CitySprint Courier Service Suffers Data Breach

Threat Watch

Threat Watch CitySprint Courier Service Suffers Data Breach

CitySprint Courier Service Suffers Data Breach

UK-based courier service CitySprint has announced it recently suffered a data breach. Notifications were sent out on April 7^th to let employees know that the breach occurred and that there is no evidence that personal data was accessed thus far. iFleet is the portal used by drivers to share information such as photos of their driver’s license, vehicle pictures, and records of their weekly earnings. However, this platform was shut down for a brief period while the situation was being investigated. CitySprint confirmed yesterday that their investigation had been completed and the proper authorities were notified.

ANALYST NOTES

Adopting a defense-in-depth strategy moving forward will benefit CitySprint in the long run. Requiring multifactor authentication, forced password resets, and implementing strong anti-virus software should be considered. It has not been revealed whether or not this breach has been associated with any specific threat group or actor, but more information may be released in the near future.

Source: https://grahamcluley.com/citysprint-confirms-security-breach-warns-delivery-drivers-their-personal-data-may-be-in-the-hands-of-hackers/?web_view=true

Using Microsoft Sentinel to Detect Confluence CVE-2022-26134 Exploitation

Russia may be Pressing Arrested Cyber Criminals into Service

Get To Know Bob Meindl, Our New CEO!

How Ransomware Capabilities Are Evolving and What You Can Do to Keep Your Organization Secure

Threat Watch