Ray-Ban owner Luxottica reportedly hit with cyberattack

guest · Sep 21, 2020

Ray-Ban owner Luxottica reportedly hit with cyberattack
September 21, 2020
https://www.bleepingcomputer.com/ne...er-luxottica-reportedly-hit-with-cyberattack/

Italy-based eyewear and eyecare giant Luxottica has reportedly suffered a cyberattack that has led to the shutdown of operations in Italy and China.

The company portfolio of eyeglasses brands contains well-known brands, including Ray-Ban, Oakley, Oliver Peoples, Ferrari, Michael Kors, Bulgari, Armani, Prada, Chanel, and Coach.
Luxottica also operates retail outlets such as Sunglass Hut and eyecare providers Pearle Vision, LensCrafters, and Eye Med.
Click to expand...

Possible cyberattack impacts operations
On Friday evening, people began to report that the web sites for Ray-Ban, Sunglass Hut, LensCrafters, EyeMed, and Pearle Vision were not working, and wondered if they were breached.

In addition, Luxottica portals one.luxotrica.com and university.luxottica.com are currently showing maintenance messages stating the sites are under maintenance.
Today, Italian media is reporting that the IT systems for Luxottica offices in Agordo and Sedico, Italy, were suffering "computer system failure." As employees could not work, they were told to go home via an SMS text.
Click to expand...

Furthermore, cybersecurity intelligence firm Bad Packets has told BleepingComputer that Luxottica had a Citrix ADX controller device vulnerable to the critical CVE-2019-19781 flaw in Citrix devices.
BleepingComputer has contacted Luxottica for information about these outages and has not heard back.
Click to expand...

guest · Sep 22, 2020

mood said: ↑

Ray-Ban owner Luxottica reportedly hit with cyberattack September 21, 2020
Click to expand...

Updated (cyberattack confirmed):

09/22 update is added below. This post was originally published on August, 21st, 2020.
Update 09/22/20: In a post to LinkedIn, Luxottica information security manager Nicola Vanin confirmed that they suffered a cyberattack that impacted the company's operation.

"No organization, regardless of size, is free from cyber security threats and having an established action plan that is executed immediately following a security breach is critical to limiting the costs of incidents and damage to reputation of the company," Vanin posted.
In another LinkedIn post today, Vanin confirmed that it was a ransomware attack that caused them to shut off their networks "for a few hours."

"By the end of the year Luxottica will suffer another thousand cyber attacks and this recent ransomware incident will improve all the Incident Response indicators," Vanin stated.
Click to expand...

guest · Oct 21, 2020

Nefilim ransomware gang published Luxottica data on its leak site
October 20, 2020
https://securityaffairs.co/wordpress/109778/data-breach/luxottica-data-leak-ransomware.html

On September 18, the company was hit by a cyberattack, some of the web sites operated by the company were not reachable, including Ray-Ban, Sunglass Hut, LensCrafters, EyeMed, and Pearle Vision.

Italian media outlets reported that the operations at the plants of Luxottica in Agordo and Sedico (Italy) were disrupted due to a computer system failure. Union sources confirmed that the personnel at the plants received an SMS in which they were notified that “the second workshift of today 21 September is suspended” due to “serious IT problems”.
BleepingComputer website, citing the security firm Bad Packets, speculates that the Italian was using a Citrix ADX controller device vulnerable to the critical CVE-2019-19781 vulnerability in Citrix devices.

At the time Luxottica has yet to release any official statement on the attack.
Click to expand...

Now we have more information about the incident, that seems to be the result of a ransomware attack.
The popular Italian cyber security expert Odysseus first revealed on the web site “Difesa e Sicurezza” that the Nefilim ransomware operators have posted a long list of files that appear to belong to Luxottica.

The analysis of the leaked files revealed that they contain confidential information regarding the recruitment process, professional resumes, and info about the internal structures of the Group’s human resource department.
Click to expand...

EASTER · Oct 21, 2020

They really know how to upend things and lay odds these penetrations will only grow more numerous given the seemingly ease systems can be poked with the current CODE that makes them up.

The analysis of the leaked files revealed that they contain confidential information regarding the recruitment process, professional resumes, and info about the internal structures of the Group’s human resource department.
Click to expand...

guest · Nov 7, 2020

Luxottica data breach exposes LensCrafters, EyeMed patient info
November 7, 2020
https://www.bleepingcomputer.com/ne...ach-exposes-lenscrafters-eyemed-patient-info/

A Luxottica data breach has exposed the personal and protected health information for patients of LensCrafters, Target Optical, EyeMed, and other eye care practices.
Data breach in the appointment scheduling system
In a "Security Incident" notification issued this week, Luxottica disclosed that their appointment scheduling application suffered a data breach after being hacked on August 5th, 2020.

Luxottica states that they first learned about this breach on August 9 and, after investigating the attack, determined on August 28 that the attacker gained access to patients' personal information.

"On August 9, 2020, Luxottica learned of the incident, contained it, and immediately began an investigation to determine the extent of the incident. On August 28, 2020, we preliminarily concluded that the attacker may have accessed and acquired patient information," the Luxottica data breach notification states.
Click to expand...

On October 27th, Luxottica has begun to mail notices to those who are affected. They have also started releasing press releases on websites for local newspapers to alert patients of the data breach.

This data breach comes on the heels of a recent Nefilim ransomware attack on Luxottica that occurred on September 18th, 2020, and caused significant outages, interruptions, and theft of unencrypted files.
Click to expand...

guest · Nov 12, 2020

mood said: ↑

Luxottica data breach exposes LensCrafters, EyeMed patient info November 7, 2020
Click to expand...

Updated: "Luxottica data breach exposes 820K EyeMed, LensCrafters patients"

Update 11/12/20: A new notification filed with the U.S. Department of Health and Human Services indicates that this breach affected 829,454 patients and is classified as a "Hacking/IT Incident."

All affected users should have been notified via email at this point. If you have not been notified and are concerned your information was exposed, you can contact Luxottica at (877) 540-1431.
Click to expand...

Log in or Sign up

Ray-Ban owner Luxottica reportedly hit with cyberattack

guest Guest

guest Guest

guest Guest

EASTER Registered Member

guest Guest

guest Guest

Log in or Sign up

Ray-Ban owner Luxottica reportedly hit with cyberattack

guest Guest

guest Guest

guest Guest

EASTER Registered Member

guest Guest

guest Guest

Useful Searches