Breach Disclosure: Mastercard

On August, 2019, the German Mastercard bonus program "Priceless Specials" was the victim of a data breach that involved 90,000 registrations of it's users. The data consisted of names, phone numbers, email addresses and partial card information. The German platform was suspended due to the breach as stated on Spiegel Online.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media

Details

As declared on Spiegel Online, there was no connection with the payment network of Mastercard. The card information, in some cases, included the first two and last four digits. This could lead to spear phishing attacks on victims of this breach by providing partial information of the credit card to disguise it's authenticity.