World news and discussion on TalkFuse.
The most famous brand in physical security got pwned by ShinyHunters
Brinks Home has disclosed unauthorised access to part of its IT systems after ShinyHunters claimed to have stolen data from its Salesforce environment. The incident matters because the company provides home and business security services, although it says its products and alarm services are currently operating normally.
ShinyHunters says it obtained more than 4.9 million Salesforce records containing some personal information and threatened to leak them unless Brinks Home negotiated a ransom by 30 July. Brinks Home has not confirmed the attacker, system or data involved, and says it is assessing who may be affected and will notify individuals where required. The group has recently claimed breaches involving around 100 prominent companies’ Salesforce systems, with Salesforce previously warning of attacks exploiting misconfigured guest accounts.
In short
- ShinyHunters claims it stole 4.9 million Brinks Home Salesforce records.
- Brinks Home is investigating and has not confirmed affected data.
- Security products and alarm services reportedly remain operational.
Explained simply
Brinks Home provides monitored alarm systems and other security services to homes and businesses. It is separate from Brink’s, the better-known cash transport and security company, despite the similar names.
ShinyHunters is a criminal hacking group that has claimed responsibility for data thefts from several companies. Salesforce is a widely used service for managing customer information, so records held there can include personal details.
A breach involving a security provider can raise concerns about customers’ privacy, even when alarms and other services keep working. The extent of any impact depends on what information was accessed and whose records were involved.
Americas Business Companies Markets World