7 months ago
Bumble, Panera, Match, CrunchBase Hit by Cyberattacks
Recently, several well-known companies like Bumble, Panera Bread, Match Group, and CrunchBase were attacked by hackers.
The hackers used tricks like phishing and vishing to get into the companies' systems.
They managed to access some data, but the companies say important information like user passwords and financial details were not stolen.
A group called ShinyHunters has claimed responsibility for these attacks.
Cybersecurity experts have warned about this group's activities, and the companies have taken steps to fix the problems and alert the authorities.
The hackers have also tried to extort some of the companies, asking for money to stop further attacks.
Bumble, Panera Bread, Match Group, and CrunchBase were hit by cyberattacks, with a hacker group called ShinyHunters claiming responsibility.
The attacks involved phishing, social engineering, and vishing techniques, with hackers accessing limited data but not sensitive information like user credentials or financial details.
Bumble reported a brief unauthorized access to a small portion of its network, while Panera Bread had a hacker access a software application storing contact information.
Match Group confirmed a cybersecurity incident affecting a limited amount of user data, and CrunchBase reported that documents on its corporate network were affected.
Cybersecurity firm Mandiant warned about the ShinyHunters campaign, which uses novel vishing techniques to compromise single sign-on credentials and remotely access systems.
- Who
- Bumble, Panera Bread, Match Group, CrunchBase, and a hacker group called ShinyHunters
- What
- A wave of cyberattacks targeting US companies, involving phishing, social engineering, and vishing techniques
- Where
- The attacks targeted US companies, with the hacker group ShinyHunters claiming responsibility
- When
- The exact dates of the incidents are not specified, except for Match Group's breach on January 16, 2024
- Why
- The motive behind the attacks is not explicitly stated, but the hackers demanded extortion payments from some victims
Key facts
- Companies Affected
- Bumble, Panera Bread, Match Group, CrunchBase
- Type of Attack
- Phishing, social engineering, vishing
- Data Compromised
- Contact information, limited user data, corporate documents
- Hacker Group
- ShinyHunters (claimed responsibility)
- Date of Match Breach
- January 16, 2024
- Cybersecurity Firm
- Mandiant (Google's Alphabet)
Quotes
Bumble Inc. spokesperson
Representative of Bumble Inc., the parent company of dating apps Bumble, Badoo, and BFF
“was recently compromised in a phishing incident”
NDTV
“a brief unauthorized access to a small portion of our network”
NDTV
Charles Carmakal
Chief technology officer at Mandiant, a cybersecurity company owned by Alphabet Inc.'s Google
“After getting into a computer system, the hackers pivot to software-as-a-service environments to steal sensitive data”
NDTV
“A hacker that identifies themselves as ShinyHunters has approached some of the victims demanding an extortion payment”
NDTV
Panera Bread spokesperson
Representative of Panera Bread Co.
“The data involved is contact information”
NDTV
Match Group spokesperson
Representative of Match Group Inc.
“there was no indication that user log-in credentials, financial information, or private communications were accessed”
NDTV
Sources
Related news
Agentic Commerce Needs Human Control As AI Agents Shop
Australian Police Charge Two Men in Open-Source Software Hacking Case
Australian Police Charge Two Men in Open-Source Hacking Case
Hackers Target Major US Financial Firms in Credential Theft Campaign
