Guitar Tuition Website Suffers Six-Month Data Breach

guest · Mar 17, 2020

Guitar Tuition Website Suffers Six-Month Data Breach
March 17, 2020
https://www.infosecurity-magazine.com/news/guitar-tuition-website-suffers/

A Florida company that offers guitar lessons online to millions of students around the world has suffered a data breach.
Unauthorized access of TrueFire's computer system went on for six months before the breach was detected on January 10, 2020.

In a data breach notification letter dated March 9, 2020, and signed by TrueFire Chief Customer Officer Ren Wright, users who made purchases via the website truefire.com between August 3, 2019, and January 14, 2020, were warned that their data may have been compromised.
Wright said that data exposed during the lengthy breach may have included names, addresses, payment card account numbers, card expiration data, and security codes.
Click to expand...

"While we do not store credit card information on our website, it appears that the unauthorized person gained access to the website and could have accessed the data of consumers who made payment card purchases, while that data was being entered, between August 3, 2019 and January 14, 2020."

TrueFire did not reveal how the breach was discovered but said that it has been reported to law enforcement. The company also said that it is "working with computer forensic specialists to determine the full nature and scope of the intrusion."
Click to expand...

In their breach notification letter, TrueFire gave no reason as to why they waited until March 9 to inform users of the breach that was discovered on January 10.
Click to expand...

guest · Aug 2, 2020

Data has been added to Have I Been Pwned:

TrueFire – 599,667 breached accounts

TrueFire
In February 2020, the guitar tuition website TrueFire suffered a data breach which impacted 600k members. The breach exposed extensive personal information including names, email and physical addresses, account balances and unsalted MD5 password hashes. The data was provided to HIBP by dehashed.com.

Breach date: 21 February 2020
Date added to HIBP: 2 August 2020
Compromised accounts: 599,667
Compromised data: Account balances, Dates of birth, Email addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames
Permalink
Click to expand...

Log in or Sign up

Guitar Tuition Website Suffers Six-Month Data Breach

guest Guest

guest Guest

Log in or Sign up

Guitar Tuition Website Suffers Six-Month Data Breach

guest Guest

guest Guest

Useful Searches