OREO Cookies  got hacked  :(- Data Breach Exposes 50,000 Employees!  | June 21 2023
Channel: Hacking Space Frontier 
Date: 22/06/2023

Mondelez, the manufacturer of popular brands such as Oreo cookies and Milka chocolate, has informed its employees that their personal data has been compromised due to a breach at the law firm Bryan Cave, which provides legal services to Mondelez and other Fortune 500 companies. Over 50,000 current and former Mondelez employees were affected by the incident.

The leaked information includes sensitive details such as Social Security numbers, names, addresses, dates of birth, marital statuses, genders, employee identification numbers, and retirement plan information. However, financial information such as credit card numbers was not affected. Mondelez stated that it is not aware of any misuse of the leaked information but is taking the incident seriously and regrets any inconvenience caused. Importantly, the breach did not occur on or impact Mondelez's own systems or networks.

The unauthorized access to Bryan Cave's systems, specifically a storage area for certain customer files, took place between February 27 and March 1. Upon discovering the breach, Bryan Cave engaged a cybersecurity forensics firm to investigate and informed Mondelez about the incident in late March. Mondelez has not disclosed the name of the security company involved.

Mondelez notified its employees about the breach on June 15, after reviewing the impacted information and identifying the affected individuals. The company has offered credit monitoring services to the victims of the breach.

It is worth noting that Mondelez recently settled a long-standing legal dispute over a $100 million insurance claim related to damage caused by the NotPetya cyberattack in 2017. Initially, the insurer had refused to cover the damage, but Mondelez, in court documents, claimed to have lost a significant number of servers and laptops due to the malware.