Latitude Financial Services (Latitude) suffered from a data breach incident that impacted 14 million customers.
The Australian company disclosed that the attackers had stolen two of the company's service providers' passwords and used them to access Latitude's client data.
The business declared that it would compensate consumers who decided to replace their stolen identification documents.
They urge to customers to be vigilant and on the look-out for suspicious behaviour relating to their accounts. they will never contact customers requesting their passwords.
Source: https://securityaffairs.com/144137/data-breach/latitude-data-breach-14m-individuals.html
TPRM report: https://scoringcyber.rankiteo.com/company/latitude-financial-services
"id": "lat2535623",
"linkid": "latitude-financial-services",
"type": "Breach",
"date": "03/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '14 million',
'industry': 'Finance',
'location': 'Australia',
'name': 'Latitude Financial Services',
'type': 'Financial Services'}],
'attack_vector': "Compromised Service Providers' Passwords",
'customer_advisories': 'Urged customers to be vigilant and on the look-out '
'for suspicious behaviour relating to their accounts.',
'data_breach': {'number_of_records_exposed': '14 million',
'type_of_data_compromised': 'Client Data'},
'description': 'Latitude Financial Services (Latitude) suffered from a data '
'breach incident that impacted 14 million customers. The '
'Australian company disclosed that the attackers had stolen '
"two of the company's service providers' passwords and used "
"them to access Latitude's client data. The business declared "
'that it would compensate consumers who decided to replace '
'their stolen identification documents. They urge customers to '
'be vigilant and on the look-out for suspicious behaviour '
'relating to their accounts. They will never contact customers '
'requesting their passwords.',
'impact': {'data_compromised': 'Client Data', 'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': "Stolen Service Providers' "
'Passwords'},
'response': {'communication_strategy': 'Urged customers to be vigilant and on '
'the look-out for suspicious behaviour '
'relating to their accounts.'},
'title': 'Latitude Financial Services Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Stolen Passwords'}