Intelligent CISO Issue 03 | Page 25

threat updates SOUTH AFRICA Liberty, a South Africa-based financial services provider, announced it had been the victim of a data breach. In a statement on its website, the company said a team of dedicated IT specialists and security personnel were devoting their efforts around the clock to ensure it lived up to the duty of care and to protect information. It said: “We have made no concessions in the face of this attempted extortion and we are working with the relevant law enforcement authorities. “We are at an advanced stage of investigating the extent of the data breach, which at this stage seems to be largely emails and attachments.” GLOBAL MyHeritage reported a file with the email addresses and hashed passwords – not actual passwords – of 92.3 million users was found by a security researcher on a private server on the Internet. It was reported to MyHeritage’s CISO. MyHeritage immediately reported the breach and took measures to address the situation, stating there was no evidence that anything had leaked beyond email addresses and the hashed passwords, and no evidence of any unauthorised access to user accounts and data. www.intelligentciso.com | Issue 03 25