跳到正文

益博睿的争议事件

以下收录公开来源中与该品牌相关的争议事件。列出一条并不表示过错已经证实。

返回词条共 14 条

  1. 2026

    BCD Travel 数据泄露披露

    问题披露

    BCD Travel 通知受影响人士,一项涉及第三方漏洞的安全事件导致其某个应用中保存的个人信息遭到泄露。新闻稿称,媒体报道估计约有 70 万名客户的数据遭到泄露;BCD Travel 表示尚未发现受影响个人信息被滥用的证据。

    品牌回应

    • 调查 — BCD Travel

      launched an in-depth investigation with third-party cybersecurity and forensic experts
    • 整改 — BCD Travel

      implemented recommended security measures
    • 整改 — BCD Travel

      BCD Travel is offering affected individuals one year of complimentary credit and identity fraud monitoring through Experian

    来源摘录

    • has notified affected individuals of a data security incident involving a third-party vulnerability that compromised personal information held in one of its applications.
    • The incident has drawn public attention after the threat-actor group ShinyHunters claimed responsibility in late May 2026 and threatened to leak more than 700,000 records unless the company met its demands.
    • News coverage reports that the breach exposed personal data belonging to about 700,000 customers.
  2. 2022

    信用报告认证漏洞

    据报道,益博睿网站的一个漏洞允许在认证不完整后通过操纵URL访问信用报告。该问题在2023年初修复,但引用材料未确定有多少信息被访问。

  3. 2021

    巴西数据泄露争议

    一个涉及巴西公民的庞大数据集被在线提供,并在报道中与Serasa Experian相关联。益博睿表示没有证据表明其系统受到损害,而消费者权益倡导者批评了回应和事件处理。

  4. 2021

    CNA通报勒索软件攻击后的客户数据泄露

    问题披露

    CNA在其系统遭勒索软件攻击后通知客户发生数据泄露。此次泄露影响75,349人,被窃取的文件包含姓名和社会安全号码等个人信息。CNA表示,没有证据表明被窃取的信息曾被查看、保留或分享。

    品牌回应

    • 整改 — CNA

      CNA will be offering 24 months of complimentary credit monitoring and fraud protection services through Experian.

    来源摘录

    • The data breach reported by CNA affected 75,349 individuals, according to breach information filed with the office of Maine's Attorney General.
    • CNA will be offering 24 months of complimentary credit monitoring and fraud protection services through Experian.
    • CNA Financial Corporation, a leading US-based insurance company, is notifying customers of a data breach following a Phoenix CryptoLocker ransomware attack that hit its systems in March.
  5. 2021

    Guess通知客户发生数据泄露

    问题披露

    Guess于6月9日开始通知受影响客户,称2月发生的勒索软件攻击导致数据泄露。公司表示,未经授权的行为者可能访问或获取了个人信息。

    品牌回应

    • 调查 — Guess

      A cybersecurity forensic firm was engaged to assist with the investigation
    • 整改 — Guess

      Guess has implemented additional measures to boost its security protocols
    • 退款或补偿 — Guess

      Guess began mailing breach notification letters to affected customers on June 9, offering complimentary identity theft protection services and one year of free credit monitoring through Experian to all impacted individuals.

    来源摘录

    • American fashion brand and retailer Guess is notifying affected customers of a data breach following a February ransomware attack that led to data theft.
    • On May 26, 2021, the investigation determined that personal information related to certain individuals may have been accessed or acquired by an unauthorized actor.
    • Guess began mailing breach notification letters to affected customers on June 9, offering complimentary identity theft protection services and one year of free credit monitoring through Experian to all impacted individuals.
  6. 2020

    南非数据泄露

    南非的一起事件泄露了约2400万个人和近80万家企业的数据。随后的报道对最初关于事件已完全控制的说法提出了质疑。

  7. 2020

    GE披露服务提供商遭入侵导致员工信息暴露

    问题披露

    GE披露,未经授权者访问了服务提供商Canon Business Process Services的一名员工电子邮件账户,其中存有部分GE现任和前任员工及受益人的文件。文件可能包含个人和财务信息。GE称其自身系统未受影响;Canon向受影响者提供身份保护和信用监控服务。

    品牌回应

    • 整改 — Canon

      Canon is offering identity protection and credit monitoring services for two years at no cost through Experian.
    • 整改 — GE

      GE has also set up a support hotline which affected individuals can call for more information on the incident.

