Connect with us

Technology

Frontier fallout as 750K customers' data exposed in RansomHub cyberattack

Published

on

Frontier fallout as 750K customers' data exposed in RansomHub cyberattack

U.S. telecommunications company Frontier has experienced a serious data security breach that compromised the personal information of a significant number of its customers. The company confirmed that a security incident resulted in the unauthorized disclosure of full names and Social Security numbers belonging to more than 750,000 individuals. Frontier is currently notifying affected customers and has reported the incident to the appropriate regulatory authorities.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

Field engineer investigating data breach (Kurt “CyberGuy” Knutsson)

What happened in the Frontier data breach?

Frontier Communications is warning 750,000 customers that their information was exposed in a data breach. “On April 14, 2024, we detected unauthorized access to some of our internal IT systems. Our investigation identified your personal information among the data affected by this incident,” the telco wrote in a notification sent to affected customers.

The sample of the notice submitted to the Office of the Maine Attorney General has censored the types of data exposed in this incident. However, full names and Social Security numbers were confirmed as breached for 751,895 customers, according to a Bleeping Computer report. Frontier assures that no customer financial information was exposed due to this breach.

Advertisement

Frontier believes it contained the data breach shortly after the attack and restored normal business operations. However, the security incident forced the company to partially shut down some systems to prevent the threat actors from laterally moving through the network, which also led to some operational disruptions.

Frontier fallout as 750K customers' data exposed in RansomHub cyberattack

A woman working on her laptop (Kurt “CyberGuy” Knutsson)

PHARMA GIANT’S DATA BREACH EXPOSES PATIENTS’ SENSITIVE INFORMATION

Who’s behind the Frontier data breach?

Frontier hasn’t disclosed the exact cause of the data breach, but it confirmed a cybercrime group was behind it. “Based on the Company’s investigation, it has determined that the third party was likely a cybercrime group, which gained access to, among other information, personally identifiable information,” the telco wrote in a filing with the Securities and Exchange Commission.

Frontier hasn’t officially named the cybercrime group responsible for the attack. However, it’s worth noting that the RansomHub extortion group claimed responsibility for the attack this month, June 4, raising suspicion about the timing of Frontier’s data breach notification.

RansomHub says they hacked Frontier and stole data on 2 million customers. This data reportedly includes personal info like names, addresses, birthdays, Social Security numbers, email addresses and even details about your Frontier service. RansomHub put Frontier’s name on their dark web extortion site and gave the company a deadline to meet their ransom demands. If Frontier doesn’t respond to their demands, RansomHub says they’ll sell the stolen data to the highest bidder.

Advertisement

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET

What is Frontier doing about the data breach?

Frontier says it responded swiftly to the cyberattack. It brought in leading cybersecurity experts to investigate and contain the breach while also fortifying its network defenses to prevent future intrusions. Law enforcement and regulators were notified.

The telecom giant is providing affected customers with free credit monitoring and identity theft resolution for one year. While Frontier mentions a deadline to enroll, it hasn’t specified the date. Act promptly to ensure you’re covered.

We reached out to Frontier for a comment but had not heard back by our deadline.

Frontier fallout as 750K customers' data exposed in RansomHub cyberattack

Illustration of a person investigating data breach (Kurt “CyberGuy” Knutsson)

AT&T DATA LEAK FROM 73 MILLION CUSTOMERS – WHAT YOU NEED TO DO NEXT

Advertisement

6 measures to take to protect yourself from a data breach

If you suspect you’ve been affected by this data breach, follow these steps to protect your personal data and privacy.

1) Invest in identity theft protection: If you think your personal data has been leaked, scammers may try to impersonate you to gain access to your private information. The best thing you can do to protect yourself from this type of fraud is to subscribe to an identity theft service. If you’re eligible, take the free Kroll subscription Frontier is offering.

Identity theft companies can monitor personal information like your Social Security number, phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. See my tips and best picks on how to protect yourself from identity theft.

