New York Pizza, one of the largest pizza restaurant chains in the Netherlands, suffered a security breach and the hacker tried to extort the company.
A hacker claimed to have stolen a large amount of customer data from them and threatened to publish or sell it.
The stolen data includes some pretty personal details, such as real names, delivery addresses, email addresses, telephone numbers, hashed passwords for NYP online accounts, past orders, and in some cases, even dates of birth.
The company worked with local security firm Fox-IT to investigate the incident and patch the bug exploited in the intrusion.
Source: https://therecord.media/dutch-pizza-chain-discloses-breach-after-hacker-tries-to-extort-company/
TPRM report: https://scoringcyber.rankiteo.com/company/new-york-pizza
"id": "new223081222",
"linkid": "new-york-pizza",
"type": "Breach",
"date": "06/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Food and Beverage',
'location': 'Netherlands',
'name': 'New York Pizza',
'type': 'Restaurant Chain'}],
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['real names',
'delivery addresses',
'email addresses',
'telephone numbers',
'hashed passwords for NYP online '
'accounts',
'past orders',
'dates of birth']},
'description': 'New York Pizza, one of the largest pizza restaurant chains in '
'the Netherlands, suffered a security breach where a hacker '
'claimed to have stolen a large amount of customer data and '
'threatened to publish or sell it. The stolen data includes '
'real names, delivery addresses, email addresses, telephone '
'numbers, hashed passwords for NYP online accounts, past '
'orders, and in some cases, even dates of birth. The company '
'worked with local security firm Fox-IT to investigate the '
'incident and patch the bug exploited in the intrusion.',
'impact': {'data_compromised': ['real names',
'delivery addresses',
'email addresses',
'telephone numbers',
'hashed passwords for NYP online accounts',
'past orders',
'dates of birth']},
'motivation': 'Extortion',
'post_incident_analysis': {'corrective_actions': 'Patched the bug exploited '
'in the intrusion'},
'response': {'remediation_measures': 'Patched the bug exploited in the '
'intrusion',
'third_party_assistance': 'Fox-IT'},
'threat_actor': 'Hacker',
'title': 'New York Pizza Data Breach and Extortion Attempt',
'type': 'Data Breach'}