The Biggest Data Breaches of 2018

Online security label manufacturer Seareach.plc.uk who specialise in asset labels and asset tracking, has collated some of the biggest data breaches of 2018.



February

• 150 million MyFitnessPal app users had their details leaked in a data breach including usernames, email addresses and passwords.

March

• Orbitz had 880,000 customers payment card details, stolen by a hacker, thanks to a security vulnerability in the travel site's legacy booking system.
• Fifa More than 3.4 terabytes of data and 70 million documents from FIFA, containing numerous allegations of corruption, was leaked to German magazine Der Spiegel by the Football Leaks organisation.
• Cambridge Analytica harvested data (without user permission) from Facebook, more than 80 million people were affected by the data exposure.

April

• Macy’s and Bloomingdale's online customers may have had their personal information and credit card details exposed to a third party between April 26 and June 12.

May

• Rail Europe, breach saw customer details including credit card numbers, expiration dates, and card verification codes, stolen over three months.

June

• Over a million Adidas customers were affected by their data breach. The website was hacked with contact information, usernames, and hashed passwords stolen.

July

• Timehop suffered a significant data breach on 7 July 2018 names, email addresses and phone numbers of 21 million users were accessed.
• Ticketmaster suffered data breach which saw hackers operating a massive credit card skimming operation, via third-party code installed on e-commerce websites.
• 23,000 Fortnum and Mason customers details were accessed in a data breach, including addresses and contact phone numbers.

August

• British Airways data breach hit 380,000 transactions through their website and mobile app. Personal and financial information was stolen.

September

• 90 million Facebook user accounts were exposed when hackers stole access tokens that they could then use to take over almost 50 million profiles.

November

• Cathay Pacific admitted this month that they had suffered a significant data breach affecting up to 9.4 million passengers, in March.
• Over 100 million Quora users had their emails, passwords and names taken. The breach occurred after unauthorised access by a malicious third party.
• Details from over 500 million guest reservations, were stolen from Marriot's Starwood database. Customers were notified in November but authorised accessed could date back to 2014.

December

• Twitter was hit by a data breach on its platforms support form. It exposed user data to IP addresses from Saudi Arabia and China.