2) Place a fraud alert: Contact one of the three major credit reporting agencies (Equifax, Experian or TransUnion) and request a fraud alert to be placed on your credit file. This will make it more difficult for identity thieves to open new accounts in your name without verification.

3) Be cautious of phishing attempts: Be vigilant about emails, phone calls or messages from unknown sources asking for personal information. Avoid clicking on suspicious links or providing sensitive details unless you can verify the legitimacy of the request.

Advertisement

The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.

4) Check Social Security benefits: It is crucial to periodically check your Social Security benefits to ensure they have not been tampered with or altered in any way, safeguarding your financial security and preventing potential fraud.

5) Invest in personal data removal services: While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Remove your personal data from the internet with my top picks here.

6) Change your password: You can render a stolen password useless to thieves simply by changing it. Opt for a strong password, one that you don’t use elsewhere. Even better, consider letting a password manager generate one for you.

TICKETMASTER DATA BREACH EXPOSES 560 MILLION CUSTOMERS’ DATA, IT GROUP SAYS

Advertisement

Kurt’s key takeaway

Frontier says it is fortifying its systems to prevent the incident from happening again. While I appreciate the company’s steps to make things right, this incident shouldn’t have occurred in the first place, especially if customers are entrusting it with sensitive information. Frequent data breaches suggest a worrying gap in cybersecurity preparedness among large tech companies. You, as customers, must stay aware when sharing sensitive information and avoid any phishing attempts from scammers.

How important is online privacy to you? Have recent data breaches impacted your online behavior? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Advertisement

Answers to the most asked CyberGuy questions:

Copyright 2024 CyberGuy.com. All rights reserved.

Advertisement
Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

The messy WordPress drama, explained

Published

on

The messy WordPress drama, explained

WordPress is essentially internet infrastructure. It’s widely used, generally stable, and doesn’t tend to generate many splashy headlines as a result.

But over the last week, the WordPress community has swept up into a battle over the ethos of the platform. Last week, WordPress cofounder Matt Mullenweg came out with a harsh attack on WP Engine, a major WordPress hosting provider, calling the company a “cancer” to the community. The statement has cracked open a public debate surrounding how profit-driven companies can and can’t use open-source software — and if they’re obligated to contribute something to the projects they use in return.

The conflict has escalated in the days since with a barrage of legal threats and has left swaths of website operators caught in the crossfire of a conflict beyond their control. WP Engine customers were cut off from accessing WordPress.org’s servers, preventing them from easily updating or installing plugins and themes. And while they’ve been granted a temporary reprieve, WP Engine is now facing a deadline to resolve the conflict or again have their customers’ access fall apart once again.

WP Engine is a third-party hosting company that uses the free, open-source WordPress software to create and sell its own prepackaged WordPress hosting service. Founded in 2010, WP Engine has grown to become a rival to WordPress.com, with more than 200,000 websites using the service to power their online presence.

“Silver Lake doesn’t give a dang about your open source ideals, it just wants return on capital.”

Advertisement

Mullenweg leads two different WordPresses. There’s WordPress.org, the open source project that develops the backbone of the WordPress publishing platform, and then there’s WordPress.com, a company that sells a hosted version of the open-source WordPress software — just like WP Engine. Mullenweg runs Automattic, which owns WordPress.com. Data suggests that around 43 percent of all websites use WordPress, but it’s not clear how many are hosted by WordPress.com or another party.

Along with selling plans on WordPress.com, Automattic contributes a lot of development effort to the open source project, which itself relies on donations and community contributions to run. According to Mullenweg, the team contributes 3,988 hours per week. The company may not have to pay to use WordPress, but it certainly pays to develop and improve it.

WP Engine operates a bit differently. It says it focuses on investing in the community through sponsorships and encouraging the adoption of the platform. The hosting platform was acquired by the private equity firm Silver Lake in 2018, and Mullenweg views it as a business that profits off of open-source code without giving anything back.

