Data Breaches - W/E - 12/6/18

Data Breach Affects 100 Million Quora Accounts (12/05/2018)
The question and answer site Quora has been breached and the information for 100 million users has been compromised. The BBC has reported that names, email addresses, and encrypted passwords are among the data affected. Quora has issued a statement to confirm the incident and explain that the company has employed a forensic firm to investigate.

Hackers Breached 500 Million Starwood Hotels Guests Over Four Years (12/03/2018)
An estimated 500 million people who booked reservations at Starwood hotels are likely affected by a data breach, parent company Marriott has disclosed. The incident was first detected on September 8 after an internal security tool identified an unauthorized attempt to access the Starwood guest reservation database. However, upon investigation, Marriott learned that there had been unauthorized access to the Starwood network since 2014 and then discovered that an unauthorized party had copied and encrypted information and took steps towards removing it. Marriott decrypted the information on November 19 and determined the contents were from the Starwood guest reservation database. About 500 million are affected but for 327 million people, the information compromised includes some combination of name, mailing address, phone number, email address, passport number, Starwood Preferred Guest account information, date of birth, gender, arrival and departure information, reservation date, and communication preferences. The Federal Trade Commission (FTC) posted an alert with tips to help affected individuals mitigate their cyber risk.

Payment Cards Used at 1-800-Flowers Infiltrated in Breach that Lasted Four Years (12/05/2018)
The Web site for 1-800-Flowers has been compromised by an incident that existed for over four years, parent company Ontario said in a statement. An investigation into suspicious activity determined on October 30 that payment cards used between August 15, 2014 and September 15, 2018 had been targeted. First and last names, payment card numbers, expiration dates, and card security codes are all affected. The statement did not disclose how many people may have been breached.