One Minute Security – The Week in Breach: 04/14/21 – 04/21/21

Codecov is an online software testing platform that integrates with code hosting platform for version control and collaboration.

Threat actors redirected the Codecov’s customers’ upload to their own site and silently collect Codecov customers’ credentials—tokens, API keys, and anything stored in the customers’ continuous integration (CI) environments.

U.S. federal government investigators stepped in and are thoroughly investigating the incident.

Geico suffered a data breach of an online sales portal where threat actors stole the driver’s licenses for policyholders for over a month.

Geico believes that the threat actors plan to use the driver’s license number to apply for unemployment benefits under the policy holder’s name.

Geico warns that affected users should look out for unexpected mailings from their state’s unemployment agency. If any are received, they should immediately contact the agency and report it as possible fraud.