The extortionists valued the privacy of the victims at $300,000, but will the company accept such conditions?
The hacker group ShinyHunters recently claimed to have accessed the data of more than a million Pizza Hut customers in Australia. According to the attackers, they used vulnerabilities in the AWS service to hack the system 1-2 months ago and stole more than 30 million lines of confidential information.
The data samples posted by the hackers contain information about orders, including names, addresses, phone numbers and encrypted bank card data of customers. Verification by specialists confirmed the authenticity of the stolen data.
ShinyHunters hackers demand $300,000 to remove stolen information. Previously, the group has already laid out in the public domain the data of companies that refused to pay the ransom. So far, Pizza Hut in Australia has not publicly commented on this incident and has not responded to the demands of the attackers.
So far, there is also no information about the hack or notification for customers on the official website of the company and in its social networks. Questions about data theft sent to the management of Pizza Hut by local media have also remained unanswered so far.
Stolen data can be used to steal funds from bank cards, phishing attacks and other criminal purposes. The incident threatens the safety of a million customers of a pizza chain in Australia.
Despite its colossal significance, this incident still has not surpassed another major event that took place in Australia this year. So, the March attack on the Australian Latitude Group literally bankrupted the company, only miraculously not destroying its entire business, largely due to competent management and numerous measures to mitigate the consequences of the attack.
Such incidents demonstrate the vulnerability of large companies to hacker associations and emphasize the importance of ensuring reliable protection of internal company data, confidential information about customers, partners and employees.
Theft of the personal data of millions of people is a serious crime that carries significant reputational and financial risks for any business.
__________________