    来源摘录

    • General Electric (GE) has revealed that one of its service providers has fallen victim to a data breach which resulted in the personally identifiable information of current and former employees as well as beneficiaries being exposed online.
    • According to the notice of data breach, GE's systems were not affected by Canon's security breach, though the company has indicated that it is taking preventative measures to prevent a similar incident from taking place in the future.
    • We were notified on February 28, 2020 that Canon had determined that, between approximately February 3 - 14, 2020, an unauthorized party gained access to an email account that contained documents of certain GE employees, former employees and beneficiaries entitled to benefits that were maintained on Canon’s systems.
  8. 2020

    益博睿通报南非数据泄露事件调查进展

    公司回应

    益博睿就其南非数据泄露事件的调查进展进行了通报。公司表示,已在互联网上发现其认为与该事件有关的文件,并仍在调查这些文件。益博睿还确认,已对涉嫌实施诈骗的人士立案。公司在此次通报中未进一步披露有关这些文件或案件的具体细节。

    品牌回应

    • 调查 — Experian

      We continue to investigate these files and will take all steps available to us to reduce further dissemination if possible.

    来源摘录

    • In August, a fraudster was nabbed after managing to breach this information from Experian.
    • A criminal case was opened last week, and the matter is “now in the hands of law enforcement,” they confirmed
    • Experian said on Tuesday it had identified files they believe contain data relating to the incident on the internet.
  9. 2020

    益博睿南非披露数据泄露事件

    问题披露

    益博睿南非分支披露发生数据泄露。文章引用的报告称,最多有2,400万名南非居民及793,749家企业的信息受到影响。益博睿表示,消费者信用和金融信息未被获取,公司已查明攻击来源。

    品牌回应

    • 调查 — Experian

      The company declared that it has identified the origin of the attack
    • 整改 — Experian

      has already wiped stolen data from the devices used by the attackers.
    • 道歉 — Experian

      I would like to apologise for the inconvenience caused to any affected parties.

    来源摘录

    • The company declared that it has identified the origin of the attack and has already wiped stolen data from the devices used by the attackers.
    • The South African branch of consumer credit reporting agency Experian disclosed a data breach that impacted 24 million customers.
    • “Experian – a consumer, business and credit information services agency – has experienced a breach of data which has exposed some personal information of as many as 24 million South Africans and 793 749 business entities to a suspected fraudster.”
  10. 2020

    益博睿南非确认客户记录遭泄露

    问题披露

    2020年8月,益博睿南非确认发生一起导致客户记录暴露的安全事件。公司表示正在调查一次欺诈性数据查询,并称已保护并删除被不当获取的数据,且已通知相关监管机构。该确认涉及客户记录的暴露以及公司的应对措施:调查欺诈性查询、保护并删除被不当获取的数据,以及通知监管机构。

    品牌回应

    • 调查 — Experian

      The company is investigating what it is calling an “isolated incident in South Africa involving a fraudulent data inquiry”.
    • 整改 — Experian

      The misappropriated data has been secured and deleted, the company states.
    • 持续披露 — Experian

      Experian has notified the National Credit Regulator and the Information Regulator of the incident
    • 道歉 — Experian

      I would like to apologise for the inconvenience caused to any affected parties.

    来源摘录

    • Consumer, business and credit information services agency Experian South Africa has confirmed that it has suffered a security breach that has exposed customer records.
    • The breach is thought to have exposed some personal information of as many as 24-million South Africans and 793 749 business entities to a suspected fraudster.
  11. 2019

    Wawa披露支付卡数据泄露事件

    问题披露

    Wawa披露其支付处理系统发现的恶意软件可能导致顾客支付卡信息泄露,并称恶意软件截至12月12日已被遏制。首席执行官Chris Gheysens对此道歉,Wawa并为可能受影响的顾客提供一年的身份盗窃保护和信用监控。

    品牌回应

    • 道歉 — Wawa

      "I apologize deeply to all of you, our friends and neighbors, for this incident," Gheysens said.
    • 整改 — Wawa

      The company has committed to providing identity theft protection and credit monitoring for one year through Experian to those who may be affected by the Wawa data breach.

    来源摘录

    • Investigators determined customer information may have been exposed from March 4 to Dec. 12 from payment cards used at cashier terminals and fuel pumps.
    • "I apologize deeply to all of you, our friends and neighbors, for this incident," Gheysens said.
    • Wawa found malware on its payment processing systems Dec. 10, according to a statement the company issued Thursday.
  12. 2017

    因无效信用评分被处罚

    消费者金融保护局因发现消费者收到的信用评分并非所代表的模型生成的有效评分而对益博睿处以300万美元罚款。

  13. 2015

    涉及T-Mobile信用申请人的数据泄露

    益博睿披露了2013年至2015年间的未经授权访问。多达1500万申请T-Mobile信用检查的人的信息可能被泄露。

  14. 2005

    免费信用报告广告和解

    联邦贸易委员会指控益博睿的免费信用报告广告未充分披露自动注册付费信用监控计划。益博睿接受了和解。