Data Breach Case Study - Equifax - created from Mind Map

Page 1

Vulnerability

Exploitation

Lessons Learned

Severe Impact

XSS ( Cross Side scripting) Reported in early 2016

RCE- Remote code Execution or evaluation

Software vulnerability in opensource software program Apache Struts - Java programming framework

Vulnerability in Apache struts framework 2 : Allowed manipulating certain HTTP headers, and attacker could easily execute system commands on vulnerable systems. Attackers take advantage of the flaw, and use bots to crawl the web for vulnerable hosts

Patch Management

External web application testing

Vulnerability Assessment

Incident Response PRogram

143 million consumers has been breached. The leaked information may include: • Consumer Names • Social Security Numbers • Birthdates • Addresses • Driver’s License Numbers

Additionally, 209,000 credit cards • 182,000 consumer dispute documents containing personal information.