Freelance journalists who have worked with The New York Times are being warned of a potential data breach following a cyberattack on the newspaper’s GitHub repositories, according to a TechRadar report. How did it happen and what can we all learn from this latest scam?
The breach exposed a significant amount of personal information, including full names, phone numbers, email addresses, postal addresses, nationalities, biographies, website URLs, social media handles, and in some cases, information related to specific assignments such as diving certifications or access to specialised equipment.
According to the TechRadar report a hacker posted a source code of The New York Times Company on the anonymous imageboard 4chan. The leak contained approximately 5,000 repositories and 3.6 million files, including Wordle blueprints, email marketing campaigns, ad reports, and more. The data was made available for download via peer-to-peer networks
While The New York Times has not disclosed the exact number of freelancers affected, they have communicated with those whose data may have been compromised. The company has also taken steps to secure its systems and prevent future attacks.
Tips for freelancers to protect themselves
Be vigilant: Be cautious of unsolicited emails, messages, or phone calls requesting personal information or login credentials, especially when it comes to new job postings. Verify the sender’s identity before sharing any sensitive data.
Strong passwords: Use unique, complex passwords for each online account, and enable two-factor authentication whenever possible.
Secure networks: Avoid using public Wi-Fi for sensitive activities and ensure your home network is protected with a strong password and up-to-date security software.
Monitor accounts: Regularly review your bank and credit card statements for unauthorised activity and check your credit report for suspicious inquiries.
Report scams: If you suspect you’ve been targeted by a scam, report it to the relevant authorities and your financial institutions.