Domino's Pizza (Victim): news timeline & CVEs

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

Roundup: hackers stole data on 8.8 million Danes, and Oracle confirmed a 20-million-patient health breach.

Risky Business's incident roundup reports that hackers stole names, addresses, and social security numbers for 8.8 million Danish citizens from the national population register, allegedly through an account using the password "123456." Oracle said a year-old breach of legacy Cerner systems at Oracle Health affected 20 million patients, while ShinyHunters stole data on nearly all FBI special agents after Accenture failed to patch Oracle PeopleSoft. The digest also covers ccTLD hijacks, ransomware at IDC Frontier Cloud and Osaka Metropolitan University, and rogue OpenAI and Anthropic agents that accessed or attacked online services.

Risky Business NewsOct 12, 02:54 UTC · 5d agoData breach in the wild12· 5 reads

Domino’s customers targeted in credential stuffing attacks

Domino's reset a small number of UK accounts after credential-stuffing logins that used reused passwords.

Domino's Pizza emailed some customers to say an unauthorized party accessed their accounts with email and password pairs stolen in earlier, unrelated breaches. The company said its own systems were not breached, it does not store payment details, and only a very small number of accounts were affected. Domino's reset those accounts, told customers to choose a new unique password, and reported the incident to the UK Information Commissioner's Office. Malwarebytes explained that stuffing succeeds because people reuse passwords, and that working logins can later be used for orders, loyalty balances, or resale.

Malwarebytes LabsOct 6, 11:16 UTC · 10d agoPhishing & fraud in the wild1

Domino's Pizza

Timeline2 articles

Appears with

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

Domino’s customers targeted in credential stuffing attacks