Ex 1:
What are the recent 2020 ->2022 security breach? List and give examples with dates
Discuss the consequences of this breach?
Suggest solutions to organizations
Ex 2: Identify types of security threat to organizations and list of security procedures
Ex1
What are the recent 2020 ->2022 security breach? List and give examples with dates
2020
Microsoft
January 22, 2020: A customer support database holding over 280 million Microsoft customer records was
left unprotected on the web. Microsoft’s exposed database disclosed email addresses, IP addresses, and
support case details. Microsoft says the database did not include any other personal information.
Zoom
April 14, 2020: The credentials of over 500,000 Zoom teleconferencing accounts were found for sale on the
dark web and hacker forums for as little as $.02. Email addresses, passwords, personal meeting URLs and
host keys are said to be collected through a credential stuffing attack.
Facebook
April 21, 2020: More than 267 million Facebook profiles have been listed for sale on the Dark Web – all for
$600. Reports link these profiles back to the data leak discovered in December, with additional PII attached,
including email addresses. Researchers are still uncertain how this data was exposed, but have noted that
16.8 million of the Facebook profiles now include more data than originally exposed.
https://www.identityforce.com/blog/2020-data-breaches
2021
Microsoft Software Caused Data Breach
March, 2021: The Chinese hacking group known as Hafnium attacked Microsoft in March of 2021. The
attack affected over 30,000 organizations across the United States, including local governments,
government agencies, and businesses.
While the attack wasn’t directed specifically at Microsoft, the group “primarily targets entities in the United
States for the purpose of exfiltrating information from a number of industry sectors,” according to
Microsoft’s notification to customers.
