{"id":35038,"date":"2020-05-18T07:58:08","date_gmt":"2020-05-18T07:58:08","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/"},"modified":"2020-05-18T07:58:08","modified_gmt":"2020-05-18T07:58:08","slug":"i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/","title":{"rendered":"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?)"},"content":{"rendered":"
<\/div>\n

Roundup<\/strong> Let’s catch you up on infosec news beyond the bits and bytes we’ve already reported<\/a>.<\/p>\n

Leasing outfit’s leaky database exposes big names<\/span><\/h3>\n

A leasing company left a poorly secured database facing the open internet for anyone to find and freely access \u2013 and it contained records on assets used by big names, such as Samsung, Rolls-Royce, Tesco, Computacenter, Link Group, Capita, Freightliner, and MC Group, we’re told.<\/p>\n

The team at TurgenSec informed El Reg<\/em> over the weekend it found the publicly accessible data cache, operated by an outfit called LeaseSolution, and privately tipped off the firm. The database has since vanished from view.<\/p>\n

The records included basic contact information for the biz’s customers, so things like job titles, postal and email addresses, phone numbers, and so on. More interestingly, they included a list of assets the clients had leased \u2013 think offices, corporate jets, and even industrial machinery.<\/p>\n

The data doesn’t at first glance seem terribly damaging in the wrong hands. There was no personal information \u2013 beyond work contact details \u2013 nor any financial data, so you wouldn’t expect to see it fetch much of a price on dark-web markets.<\/p>\n

To someone wanting to perform a targeted swindle, such as impersonating a supplier or client to redirect payment to another bank account, however, it would be quite useful. A crook wanting to re-route an invoice, or get a malware foothold on the corporate network, would know exactly who to target and what to tell them in a social engineering scenario.<\/p>\n

“If one of our clients was targeted in a breach like this,” said one TurgenSec researcher, “It would sound all my bells and I would be really worried.”<\/p>\n

Officials collared after Pegasus buy goes awry<\/span><\/h3>\n

Three ex-g-men in Ghana have been handed prison terms for wasting taxpayer money in a case related to the sale of the NSO Group’s Pegasus<\/a> smartphone surveillance tools.<\/p>\n

The three men, all former officials involved in national communications and security in the West African nation, were sent down<\/a> for five to six years each, after a court found that, in their roles, they spent $4m of government money on purchasing Pegasus hardware and software. The software didn’t show up, though, and documentation about the purchase was absent, so in effect, the trio were locked up for blundering a multi-million-dollar deal.<\/p>\n

It should be noted that this case was not about any wrongdoing by the Israeli NSO Group. Another defendant \u2013 the local sales rep who brokered the deal \u2013 was acquitted, while a fifth suspect was released without further prison time.<\/p>\n

Hidden Cobra gets a new malware trick<\/span><\/h3>\n

US-CERT said<\/a> a new piece of Windows malware dubbed Pebbledash is the work of Hidden Cobra, the North Korean hacking crew responsible for stealing millions of dollars in cyber-heists.<\/p>\n

“This report looks at a full-featured beacon implant. This sample uses FakeTLS for session authentication and for network encoding utilizing RC4,” US-CERT said. “It has the capability to download, upload, delete, and execute files; enable Windows CLI access; create and terminate processes; and perform target system enumeration.”<\/p>\n

The recommendations for users and admins are standard best practices: keep software up to date, disable file and printer sharing, and don’t open any suspicious emails or attachments.<\/p>\n

Hackers drop gigs on Gaga<\/span><\/h3>\n

Last week we had the story of miscreants stealing a massive trove<\/a> of data from the computers of an American law firm representing a galaxy of showbiz stars. The hackers have promised to release the 750GB haul of swiped contracts, agreements, and personal info.<\/p>\n

El Reg<\/em> understands that 2GB of the cache has been dropped onto the dark web, and contain documents and correspondence involving pop siren Lady Gaga. We won’t link to the Tor-hidden dumping ground, though it can be found easily enough.<\/p>\n

The hacking crew also claims to have pilfered information related to President Trump, although so far there hasn’t been much posted to back that up.<\/p>\n

Microsoft emits Stormspotter for customers to suss out their Azure holes<\/span><\/h3>\n

Red teams rejoice! Microsoft has released an offensive security tool called Stormspotter<\/a> that identifies potential weaknesses in an organization’s Azure deployments \u2013 which a miscreant could exploit to gain access to data or drill further into a network.<\/p>\n

