Technology
Over 77,000 customers' personal information is exposed in Fidelity Investments data breach
Fidelity Investments is the latest American company to be hit by a massive data breach.
The company is one of the world’s largest asset managers, yet it still can’t get its cybersecurity infrastructure together. This incident marks the firm’s second breach in 12 months, occurring in August.
While no Fidelity accounts were compromised, personal information was exposed, including Social Security numbers and driver’s licenses.
GET SECURITY ALERTS, EXPERT TIPS — SIGN UP FOR KURT’S NEWSLETTER — THE CYBERGUY REPORT HERE
Illustration of a hacker on a laptop. (Kurt “CyberGuy” Knutsson)
What happened?
Fidelity Investments reported in a filing with Maine’s attorney general that an unnamed third party accessed information from its systems using two recently established customer accounts. It did not say how the creation of two Fidelity customer accounts allowed access to the data of thousands of other customers.
“We detected this activity on August 19 and immediately took steps to terminate the access,” Fidelity stated in a letter sent to those affected. The company confirmed that the data breach compromised the personal information of over 77,000 customers but did not involve any access to their Fidelity accounts. This incident still represents only a small portion of its overall customer base of 51.5 million.
The breach occurred between Aug. 17 and 19 when an attacker accessed customer names and other personal identifiers, including Social Security numbers and driver’s licenses. Fidelity was able to stop the unauthorized access on Aug. 19 after detecting the breach.
A man surfing on his cellphone. (Kurt “CyberGuy” Knutsson)
MONEYGRAM HACK EXPOSES CUSTOMERS’ SENSITIVE DATA AND CRIPPLED SERVICES
Is Fidelity doing anything about the breach?
“We take this incident and the security of your information very seriously. As mentioned earlier, upon detecting this activity, we promptly took steps to terminate it and address the situation,” the company stated in a notice sent to affected customers. However, it’s difficult to gauge how seriously it is taking this incident, especially since this marks the second occurrence in 2024 alone.
Fidelity is offering free credit monitoring and identity restoration services for those impacted by this breach for 24 months. The company also encourages individuals to stay vigilant, regularly review their financial statements and report any suspicious or fraudulent activity.
CLICK HERE FOR MORE U.S. NEWS
Illustration of a hacker at work. (Kurt “CyberGuy” Knutsson)
6 ways to protect yourself from a data breach
1. Enable two-factor authentication (2FA) on all accounts: One of the most effective ways to protect your personal and financial information from hackers is to enable two-factor authentication (2FA) wherever possible. This adds an extra layer of security by requiring two forms of verification before granting access to your account, such as a password and a one-time code sent to your phone. Even if your password is stolen, 2FA can stop hackers from getting into your accounts.
2. Monitor your financial accounts regularly: After a data breach, especially when sensitive financial information like transaction details and bank account numbers have been compromised, it’s crucial to regularly monitor your bank statements, credit card transactions and even small purchases. Look for unauthorized activity, no matter how minor it seems, and report it to your bank or service provider immediately.
3. Change your passwords and use strong, unique passwords: Fidelity customers who reused passwords across multiple accounts should update their login information immediately. A strong password combines uppercase and lowercase letters, numbers, and symbols, making it harder for hackers to guess or crack. Consider using a password manager to securely store and generate complex passwords.
4. Sign up for identity theft protection: Given that hackers stole Social Security numbers, government-issued IDs and other sensitive information in the Fidelity breach, affected customers should consider enrolling in identity theft protection. These services notify you if someone attempts to open new lines of credit or loans in your name, allowing you to take immediate action to prevent identity theft. Additionally, you can place fraud alerts or freezes on your credit reports to prevent unauthorized access. See my tips and best picks on how to protect yourself from identity theft.
5. Be wary of phishing attacks and scams: After a data breach, there is often an uptick in phishing attacks, where scammers try to trick you into revealing additional personal information by posing as legitimate companies. Always double-check the authenticity of emails, especially those asking for sensitive information. Never click on links or download attachments from suspicious sources, and verify any requests for information by contacting the company directly.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.
6. Invest in personal data removal services: While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.
WORLD’S LARGEST STOLEN PASSWORD DATABASE UPLOADED TO CRIMINAL FORUM
Kurt’s key takeaways
Fidelity manages over $14 trillion in assets, which speaks volumes about the company’s revenue and the expectations clients have for it to safeguard their data and assets. However, it appears that robust cybersecurity isn’t a top priority for Fidelity. Instead of implementing meaningful security measures, the company seems to be taking a “slap on the wrist” approach, signing people up for services that merely shift the responsibility to individuals to monitor for violations. There’s a lack of security measures at the individual level, such as row-level security or authentication tokens that require personal approval for access to records.
