Important information about a data breach on the Emagister Training website.

UKAVIATOR

Apologies if this post is in the wrong place. I have had an email from Emagister about a data breach on their website which came from Spain. Emagister are a training company who specialise i in degrees and job placement. The hacking attempt on their databases were discovered on January 16, 2024, due to a remote code execution. Please see email mail below:

Dear user,

We would like to inform you that a hacking attempt on our databases was discovered on January 16, 2024, due to a remote code execution. The vulnerability was found in Emagister's website software, allowing the execution of unauthorized code from our servers.

This issue involved your data, such as:

Name and surname

Gender

Email address

Date of birth

Phone number

Address

Postal code

This threat could result in loss of control over your data, unauthorized re-identification and loss of privacy. However, the severity of the consequences is considered low.

We want to assure you that Emagister does NOT store data related to payment methods such as bank accounts or credit cards, so the breach does not affect this information.

Measures have been taken to resolve and minimize the damage. The Spanish Data Protection Agency has been informed, and an internal report on the management of the breach has been drafted.

We apologize for this issue. We recommend verifying the source of communications you receive (email, SMS, or calls), as they may be unauthorized. Please inform us or contact the relevant authorities if you detect any unauthorized use.

For more information on the management of the incident, please contact us at supportuser_uk@emagister.com

Best regards,

Emagister Team

Why are you getting this email? You are getting this email because you requested information on a course on Emagister

Stop receiving emails from Emagister |Contact |Web Version

© Emagister 2024


https://www.emagister.co.uk/

born_again

You need to look for protective CIFAS marker.

frugalstephen

Got the same email, though haven't a clue who they are, or why they sent me it. Just re enforces to me why I will never trust 'the cloud'! Why would you give your data to a stranger to look after? As for banking, when you're standing in a shop, with no WiFi/mobile signal, trying to pay for your mundane shopping, you'll be glad of some cash on you. Unless of course you've been persuaded you don't need it anymore!

kat888

Not sure about cash being safer. I've never been mugged in the street for my data.

frugalstephen

kat888 said:

Not sure about cash being safer. I've never been mugged in the street for my data.

Maybe, but all their poor sods that have had their phone nicked, it's the data they're after!

born_again

frugalstephen said:

kat888 said:

Not sure about cash being safer. I've never been mugged in the street for my data.

Maybe, but all their poor sods that have had their phone nicked, it's the data they're after!

Just how are they going to get that when it transmitted via a secure connection direct to whoever the retailer uses for payment processing?

Phone stolen, then make sure that it's locked down so they can't get in 👍

Theshopper

I’ve got the same email, is it a scam, don’t want to reply to email

frugalstephen

born_again said:

frugalstephen said:

kat888 said:

Not sure about cash being safer. I've never been mugged in the street for my data.

Maybe, but all their poor sods that have had their phone nicked, it's the data they're after!

Just how are they going to get that when it transmitted via a secure connection direct to whoever the retailer uses for payment processing?

Phone stolen, then make sure that it's locked down so they can't get in 👍

No, you misunderstand. When you are 'mugged' for your phone, they wait till you are actually using it, hence they steal it unlocked. Nicked phones have little value these days because of increased security, it's the data they want, your banking app/credit card app  etc..

frugalstephen

Theshopper said:

I’ve got the same email, is it a scam, don’t want to reply to email

Why would you want to reply anyway?

frugalstephen

TrustPilot shows the company to be untrustworthy...

https://uk.trustpilot.com/review/emagister.co.uk

grandma_j

I have it too, very odd, I guess it must be a scam, but the company does exist. I have never registered so how can my info be subject to a data breach.  Is there anywhere I can fwd the email to check whether it’s a scam?