Russian extortion group n0n claims theft of nearly 1 billion Expedia traveler records via third-party supply chain attack
The Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records by exploiting a supply chain attack through a compromised third-party data platform provider, Qubole, a Google Cloud partner. Expedia confirmed the breach was via this third-party compromise but did not verify the full scope of the theft, which n0n alleges includes over 830 million loyalty program records, 58 million traveler profiles, and 333 million consumer account and credential records. The group uses a unique extortion tactic by listing victims anonymously with countdown timers to pressure for ransom payments without using ransomware. Expedia states its platforms remain secure and has engaged external cybersecurity firms to investigate and contain the incident. This breach poses significant risks including credential cracking, phishing based on loyalty data, and potential fraud due to stolen account information.
Linha do tempo
-
Russian extortion group n0n claims theft of nearly 1 billion Expedia traveler records via third-party supply chain attack
ler a análise desta fonte ocultar
The Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records by exploiting a supply chain attack through a compromised third-party data platform provider, Qubole, a Google Cloud partner. Expedia confirmed the breach was via this third-party compromise but did not verify the full scope of the theft, which n0n alleges includes over 830 million loyalty program records, 58 million traveler profiles, and 333 million consumer account and credential records. The group uses a unique extortion tactic by listing victims anonymously with countdown timers to pressure for ransom payments without using ransomware. Expedia states its platforms remain secure and has engaged external cybersecurity firms to investigate and contain the incident. This breach poses significant risks including credential cracking, phishing based on loyalty data, and potential fraud due to stolen account information.