That frustration came to a head last week when Mullenweg took the stage at WordCamp — a WP Engine-sponsored WordPress conference — and took direct aim at WP Engine. “The company is controlled by Silver Lake, a private equity firm with $102 million in assets under management,” Mullenweg said. “Silver Lake doesn’t give a dang about your open source ideals — it just wants return on capital. So, it’s at this point I ask everyone in the WordPress community to go vote with your wallet. Who are you going to give your money to: someone who is going to nourish the ecosystem or someone who is going to frack every bit of value out of it until it withers?”

Mullenweg followed up this statement with a September 21st blog post, where he lambasted WP Engine for contributing just 40 hours per week to the WordPress.org open source project. “WP Engine is setting a poor standard that others may look at and think is ok to replicate. We must set a higher standard to ensure WordPress is here for the next 100 years,” Mullenweg wrote in the blog. He ripped into WP Engine even more, saying it’s “strip-mining the WordPress ecosystem” and giving users a “crappier experience so they can make more money.”

Advertisement

Mullenweg isn’t just defending the ethos of open source — he’s also defending his competing WordPress provider

Mullenweg doesn’t appear to be wrong about WP Engine’s contributions. But WP Engine is ultimately abiding by the rules of WordPress’ open-source license: it’s generally free to use, and WP Engine doesn’t have to give back to the WordPress community just because it’s banking off the open-source code. Of course, it’d be nice if WP Engine did, but nothing requires that it do so.

Complicating this further: Mullenweg isn’t just defending the ethos of open source — he’s also defending his competing WordPress provider. In his blog post, he claims WP Engine is “profiting off of the confusion” caused by the company’s branding. Mullenweg alleges that WP Engine is promising to give customers WordPress but that the company is actually offering a distilled version of the service. He goes on to say WP Engine will need a commercial license for the “unauthorized” use of the WordPress trademark, which is controlled by the WordPress Foundation and later sent a cease and desist letter in an attempt to make the company pay up.

WP Engine isn’t staying silent. It sent a cease and desist letter that tells a very different story of what has been going on behind the scenes. In its letter, WP Engine claims Automattic demanded a “very large sum of money” days before Mullenweg’s keynote at the September 20th WordCamp convention — and if the company didn’t receive it, Mullenweg allegedly threatened to carry out a “scorched earth nuclear approach” toward WP Engine.

WP Engine alleges Mullenweg harassed the company through text messages and calls, with one screenshotted text saying: “If I’m going to make the case to the WP community about why we’re banning WPE I need to do it in my talk tomorrow.” The texts, which Mullenweg confirmed he sent in an interview with Twitch streamer ThePrimeagen, say he prepared several presentation slides for his WordCamp talk, with the working title “How Private Equity can Hollow out and Destroy Open Source Communities, a Story in 4 Parts.”

Advertisement

After WP Engine refused to pay WordPress, the company alleges Mullenweg followed through on his threats. “Mr. Mullenweg’s covert demand that WP Engine hand over tens of millions to his for-profit company Automattic, while publicly masquerading as an altruistic protector of the WordPress community, is disgraceful,” WP Engine’s letter states. “WP Engine will not accede to these unconscionable demands which not only harm WP Engine and its employees, but also threaten the entire WordPress community.”

WordPress.org has now made it clear that it’s going after WP Engine for not only failing to give back to the WordPress project but also for its alleged misuse of the WordPress trademark. Mullenweg now says Automattic has given WP Engine two ways to “pay their fair share”: either by paying a licensing fee or making contributions to the open source WordPress project. “This isn’t a money grab: it’s an expectation that any business making hundreds of millions of dollars off of an open source project ought to give back, and if they don’t, then they can’t use its trademarks,” Mullenweg said. 

