Identify and define your assigned breach. (It is Phishing)
Describe the type of organization in which the breach occurred.
Identify who was involved.
Describe how the breach occurred.
Examine how the threat could impact the organization. Discuss what consequences the breach may cause.
* Peer responses should address steps the organization could take to prevent future breaches
Phishing Breach Description:
Phishing is a type of social engineering attack where individuals or organizations are tricked into revealing sensitive information, such as passwords, credit card numbers, or personal data, by clicking on malicious links or opening attachments in emails that appear to be from legitimate sources.
Organization Type:
This breach occurred at a large financial institution, specifically a bank.
Individuals Involved:
The individuals involved in the breach include the bank’s customers, who were the targets of the phishing emails, and the unknown perpetrators who sent the malicious emails.
How the Breach Occurred:
The phishing attack involved sending emails that appeared to be from the bank, urging customers to update their account information by clicking on a link. The link led to a fraudulent website designed to capture the customers’ login credentials and other sensitive information.
Phishing Breach Description:
Phishing is a type of social engineering attack where individuals or organizations are tricked into revealing sensitive information, such as passwords, credit card numbers, or personal data, by clicking on malicious links or opening attachments in emails that appear to be from legitimate sources.
Organization Type:
This breach occurred at a large financial institution, specifically a bank.
Individuals Involved:
The individuals involved in the breach include the bank’s customers, who were the targets of the phishing emails, and the unknown perpetrators who sent the malicious emails.
How the Breach Occurred:
The phishing attack involved sending emails that appeared to be from the bank, urging customers to update their account information by clicking on a link. The link led to a fraudulent website designed to capture the customers’ login credentials and other sensitive information.