Companies of All Types Face Cyber Attacks That Could Put Your Data at Risk

Sep 27, 2018 | Cyber Security, IT News

So far in 2018, hackers have used malicious software programs to breach security at dozens of big name companies, impacting millions of customers of popular retailers — including stores where you may shop.

At least 16 security breaches have occurred at retail stores since the beginning of 2017 to the present, according to Business Insider. Not surprisingly, many resulted from flaws in payment systems, either online or in stores.

Criminals harvest credentials — user name and password combinations — from data breaches. Then they test them on various websites and mobile apps to see if they can find a match, according to cybersecurity firm Shape Security. That report also found that as many as 90 percent of the people who log in to a retailer’s e-commerce site are hackers using stolen data.

Here’s a look at some of the companies that have been hacked this year.

Under Armour

In February, hackers breached Under Armour’s MyFitnessPal app, compromising user names, email addresses and passwords from the approximately 150 million users of the popular nutrition and fitness app.

Adidas

In June, sportswear maker Adidas announced a data breach that impacted “a few million” shoppers who used its U.S. retail website. An unauthorized party claimed to have acquired the details of Adidas customers, such as contact information, user names and encrypted passwords.

Ticketmaster

Also in June, the ticketing service Ticketmaster said a data breach affected about 5 percent of its customer base, although not in North America. Hackers used malicious software via the company’s live chat widget.

LabCorp

In July, hackers took aim at LabCorp, the largest blood testing laboratory network in America. The attack affected test processing and customer access to test results. It underscored that even a small hack affecting a health services provider can have serious repercussions for millions of Americans.

Delta

In April, Delta Air Lines reported the third-party company that provides its online chat services had been affected by what it called a “cyber incident.” The company said payment information for Delta clients may have been compromised, but not sensitive information from passports, government IDs, or Delta SkyMiles.

Retailers Where You Shop

  • Saks Fifth Avenue and Lord & Taylor: Cyber criminals obtained more than 5 million credit and debit card numbers from customers of the two department stores.
  • Macy’s: Some customers shopping online at Macys.com and Bloomingdales.com between April 26 and June 12 could have had their personal information and credit card details exposed to a third party.
  • Sears: The retailer reported that a “security incident” with an online support partner may have resulted in as many as 100,000 people having their credit-card information stolen.
  • Best Buy: The same breach that impacted Sears and Delta also hit Best Buy, via its chat services.

Restaurants Where You Eat

  • Panera: A hack of the restaurant’s customer reward program exposed information including names, birthdays, email and physical addresses.
  • Cheddar’s Scratch Kitchen: Customers who visited between Nov.  3, 2017, and Jan. 2, 2018, may have had their credit-card information stolen.

Companies of All Types Face Cyber Attacks That Could Put Your Data at RiskAll of these incidents at various companies help explain why cybercrime is expected to cost $6 trillion annually by 2021 in terms of damage and destruction of data, stolen money, lost productivity, and the theft of intellectual property, financial data and personal information.

The first line in creating effective protection against hackers comes from safeguards that are an integral part of your network infrastructure, software and management — which you can find via the right kind of managed services provider.

The rash of companies being hacked illustrates why it’s critical for businesses to protect sensitive information — both internal data and customer information — from security threats. V2 Systems can help design safeguards that are an integral part of your network infrastructure, software and management right from the start.

Since 1995, Manassas Park, VA-based V2 Systems has employed local systems administrators, network engineers, security consultants, help desk technicians and partnering companies to meet a wide range of clients’ IT needs, from research, to implementation, to maintenance. Concentrate on your VISION…We’ll handle the TECHNOLOGY! 

More From V2 Systems

How Government Contractors Can Stay Secure During Disruptions and Staffing Gaps

Disruptions are unavoidable, but security gaps do not have to be. For government contractors, staffing shortages, PTO, turnover, shutdowns, and contract transitions can create real cybersecurity and compliance risk. This blog explains how GovCons can maintain security, protect sensitive data, and keep operations moving when key people are unavailable.

Backups Alone Are Not Enough: What True Recovery Looks Like in 2026

Backups are a critical part of business resilience, but they are not the same as recovery. In 2026, small businesses and government contractors need validated backups, tested recovery procedures, clear response plans, and secure restoration processes to keep operations moving when ransomware, outages, or system failures occur.

Downtime Is a Cybersecurity Problem, Not Just an IT Problem

Downtime can affect payroll, customer service, compliance, productivity, revenue, and reputation. For small businesses and government contractors, outages are no longer just technical issues. This blog explains why downtime should be treated as a cybersecurity and business resilience problem, and how organizations can better prepare for disruptions.

Zero Trust Without the Buzzwords: What It Actually Looks Like in Practice

Zero Trust is often discussed as a complex cybersecurity strategy, but at its core, it is about verifying access, limiting unnecessary permissions, and reducing risk. This blog explains what Zero Trust actually looks like in practice for small businesses and government contractors — without the buzzwords, hype, or confusion.

Access Creep Is a Business Risk: How Over-Permissioned Users Create Exposure

Access creep happens when users accumulate permissions over time and keep access they no longer need. For small businesses and government contractors, this creates unnecessary cybersecurity, compliance, and operational risk. This blog explains how over-permissioned users increase exposure and what organizations can do to strengthen access controls, reduce privilege misuse, and improve audit readiness.

Free
Small Business Cybersecurity Checklist

cybersecurity checklist graphic