Leak left 243 million Brazilians’ medical records and personal info ripe for the picking

The personal information of more than 243 million Brazilians was potentially accessible for at least six months thanks to weakly encoded credentials kept in the source code of the Brazilian Ministry of Health’s website (via ZDNet). The security issue was first reported by Brazilian publication Estadão.

The personal data of anyone who had registered with Sistema Único de Saúde (SUS), Brazil’s national health system, could be viewed. That data included people’s full names, addresses, and telephone numbers, reported Estadão. The database also includes records of living and dead people as the population of Brazil was more than 211 million in 2019, according to The World Bank, which is about 32 million fewer people than the reported number of records that were potentially accessible.

The Ministry of Health’s website stored the encoded access credentials to the database of personal information in its source code, reports Estadão. However, the

Read More

Tower Records is back as an online store

Tower Records

Tower Records
Photo: Tim Boyle (Getty Images)

Tower Records filed for bankruptcy and shut down its physical locations in the U.S. nearly 15 years ago, but now the beloved music retailer is back… doing the thing it probably should’ve made more of an effort to do more than a decade ago. We’re talking about the exciting new frontier of the internet, a vast and interconnected web of sites where you can do everything from reading about pop culture news or keeping in touch with friends and family to supporting a fascist coup of the United States or telling everyone not to worry about the impending fascist coup of the United States. For Tower Records’ purposes, though, the internet also lets people buy things from the comfort of their own homes, while simultaneously saving retailers from having to spend money on, say, brick-and-mortar locations or big

Read More

46M records stolen from kids gaming service Animal Jam published on dark web

Some 46 million records stolen from children’s gaming service Animal Jam have found its way onto the dark web following a hack of the company in October.

Animal Jam is a popular online virtual world created by WildWorks Inc. with more than 130 million users catering to children between the ages of four and eight. The site has a zoo theme featuring mini-games, puzzles, adventures, parties and social interactions.

The hack and subsequent theft of data was confirmed on the Animal Jam site in a statement. WildWorks describes the theft as involving a database containing some Animal Jam user data on the server of a vendor the company uses for intra-company communication. The data stolen included usernames, email addresses, encrypted passwords and birth dates along with in some cases the names of parents and their billing address. No financial details were stolen.

Although the passwords were encrypted, they used only

Read More