Bed Bath & Beyond declares data incident

guest · Oct 30, 2019

Bed Bath & Beyond declares data incident
October 30, 2019
https://www.scmagazine.com/home/security-news/cybercrime/bed-bath-beyond-declares-data-incident/

Home goods retailer Bed Bath & Beyond yesterday disclosed in a Securities & Exchange Commission 8-K filing that an unauthorized third party illegally accessed one percent of its online customers’ accounts.

The online intruder acquired the account emails and passwords from a “source outside the company’s systems,” the Union Township, N.J. retailer reported. Based on this account, the incident may have therefore been a case of credentials stuffing, or a third-party data breach or phishing attack.
Payment card information was reportedly not affected.

“Due to the limited nature of the security incident and the company’s cyber incident insurance coverage, the company does not expect this security incident to have a material adverse effect on its results of operations, cash flows or financial condition for any fiscal period,” the retailer stated in the filing.
“The message for employees is: Don’t use work email addresses on third-party web sites, and learn to spot phishing and spearphishing emails,” Bastable continued.
Click to expand...

MarketWatch: Third party acquired data from less than 1% of online Bed Bath and Beyond accounts

BleepingComputer: Bed Bath & Beyond Discloses Customer Login Credentials Breach

This is not the only security incident Bed Bath & Beyond had to deal with this year. At the beginning of May, the retailer notified its customers that a call center employee processing orders "may have attempted to illegally compromise customer credit card information."
Click to expand...

Log in or Sign up

Bed Bath & Beyond declares data incident

guest Guest

Log in or Sign up

Bed Bath & Beyond declares data incident

guest Guest

Useful Searches