 , 2023 , but only for a few client .
The affected records include phone numbers with which AT&T wireless numbers interact , including home plate sound numbers . Something you do n’t usually hear is that police savvy at least one person in the face . AT&T released a statementsaying that sensitive data such as Social Security number were compromised .
AT&T urged customers to remain vigilant about suspicious action on their account and change their account passcodes . They also offered customers credit monitoring at their disbursal but say nothing about providing one of thebest identity theft protection architectural plan .
Ransomware attack on Synnovis, a U.K. pathology lab with 300 million affected users
accord toThe Guardian , the records of 300 million U.K. patients were stolen in 2024 when the cybercrime gang Qilin reportedly stole entropy about bloodline test result for cancer and HIV . It was unknown if those sham compensate the ransomware fee or how much user data point the hackers steal . The sensitive information involved patients having different surgeries , such as organ transplants . Other patients imply include those who had had blood transfusions and STDs . Sensitive data included NHS numbers , patient names , and descriptions of tests .
The hackers exact to have posted 104 file containing 380 GB on a messaging platform , including an image of the Synnovis logo .
The importance of cybersecurity
You ca n’t avoid all attacks , but taking cybersecurity more seriously can prevent many from feign you . you’re able to outride secure by not creatingpasswords that hacker can easily opine , such as 123456 or “ parole , ” which surprisingly made it to the most popular countersign used in 2024.If you need help , you’re able to use thebest password managersto create long and strong parole . Also , incessantly scan email for malware , utilise firewalls and terminus protection , keep your data file game up , only download from sure site , and never sink in on unverified links ,
Even if you take every possible precaution , some things are beyond your controller . you may only trust that company confide with your data point maintain the highest potential security standards . We ’ll have to wait and see what 2025 has in store and how big or little the break will be .