TLDR InfoSec · ATTACKS & VULNERABILITIES
FIDELITY SAYS DATA BREACH EXPOSED PERSONAL DATA OF 77K CUSTOMERS
Summary from the TLDR InfoSec newsletter
Fidelity Investments has disclosed a data breach that resulted from a third party accessing information from its systems between August 17 and August 19 using two customer accounts that they created. According to data breach filings, the attacker was able to access customer data by making fraudulent requests against an internal database and retrieving images of documents pertaining to Fidelity customers. Fidelity disclosed that the breached data includes customers' social security numbers and driver's licenses.