The WordPress Foundation — the charitable organization that backs the open source WordPress project — is led by Mullenweg and other lesser-known board members who aren’t displayed on its website. It seems the WordPress Foundation has made some tweaks to its trademark guidelines in recent days. As of September 19th, the policy said you are “free” to use the WP abbreviation in “any way you see fit.” But now WordPress has deleted that language, replacing it with a line that says not to use WP “in a way that confuses people. For example, many people think WP Engine is ‘WordPress Engine.’” The updated policy also explicitly states: “If you would like to use the WordPress trademark commercially, please contact Automattic, they have the exclusive license.”

WordPress.org banned WP Engine from accessing its servers free over their “legal claims and litigation” — a move that has made it more difficult for customers to use WP Engine. However, Mullenweg decided to temporarily remove the block just two days later. He’s given WP Engine until October 1st to create their own mirror or resolve the conflict. “Why should WordPress.org provide these services to WP Engine for free, given their attacks on us?” Mullenweg wrote. WP Engine says it only sent a cease and desist order to WordPress and has not yet filed a lawsuit.

When asked about the ban on WP Engine, Automattic spokesperson Megan Fox said in a statement to The Verge that “trademark violations have resulted in the company being blocked from some WordPress resources.” WP Engine pointed The Verge to its statements on X when reached for comment.

Advertisement

The fight has garnered a mix of reactions. On one side, people think WP Engine is in the wrong, with some saying the company should contribute more to the open source project and that its use of “WP” is misleading. On the other, some WordPress community members are calling on Mullenweg to step down and accuse of him abusing his power over WordPress.org and WordPress.com. Others believe the situation could result in a fork of WordPress and brought up concerns about whether WordPress will take action against other companies using the “WP” abbreviation or trademark.

But in a dispute that’s meant to clarify what is and isn’t WordPress, Mullenweg risks blurring the lines even more. WordPress.org and WordPress.com both have a point — but it looks an awful lot like they’re working together to make it.

Continue Reading

Technology

Threads now lets you tag your location

Published

on

Threads now lets you tag your location

Meta is rolling out the ability to tag your location on your Threads posts. If you have the feature, you’ll see a pin in the post composer that you can tap so you can include where you are.

Note that adding your location to a Threads post doesn’t share an exact pin on a map. Instead, the feature lets you give your users an approximate idea of your location by sharing things like a city name, a neighborhood, or a restaurant. And if you see a Threads post that includes a location, you can tap that location to see other posts from the same place.

I have the feature, and I’ve been messing around with it. When I tap the pin in the post composer, Threads shows me a range of options: I can stay broad by tagging myself in Portland, OR, which is where I live, or I can pick from some more specific locations. If you’ve tagged your location in an Instagram post, Threads’ approach should feel pretty familiar.

Threads’ location-tagging feature only appears to be available on the mobile app right now; I have it on iOS, but I’m not seeing it on the web. Hopefully, it won’t be too long until it shows up in desktop browsers.

Continue Reading

Technology

360-degree throwable tactical cameras are changing the game for the military and law enforcement

Published

on

360-degree throwable tactical cameras are changing the game for the military and law enforcement

A cool new gadget is shaking things up in the world of tactical operations. Bounce Imaging just unveiled an innovative tool at a recent conference, and it’s got everyone talking. It has developed this nifty little device called the Pit Viper 360.

Named after the heat-sensing abilities of certain snakes, it is the world’s first 360-degree panoramic thermal-imaging tactical throwable camera. 

The Pit Viper 360 is set to change how tactical teams approach dangerous scenarios, allowing them to gather critical intelligence without exposing themselves to unnecessary risk.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

A 360-degree panoramic thermal-imaging tactical throwable camera (Bounce Imaging)

Advertisement

A rugged design for high-stakes situations

The Pit Viper 360 is built to withstand the rigors of tactical operations. Its robust construction allows it to be rolled across floors, thrown downstairs and launched through windows, even if they are closed. This versatility makes it invaluable in armed standoffs, hostage situations and other high-risk scenarios where direct visual reconnaissance is too dangerous. Additionally, it can be lowered on tethers or mounted on poles for strategic placement.

tactical camera 2

Military scenario using a 360-degree panoramic thermal-imaging tactical throwable camera (Bounce Imaging)

US MILITARY JET FLOWN BY AI FOR 17 HOURS – SHOULD YOU BE WORRIED?

