So-net's Data Leak
Attackers broke into So-net's member database and took personal details of more than 2.58 million current and former customers.
Key terms
AP Cybersecurity alignment
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
- 2.1.E.4Risk mitigation implements security controls to reduce the likelihood or impact of a risk.Learning objective: Identify strategies for managing risk.
- 5.1.C.1Data security risks can involve a compromise of confidentiality when unauthorized persons can access sensitive data, integrity when data can be manipulated or altered from its intended state, and availability when data can be…Learning objective: Assess and document risks from application and data vulnerabilities.
AP Networking alignment
- 1.3.A.1Digital and physical attacks are designed to gain unauthorized access to accounts, data, or devices. Unauthorized access can result in exposure of sensitive or personal information, including financial records, health data,…Learning objective: Identify the impacts of digital and physical attacks on individual devices.
- 1.4.B.1To prevent phishing-based account compromise, users should verify message sources and use caution before interacting with emails or messages, especially those requesting sensitive information. Users should: • verify the…Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.