Find practical strategies and tools for preventing data breaches, including access controls, encryption, monitoring, and incident response planning. These articles help organizations and individuals safeguard sensitive information against unauthorized access and exfiltration.
posts
In 2023, a single reused password gave threat actors access to 23andMe's credential-stuffing attack, exposing the genetic data of nearly 7 million users. The attackers didn't exploit some exotic zero-day vulnerability. They just tried stolen username-password pairs from other breaches — and millions of them worked. If
In 2024, a single set of stolen Snowflake credentials led to the breach of over 165 organizations — including Ticketmaster and AT&T — exposing hundreds of millions of customer records. The root cause wasn't some exotic zero-day exploit. It was reused passwords without multi-factor authentication. Every one of
A Single Stolen Password Cost One Company $60 Million In 2023, MGM Resorts lost an estimated $100 million after a threat actor used social engineering to take over an employee's account through a help desk call. The attackers didn't hack a firewall. They didn't
The Breach That Started With a "Managed Security" Contract In 2024, Change Healthcare — a company with dedicated security vendors and enterprise-grade tools — suffered a ransomware attack that disrupted healthcare claims processing across the entire United States. UnitedHealth Group confirmed the breach affected roughly 100 million individuals. The attackers