Advanced imaging capabilities

What sets the Pit Viper 360 apart from other throwable cameras is its comprehensive imaging suite that includes color video, infrared imaging and thermal imaging. The thermal imaging capability is particularly noteworthy because it can detect heat signatures from humans and machinery, providing crucial intelligence in low-visibility environments.

tactical camera 3

A man demonstrating a 360-degree panoramic thermal-imaging tactical throwable camera (Bounce Imaging)

AI APOCALYPSE TEAM FORMED TO FEND OFF CATASTROPHIC NUCLEAR AND BIOCHEMICAL SCENARIOS

Innovative panoramic technology

Instead of relying on traditional pan/tilt motors or expensive camera arrays, the Pit Viper 360 uses six thermal imaging cores to generate a real-time, stabilized 360° panoramic view. This innovative approach offers several advantages, such as low latency, reduced size and weight and lower power requirements. Sietse Dijkstra, Bounce Imaging’s chief technology officer, explains that this design allows for stabilized thermal panoramic video with very low size, weight and power requirements.

Advertisement

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET 

tactical camera 4

Image from a 360-degree panoramic thermal-imaging tactical throwable camera (Bounce Imaging)

NEW BREED OF AI ROBO-DOGS COULD BE THE MARINES’ SECRET WEAPON

Practical applications

The capabilities of the Pit Viper 360 make it an ideal tool for military operations, law enforcement tactical teams, search and rescue missions and industrial inspections. Its ability to be deployed by robotic systems, such as Boston Dynamics’ quadruped robots like SPOT, further expands its potential uses in various scenarios. At a recent conference where the Pit Viper 360 was unveiled, Bounce Imaging highlighted how their technology can work alongside SPOT to enhance safety for first responders in complex environments.

tactical camera 5

Spot the robot dog carrying 360-degree panoramic thermal-imaging tactical throwable camera (Bounce Imaging)

Collaboration with robotics

Bounce Imaging’s collaboration with Boston Dynamics showcases the future of unmanned systems. By integrating their respective technologies, they aim to create a powerful tool for clearing hazardous environments. The combination of SPOT’s navigation capabilities and Bounce Imaging’s panoramic situational awareness can significantly improve operational efficiency and safety during missions.

Advertisement

Mark Fargason, Bounce Imaging’s COO, emphasizes that teaming across platforms is essential to leverage each technology’s strengths effectively. This partnership not only enhances mission success but also prioritizes the safety of personnel involved in high-risk operations.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

tactical camera 6

Military scenario using 360-degree panoramic thermal-imaging tactical throwable camera (Bounce Imaging)

What’s next for the Pit Viper 360?

Now, if you’re itching to get your hands on one, you’ll have to hang tight until early 2025. They haven’t released details on the price yet, but you can bet it’ll be a hot item for elite teams worldwide.

tactical camera 7

Military scenario using 360-degree panoramic thermal-imaging tactical throwable camera (Bounce Imaging)

Kurt’s key takeaways

By combining rugged design with advanced thermal imaging and innovative panoramic capabilities, Bounce Imaging has created a tool that could revolutionize how military and law enforcement personnel approach high-risk situations. The Pit Viper 360 is set to be a game-changer in keeping our brave men and women in uniform (and the civilians they protect) safer in those nail-biting situations.

Advertisement

What do you think about the potential impact of advanced technologies like the Pit Viper 360 on the safety and effectiveness of military and law enforcement operations in high-risk situations? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

Advertisement

New from Kurt:

Copyright 2024 CyberGuy.com. All rights reserved.

Advertisement
Continue Reading

Trending