Should Fidelity and similar companies face harsher penalties for repeated breaches? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2024 CyberGuy.com. All rights reserved.
/cdn.vox-cdn.com/uploads/chorus_asset/file/25673932/462754179_560996103109958_6880455562272353471_n.jpg "Meta suggests AI Northern Lights pics are as good as the real thing")
Meta has a suggestion for folks like me who forgot to go outside and look at the Northern Lights on Thursday night: just use AI to fake it! But Threads users who replied to Meta’s idea, posted along with three AI-generated images of the Aurora Borealis Meta last night, seem to disagree.
The images show the Northern Lights hovering over the Golden Gate Bridge, over a city skyline, and over a ferris wheel. It’s clearly meant to latch onto a trending moment of people posting their own pictures of the Northern Lights from the amazing and rare display of the lights, which plunged deep into the United States on Thursday night.
Once you get past the first few comments from people sharing their own AI-generated Northern Lights pictures, the replies range from thoughtfully critical:
One person who says they’re an “astronaut/particle physicist and AI scientist” had particularly detailed feedback:
Others shared pictures they say they took of the phenomenon:
Like the Olympics ad Google pulled, Meta’s social media team has failed to read the room. Users’ posts aren’t just showing off a pretty picture (though that’s certainly part of it!). They’re also about participating in a collective celebration of a rare, shared lived experience. It’s not the time or place to insert an AI-generated image.
Society is still sorting out messy questions about AI, like what it’s doing to photography and the ethics of training it on the internet’s collected works of artists, writers, musicians, and photographers. Until the dust settles from such debates, posts like Meta’s will continue to miss the mark.
/cdn.vox-cdn.com/uploads/chorus_asset/file/25673333/2172439499.jpg "Boeing is cutting 10 percent of its workforce")
Team,
Our business is in a difficult position, and it is hard to overstate the challenges we face together. Beyond navigating our current environment, restoring our company requires tough decisions and we will have to make structural changes to ensure we can stay competitive and deliver for our customers over the long term.
We need to be clear-eyed about the work we face and realistic about the time it will take to achieve key milestones on the path to recovery. We also need to focus our resources on performing and innovating in the areas that are core to who we are, rather than spreading ourselves across too many efforts that can often result in underperformance and underinvestment.
With that in mind, today I am sharing some difficult decisions and several program updates:
On the 777X program, the challenges we have faced in development, as well as from the flight test pause and ongoing work stoppage, will delay our program timeline. We have notified customers that we now expect first delivery in 2026.
We plan to build and deliver the remaining 767 Freighters ordered by our customers and then conclude production of the commercial program in 2027. Production for the KC-46A Tanker will continue.
In BDS, our performance on fixed-price development programs is simply not where it needs to be. We expect substantial new losses in BDS this quarter, driven by the work stoppage on commercial derivatives, continued program challenges and our decision to complete production on the 767 freighter. I will be providing additional oversight of this business and these programs.
Along with the above actions, we must also reset our workforce levels to align with our financial reality and to a more focused set of priorities. Over the coming months, we are planning to reduce the size of our total workforce by roughly 10 percent. These reductions will include executives, managers and employees. Next week, your leadership team will share more tailored information about what this means for your organization. Based on this decision, we will not proceed with the next cycle of furloughs.
As we move through this process, we will maintain our steadfast focus on safety, quality and delivering for our customers. We know these decisions will cause difficulty for you, your families and our team, and I sincerely wish we could avoid taking them. However, the state of our business and our future recovery require tough actions.
We will be transparent with you regarding the timing and impact of these steps, and we will be professional and supportive to everyone along the way.
Thank you for all that you are doing through this very challenging time at Boeing. We will navigate through this moment. We will re-focus our company, and we will restore trust with all those who depend on us.
Kelly
When Lego bricks meet automotive engineering, magic happens.
The Danish toy company and British supercar manufacturer McLaren have outdone themselves with their latest collaboration: a fully drivable, life-sized replica of the iconic McLaren P1 hypercar made almost entirely out of Lego Technic pieces.
A life-sized replica of the McLaren P1 hypercar made almost entirely out of Lego Technic pieces (McLaren)
A monumental undertaking
This isn’t your average weekend Lego project. A team of 23 dedicated professionals from Lego and McLaren spent more than 8,000 hours bringing this ambitious vision to life. The result is a 1:1 scale model of the McLaren P1 that is not just for show; it actually drives.
GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE
A life-sized replica of the McLaren P1 hypercar made almost entirely out of Lego Technic pieces (McLaren)
By the numbers
The sheer scale of this project is mind-boggling. The team utilized a staggering 342,817 Lego Technic pieces to construct the replica. To power the car, they incorporated 768 Lego motors, which enable it to reach an impressive top speed of 40 mph. Weighing in at 2,690 pounds, this model is a tad lighter than the original P1, which weighs 3,075 pounds. In total, the development and construction process took an astounding 8,344 hours.
A life-sized replica of the McLaren P1 hypercar made almost entirely out of Lego Technic pieces (McLaren)
REVOLUTIONARY FLYING SPORTS CAR COMPLETES ITS MAIDEN FLIGHT
From toy to track
What sets this Lego creation apart is its functionality. Unlike previous life-sized Lego vehicles, this P1 replica features fully functional steering, allowing it to navigate corners on a real racetrack. To put it to the test, McLaren F1 driver Lando Norris took the wheel and completed a lap of the legendary Silverstone Circuit, covering a distance of 3.66 miles.
CLICK HERE FOR MORE US NEWS
Lando Norris and a life-sized replica of the McLaren P1 hypercar (McLaren)
LIGHTNING-FAST FORMULA E RACE CAR DOES 0-60 IN 1.82 SECONDS FLAT
Engineering challenges
Creating a drivable car out of Lego pieces presented unique challenges for the team. They had to ensure that the structure could support its own weight while incorporating working steering and suspension systems. The compact design of the original P1 made fitting all the necessary components a puzzle in itself, requiring innovative solutions and meticulous planning.
HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET
Lando Norris and a life-sized replica of the McLaren P1 hypercar (McLaren)
A history of collaboration
This isn’t the first time Lego and McLaren have joined forces. The two companies have been collaborating since 2015, producing various Technic models of McLaren vehicles. However, this full-size, drivable P1 marks a new pinnacle in their partnership and showcases what can be achieved when creativity meets engineering expertise.
A life-sized replica of the McLaren P1 hypercar made almost entirely out of Lego Technic pieces (McLaren)
SUBSCRIBE TO KURT’S YOUTUBE CHANNEL FOR QUICK VIDEO TIPS ON HOW TO WORK ALL OF YOUR TECH DEVICES
Kurt’s key takeaways
The Lego McLaren P1 pushes the boundaries of what is possible with Lego bricks and highlights the potential for innovative cross-industry partnerships. As this plastic innovation embarks on its world tour, it is sure to inspire the next generation of engineers, designers and dreamers. Who knows? The child who is fascinated by this Lego supercar today might be designing the real hypercars of tomorrow.
What other iconic vehicles or structures would you like to see recreated using Lego and why? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most asked CyberGuy questions:
New from Kurt:
Copyright 2024 CyberGuy.com. All rights reserved.
“Toxic mushrooms” sicken 11 people, including children, in Central Pennsylvania town
Get to know Wheeler Cowperthwaite: The Journal’s growth and development reporter
Alabama football’s Kobe Prentice will miss South Carolina game with injury
Free public college/university application period open in South Dakota; Deadline is Nov. 30
Tim Tebow: Tennessee is 'not the same team' since beginning SEC play
Colorado Rockies game no. 116 thread: Zac Gallen vs José Ureña
See it: Tesla crashes into Columbus convention center at 70 mph
Fox News Politics: Georgia the whole day through
Death of missing Oregon girl found in stream ruled homicide
At least 2 dead as tornadoes hit Alabama, damage homes across Southeast
Toplines: October 2024 Times/Siena Poll of Registered Voters in Arizona
White House releases medical report on VP Kamala Harris
Forgery lands former Australian rugby star in French jail
Why is Donald Trump campaigning in California, a state he's almost certain to lose?
Trump campaign seeks increased security as election draws near, including military aircraft amid Iran threats
-
/cdn.vox-cdn.com/uploads/chorus_asset/file/25439572/VRG_TEC_Textless.jpg "Charter will offer Peacock for free with some cable subscriptions next year")
Technology1 week agoCharter will offer Peacock for free with some cable subscriptions next year
-
World1 week agoUkrainian stronghold Vuhledar falls to Russian offensive after two years of bombardment
-
World1 week agoWikiLeaks’ Julian Assange says he pleaded ‘guilty to journalism’ in order to be freed
-
Technology1 week agoBeware of fraudsters posing as government officials trying to steal your cash
-
Health7 days agoHealth, happiness and helping others are vital parts of free and responsible society, Founding Fathers taught
-
Sports1 week agoFreddie Freeman says his ankle sprain is worst injury he's ever tried to play through
-
News7 days agoLebanon says 50 medics killed in past three days as Israel extends its bombardment
-
Entertainment3 days agoHold my beer can: Museum says a worker thought unique art installation was trash