“In what could be a major data breach, information of over 100 million debit and credit card users from payments processor Juspay has leaked on the dark web. Juspay processes payments for companies like Amazon, Swiggy, MakeMyTrip among others.The leaked data is in the form of a data dump and has been leaked through a compromised server of Juspay. Juspay has confirmed the data leak in its official blog post, outlining the details of the breach.”

“A database containing the personal information of over 270,000 Ledger customers has been published on RaidForums, a marketplace for buying, selling, and sharing hacked information. The database, reviewed by The Block, contains the emails, physical addresses, and phone numbers of Ledger hardware wallet buyers.”

“Shopify has confirmed a data breach, in which two “rogue members” of its support team stole customer data from at least 100 merchants. In a blog post, the online shopping site said that its investigation so far showed that the two employees, who have since been fired, were “engaged in a scheme to obtain customer transactional records of certain merchants.” Shopify said it had referred the matter to the FBI.”

“Two companies founded on security and privacy are partnering to make online payments quicker and safer. Leading password manager 1Password and virtual card platform Privacy.com today announced an API integration  that lets users create virtual cards in their browser quickly and safely when they need to make a payment.”

“A databased containing scraped data of nearly 235 million social media users from Instagram, TikTok, and YouTube was exposed without any password protection. It contained user information such as names, contact info, images, and stats about followers. Web scraping is a technique of gathering data from web pages in an automated manner. While it’s not illegal, social media companies prohibit this practice to protect user data.”

“The European Union ’s top court struck down a key method used by Facebook Inc. and other companies to transfer data across the Atlantic amid fears over potential U.S. surveillance. Thursday’s decision by the EU Court of Justice on the so-called Privacy Shield means thousands of businesses that ship commercial data to the U.S. risk turmoil in their day-to-day activities. While a separate contract-based system to transfer data was approved, the judges’ doubts about American data protection also plunge that alternative method into legal uncertainty.”

“A major data breach at mobile payment app Bharat Interface for Money ( BHIM ) has exposed the personal and financial data of millions of Indians. The breach occurred after BHIM failed to securely store vast swathes of data collected from users and businesses during a sign-up campaign. On April 23, researchers at vpnMentor made the alarming discovery that all the data related to the campaign was publicly accessible after being stored in a misconfigured Amazon Web Services S3 bucket.”

“A massive database storing millions of credit card transactions has been secured after spending close to three weeks exposed publicly to the internet. The database belongs to Paay, a card payments processor based in New York. Like other payment processors, the company verifies payments on behalf of selling merchants, like online stores and other businesses, to prevent fraudulent transactions. But because there was no password on the server, anyone could access the data inside.”

“India has more than 560 million internet users, all generating data by the terabyte. Soon they’ll have an unprecedented amount of control over their digital financial footprints, with the ability to decide what to share, with whom, and for how long. India’s top banks are getting ready to roll out a system that gives consumers access to a wide swath of their financial data and allows them to share it instantly. Backed by the Reserve Bank of India, it’s an ambitious approach that combines privacy protection with credit reporting: if it works, it could unlock the credit market for millions of Indians while offering new levels of data security and consumer control.”

“UniCredit SpA is investigating the possibility of a data breach that the Italian lender believes could be related to a similar hacking incident at Capital One Financial Corp. COF 1.33% , according to a person familiar with the matter. The company is examining whether a directory held on a cloud server was accessed without authorization, the person said. UniCredit, Italy’s largest bank by assets, said in a statement that it had contacted the relevant authorities and is actively investigating the matter. “Data security and privacy are our key priorities at all times,” the statement said. Capital One, the fifth-largest U.S. credit-card issuer, said Monday that a hacker accessed the personal information of approximately 106 million card customers and applicants, one of the largest-ever data breaches of a big bank.“

“In an important step toward establishing a single interoperable industry standard for financial data sharing, the Open Financial Exchange (OFX) will join the Financial Data Exchange (FDX) effective immediately. With this milestone, the industry continues to align around the FDX standards, which spell out how consumer-permissioned financial data is securely shared, and clarifies the security and authentication protocol requirements for financial institutions and fintechs”

“The predictive identity data features included in Transaction Risk API are leveraged in models, alongside internal company data, to provide an additional layer of identity verification for real-time risk reduction at scale. In under 100 milliseconds (ms), the core identity data elements of email, IP, phone, address, and name are scored to return a concise response, easily consumed by risk models at high volumes. The low latency of Transaction Risk API allows for global identity verification during the authorization process, helping companies to reduce false declines while finding previously undetected fraud.”

“PNC Bank is piloting dynamic CVV cards that use an e-ink screen on the reverse of the card to display a continuously updated three-digit CVV security code. The US-based bank plans to begin offering the cards to its Treasury Management division’s commercial cardholders in early 2019. PNC is using cards based on Visa’s Dynamic CVV2 Specification (dCVV2) for the pilot and is working with Idemia and Tsys, as well as Visa, on the project.”

“It is now free in every U.S. state to freeze and unfreeze your credit file and that of your dependents, a process that blocks identity thieves and others from looking at private details in your consumer credit history. If you’ve been holding out because you’re not particularly worried about ID theft, here’s another reason to reconsider: The credit bureaus profit from selling copies of your file to others, so freezing your file also lets you deny these dinosaurs a valuable revenue stream.”