The App Member Breach
Attackers reached the Burger King Japan server that manages app member data, holding 11.18 million customer records; stolen data was leaked online.
Key terms
AP Cybersecurity alignment
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
- 2.1.D.2An asset is anything valuable. Assets include financial resources, intellectual property, data, digital infrastructure, physical property, and reputation.Learning objective: Describe the risk assessment process.
- 5.1.C.1Data security risks can involve a compromise of confidentiality when unauthorized persons can access sensitive data, integrity when data can be manipulated or altered from its intended state, and availability when data can be…Learning objective: Assess and document risks from application and data vulnerabilities.
AP Networking alignment
- 1.4.B.1To prevent phishing-based account compromise, users should verify message sources and use caution before interacting with emails or messages, especially those requesting sensitive information. Users should: • verify the…Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.