Aurora Cannabis breach exposes personal data of former, current workers

guest · Jan 8, 2021

Aurora Cannabis breach exposes personal data of former, current workers
January 4, 2021
https://mjbizdaily.com/aurora-cannabis-breach-exposes-personal-data-of-former-current-employees/

A data breach at Aurora Cannabis has exposed the personal information of an unknown number of the Canadian company’s current and former employees, Marijuana Business Daily has learned.

An email sent to a victim of the data breach cites a Dec. 25 “cybersecurity incident during which unauthorized parties accessed data in (Microsoft cloud software) SharePoint and OneDrive.” The email was shared with MJBizDaily.
The victim, a former Aurora employee who was laid off in February 2020 alongside hundreds of others, wasn’t notified of the breach until late in the evening of Dec. 31.
Click to expand...

Aurora spokeswoman Michelle Lefler confirmed that the company “was subject to a cybersecurity incident” on Christmas that affected both current and former employees, although she did not confirm what kinds of personal information were exposed.

“The company immediately took steps to mitigate the incident, is actively consulting with security experts and cooperating with authorities,” Lefler wrote in a statement.
Click to expand...

guest · Jan 8, 2021

Hacker sells Aurora Cannabis files stolen in Christmas cyberattack
January 7, 2021
https://www.bleepingcomputer.com/ne...nnabis-files-stolen-in-christmas-cyberattack/

A hacker is selling the data stolen from cannabis giant Aurora Cannabis after breaching their systems on Christmas day.

Aurora Cannabis is a Canadian cannabis producer listed on both the Toronto Stock Exchange and the New York Stock Exchange. The company operates numerous cannabis-related medical and consumer brands, including MedRelease, CanniMed, Whistler Medical Marijuana Corp., San Rafael, Daily Special, and Woodstock.
Hacker selling stolen data for one bitcoin
Today, the hacker behind the Aurora Cannabis attack began selling the stolen data on a hacker forum for one bitcoin, approximately 39,000 at today's prices. As part of the post to promote the sale, the threat actor leaked images of eleven files stolen during the attack.
Click to expand...

The samples of stolen data included images of passports, checks, driver licenses, and business documents.
The threat actor claims to have stolen 50GB of data, including customers' and employees' personal information.

The threat actor claims that they still have access to Aurora's network. When asked if Aurora knows that they continue to have access, BleepingComputer was told, "i send mail but i think all employs ignored me."
BleepingComputer has contacted Aurora Cannabis about the attack but did not receive a response.
Click to expand...

Log in or Sign up

Aurora Cannabis breach exposes personal data of former, current workers

guest Guest

guest Guest

Log in or Sign up

Aurora Cannabis breach exposes personal data of former, current workers

guest Guest

guest Guest

Useful Searches