Great Email Service SendGrid Hacked Account Via Employee

The major e-mail service SendGrid, which include e-mails sent to Pinterest, Uber, Foursquare, Hootsuite and Spotify, has warned customers that their data may be stolen. On 8 April, the SendGrid account of Coinbase hacked , a large Bitcoin exchange, and used to send phishing emails. At first thought SendGrid that it was an isolated incident.

Further investigation revealed that the account was hacked by a SenGrid employee and was used by a cyber criminal to approach various internal systems. These systems contained user names, email addresses and customize stretched and saved passwords. The cyber criminal could access servers with e-mail lists and addresses received from customers of the customers SendGrid. In theory, it could go to millions of users.

According SendGrid there is no evidence that this data is also captured. However, as a precaution decided to reset the passwords of all customers. In addition to resetting the passwords SendGrid customers will also generate their DKIM keys again. DKIM is a digital signature that verifies the domain where the emails were sent from. Because of the new DKIM keys will also be the DNS of the domain name must be modified. How not know the account of the employee could be hacked SendGrid late. However, the e-mail service will tighten security.

Free Online Service Scans Inbox Passwords

Many Internet users would save passwords in the inbox of their email account, so that risk once the account is hacked. Security Dash Lane has developed an online service that checks the contents of the inbox on passwords and then displays.

In this way, users can see which online accounts they have all signed up and how many passwords and login data are yet to be found in their inbox. Even if the accounts are no longer used this forms according Dash Lane a risk because they can help logging in to other accounts, especially if the same password is used for multiple accounts.

Dash Lane forgets to mention that an attacker access to the email account has in many cases other accounts registered to take over at the e-mail account by resetting the password, assuming a different password for these accounts than that of the email account is used. Scan Inbox , such as the online service is called, is free to use. Found personal information according Dash Lane only visible to users and not for the company.

14,000 US Patients Data Stolen By Email Hacking

An American healthcare has warned 14,000 patients that their data is stolen after a third party that handles billing with was to create an e-mail hack. One of the employees of this company was last year, according to the carer the victim of an " email hacking attack , "where username and passwords were compromised.

The incident was on December 3 last year discovered by the billing company, while the caregiver was told that on February 2 this year. Then there was established a research which showed that in the e-mail account of the attacked employee was the personal information of 14,000 patients, including names, date of birth, diagnosis, procedure, treatment dates, account numbers, costs and names of doctors.

In the case of 40 patients it was also to social security numbers. The healthcare provider will notify all affected patients by mail. In addition, there will be the email provider to see whether the already "robust security" can be tightened and staff will "email hacking attacks" are informed.

US Warns 4400 Hospital Patients After Email Hacking

An American hospital has 4,400 patients warned that their personal data may be stolen after attackers gained access to the email accounts of employees. According to the St. Mary's Medical Center in Evansville attackers were able to compromise the user names and passwords of employees. Opposite US media reports that the medical center " sophisticated "hackers through" fraudulent e-mail communication "had access to the accounts. This seems to indicate that the attackers have used phishing attacks.

In the e-mail accounts could be found personal information of patients, such as name, date of birth, sex, date handling, insurance information, limited health and in some cases social security numbers. After discovery of the attack the email accounts were immediately turned off. The hospital stresses that the attackers had no access to individual medical records.It is now working with the email service provider to see if the security can be further tightened. The hospital staff is also on "e-mail hacking attacks" lamps.