Cyber Attack on RSA Security LLC

A root-cause analysis of the security breach revealed multi-factorial issues at the technical, individual, group, and organizational levels. At the technical level, the applications and web-tools

The purpose of this meeting is to inform you of a security breach that occurred in our company, and to inform you of what has been affected, how we found out, and what measures have been used to correct and prevent this from happening again. The following is a bulleted list of relevant information related to the security breach.

A root-cause analysis of the security breach revealed multi-factorial issues at the technical, individual, group, and organizational levels. At the technical level, the applications and web-tools were initially tested and evaluated in an ideal environments that was not equivalent to the clinical practice

As value customers of the Anthem, Inc. we believe it is important to keep each one of you informed of any incident that might affect your business with us. Your privacy and security is our priority for the reason Anthem, Inc. would like to inform our customers of a recent phishing attack. Unfortunately, we have experienced similar attacks in the past which led many of the employees and customers’ data exposed to hackers. Even though this is a serious matter for the company and the customers it is important for us to make our customers aware that phishing attacks are common and they cause huge losses to both the customers and the companies (Wright et al., 2014). Our most recent attack took place on April 2014 and it affected about 80 million identifiable data stolen via phishing emails. The

This case study, written in 2009 is not the only case where a major data breach has occurred within organizations. In the late 2011 Sony’s PlayStation Network (PSN) was breached impacting up to 77 million user’s accounts including data on names, address and possibly credit card details. In late 2013 Target had a cyber-attack that compromised a large quantity of its data and had 110 million accounts compromised. Finally in September 2014 Apple had their iCloud server breached by hacking that compromised all the users of the online server. These occurrences still have some unanswered questions and several experts have yet to decipher the actual reason as to why the security breach occurred.

However, soon after the breach had been made public there were several reports that came out saying that China was the one to blame. Again, it’s important to note that these reports have never been fully confirmed. After investigation, Anthem said they found that five of their IT worker’s credentials had been compromised through a phishing attack. Rebecca Herold, CEO of The Privacy Professor and co-founder of the consulting firm SIMBUS Security and Privacy Services stated: "The fact that access was obtained using the credentials of at least five employees points to the very longstanding weak link with information security - ensuring personnel know and understand how to secure the information they have access to and how to recognize phishing attempts."

Michael’s Store, Inc. is an arts & crafts Retail chain. It has more than 1040 stores located in 49 US states & Canada. The company also owns and operates the Aaron brother’s retail chain, which happens to have an additional 115 stores across the Country. Michael’s store Inc. had a Security breach, which took place between May 8, 2013 and January 27, 2014. About 2.6 million cards or about 7 percent of payment cards used at its stores during the period were affected. Alarmingly, its subsidiary Aaron brothers also had been breached between June 26, 2013 and February 27, 2014. It was reported that Aaron brothers had 400,000 cards impacted. The duration of the treacherous attack in total was 8 months (Schwartz, 2014). In this report, security breach of Michael’s store Inc. is analyzed. The topics covered are how the breach occurred, what did the authorities do to educate the customers & how in future such attacks can be avoided.

A data breach is a security event in which tricky, guaranteed or private data is copied, transmitted, saw, stolen or used by an individual unapproved to do so. Data breaches may incorporate cash related information, for instance, Visa or bank details, Personal Health information (PHI), Personally identifiable information (PII), This may consolidate events, for instance, theft or loss of automated media, for instance, machine tapes, hard drives, or Pcs such media whereupon such information is secured decoded, posting such information on the web or on a machine by and large accessible from the Internet without honest to goodness information security protections, trade of such information to a skeleton which is not completely open however is not legitimately or formally authorized for security at the authorization level, for instance, decoded email, or trade of such information to the information systems of a maybe adversarial association, for instance, a battling undertaking or a remote nation, where it may be introduced to more focused unscrambling techniques. While Targeted attacks keep on raise, Intriguing development in these assaults. As initially reported in a year ago 's Internet Security Threat Report, aggressors included watering-hole assaults to their arms stockpile. Anyway reports of the passing of lance phishing

On May 5, 2014 Premera Blue Cross, the third-largest health insurer in Washington state, announced today that the company was the target of a sophisticated cyber attack. This attack affected as many as 11 million patients across this great country. As a result of the malicious attack, attackers may have gained unauthorized access to names, dates of birth, Social Security numbers, mailing addresses, email addresses, phone numbers, member identification numbers, bank account information and claims and clinical information. This information may have went back as far as 2002. Not only did this attack affect many unfortunate Americans, but also the Premera Blue Cross CEO Jeff Roe.

Dhamija, R., Tygar, J. D., & Hearst, M. (2006, April). Why phishing works. InProceedings of the SIGCHI conference on Human Factors in computing systems (pp. 581-590). ACM.

The Target data breach remains one of the most notable breaches in history, it was the first time a CEO of a major corporation was fired due to a security event. The breach received an enormous amount of attention, it caused corporations and individuals to change the way they think about information security and data protection. Between Thanksgiving and Christmas 2013 hackers gained access to 40 million customer credit cards and personal data of 70 million Target customers. The intruders slipped in by using stolen credentials and from there gained access to vulnerable servers on Targets network to launch their attack and steal sensitive customer data from the POS cash registers. All this occurred without a response from Targets security operations center, even though security systems notified them of suspicious activity. The data was then sold on the black market for an estimated $53 million dollars. However, the cost to Target, creditors, and banks exceeded half of a billion dollars. This report will review how the infiltration occurred, what allowed the breach to occur including Targets response, and finally who was impacted by the security event.

Three different areas of vulnerabilities was identify as the result of this data breach. The hackers where able to take advantage of these vulnerabilities and use them gain the customers of TJX Companies, Inc. retail stores valuable and trusted private information that was in trust to them.

Over 40 millon people have been victums of the breach. Information of these people may have inclueded names, mailing adresses, phone numbers or email adresses, along with other information. There were multiple instances of fraud , where customers relaized some of their cards might have been sold on the black market.

Bank of America is a multinational banking institute and one of the most trusted in the banking industry. This organizations sole purpose is to protect the customer’s confidentiality and assets by ensuring that data protection is the number one priority; however any organization when holding personal information can be a victim of data breach and BoA is not exempt. One of the largest risks BoA faces today is Mobile Banking. This consumer convenience is used by fifty percent of smart phone owners (Finney, 2014). Phishing is also threat to the banking industry; this strategy by hackers allows the extraction of consumer passwords and other sensitive information. Hackers targeting banking institution employees with convincing e-mails that fool them into clicking on malicious links-which ultimately compromise their credentials or

The analysis of 2,260 breaches and more than 100,000 incidents at 67 organizations in 82 countries shows that organizations are still failing to address basic issues and well-known attack methods. The (DBIR, 2016) shows, for example, that nearly two-thirds of confirmed data breaches involved using weak, default or stolen passwords. Also shows that most attacks exploit known vulnerabilities that organizations have never patched, despite patches being available for months – or even years – with the top 10 known vulnerabilities accounting for 85% of successful exploit “Organizations should be investing in training to help employees know what they should and shouldn’t be doing, and