Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

5/24/2016
10:15 AM
50%
50%

NBA Players' Financial Data Exposed In BEC Email Scam

NBA franchise employee mistakenly emails 2015 tax data of NBA team fraudster, say sources.

The Milwaukee Bucks basketball organization reportedly was recently the target of a business email compromise (BEC) scam involving the release of its players’ financial details. The information included names, addresses, Social Security numbers, dates of birth, and compensation details. 

Quoting league sources, The Vertical reports that on April 26 an employee of the franchise unknowingly emailed the players’ 2015 IRS W-2 forms to a hacker impersonating Bucks' president Peter Feigin. Sources say the franchise has taken responsibility for the error and asked the NBA and National Basketball Players Association to investigate the incident. Both the IRS and FBI also have been notified.

Representatives of players have termed the incident as “unacceptable” and asked to know “the exact measures being taken by the Bucks and the FBI to ensure each and every player's identity and financial information will not be compromised.”

The Bucks have offered three years of credit monitoring and unlimited identity restoration services to the impacted individuals, reports The Vertical.

Read more at Yahoo! Sports.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
5/25/2016 | 8:55:42 AM
Everyone's in Scope
This is a prime example that everyone and anyone can be a target of a cyber scam. At least the Bucks are launching the proper reactive measures and focusing on their employees.
COVID-19: Latest Security News & Commentary
Dark Reading Staff 5/27/2020
The Problem with Artificial Intelligence in Security
Dr. Leila Powell, Lead Security Data Scientist, Panaseer,  5/26/2020
How an Industry Consortium Can Reinvent Security Solution Testing
Henry Harrison, Co-founder & Chief Technology Officer, Garrison,  5/21/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11059
PUBLISHED: 2020-05-27
In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed in 21.10.1.
CVE-2020-10936
PUBLISHED: 2020-05-27
Sympa before 6.2.56 allows privilege escalation.
CVE-2020-6774
PUBLISHED: 2020-05-27
Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system.
CVE-2020-13633
PUBLISHED: 2020-05-27
Fork before 5.8.3 allows XSS via navigation_title or title.
CVE-2020-10945
PUBLISHED: 2020-05-27
Centreon before 19.10.7 exposes Session IDs in server responses.