The idea here, as with all offensive security tools, is to speed up the process of penetration-testing Azure deployments, and allow IT admins to shore up weak points before they can be targeted by criminals. Redmond has made the tools available through its open-source program, and welcomes contributors.<\/p>\n

PrintSpooler bugs take center stage<\/span><\/h3>\n

Now that everyone has had a chance to test out and install this month’s Patch Tuesday bundle<\/a>, researchers are providing a closer look at some of the flaws. Among those is CVE-2020-1048<\/a>, a privilege escalation bug in Windows Print Spooler.<\/p>\n

Experts Yarden Shafir and Alex Ionescu showed how a rogue user or malware on a computer could use a specially crafted printer driver to take advantage of weak security controls in Print Spooler and elevate their privileges to take over the system \u2013 all using a basic user account with no need for administrative access, thanks to some holes in how printer drivers are handled.<\/p>\n

The duo notes the attack can be pulled off with just a few lines of C code. All of this is to say: install your Windows updates.<\/p>\n

Adobe macOS flaws allow miscreants, malware to get root on Apple boxes<\/span><\/h3>\n

While we’re on the subject of this month’s security fixes, Yuebin Sun has taken a detailed look<\/a> at three Adobe Reader flaws in macOS that, when chained together, can achieve arbitrary code execution as root \u2013 providing total control over a Mac.<\/p>\n

The bugs (CVE-2020-9615, CVE-2020-9614, CVE-2020-9613) involve an insecure client check, a root bypass with temporary directories, and a race condition, and are exploited locally.<\/p>\n

“The only requirement needed to trigger the vulnerabilities is that Adobe Acrobat Reader DC has been installed,” said Sun. “A normal user on macOS (with SIP enabled) can locally exploit this vulnerabilities chain to elevate privilege to root without a user being aware.”<\/p>\n

Scumbags turn their focus to APIs<\/span><\/h3>\n

The team at Cequence said its customers have experienced an unusually high level of attacks<\/a> on API endpoints from botnets lately.<\/p>\n

“API endpoints seem to be taking more of the brunt of the attacks than normal; in one case, 24 million events occurred in total against web and API, representing 4.5 million events in legitimate traffic with 19.5 million events being attack traffic,” said Cequence hacker in residence Jason Kent. “The lion\u2019s share of the attack traffic, 15 million events, was aimed at one login API endpoint for the Android application. This attack has been ongoing since lockdown orders began going into place and has changed very little.”<\/p>\n

The biz believes attacks are in part caused by boredom. Miscreants are in coronavirus lockdown just like everyone else, and with more time on their hands, bot herders are getting more creative and probing a wider set of services.<\/p>\n

WordPress plugin open to XSS attacks<\/span><\/h3>\n

Sucuri said<\/a> it has found an easy-to-exploit cross-site scripting bug in a WordPress extension that is present in some 40,000 sites.<\/p>\n

The flaw is located in a plugin for the CMS called WP Product Review. The plugin lets website owners earn a commission by posting links to gear in their reviews, and collecting money when readers buy something through those links. Unfortunately, the plugin fails to do security checks on user input.<\/p>\n

“All user input data is sanitized but the WordPress function used can be bypassed when the parameter is set inside an HTML attribute,” we’re told. “A successful attack results in malicious scripts being injected in all the site\u2019s products.”<\/p>\n

Site owners are advised to update the plugin to version 3.7.6 or later to clear up the flaw.<\/p>\n

US Congress mulls bill to pay out for security research<\/span><\/h3>\n

The US Senate is kicking around a bill that would see money earmarked to reward security research.<\/p>\n

NextGov<\/a> reports that the 2020 Cyber Leap Act would allow the Commerce Secretary to authorize funds that would pay out for hacking competitions and crowdsource projects, including those conducted by state, local, and tribal governments.<\/p>\n

While the bill is in its early phases, it does have bipartisan support of senators from Mississippi, Nevada, and Colorado, so there is some hope it may be passed.<\/p>\n

COMpfun creeps targeting visa applicants<\/span><\/h3>\n

The COMpfun hacking crew, a long-running malware operation, has a nasty new trick: targeting immigration visa applicants.<\/p>\n

Kaspersky said<\/a> the trojan is being spread via bogus forms aimed at people in Europe. Aside from the normal tracking functions, the trojan is notable for its ability to get into external drives.<\/p>\n

“It’s functions include the ability to acquire the target\u2019s geolocation, gathering host- and network-related data, keylogging and screenshots,” said Kaspersky.<\/p>\n

“In other words, it\u2019s a normal full-fledged Trojan that is also capable of propagating itself to removable devices.”<\/p>\n

Don’t panic but the US government says ‘high-risk’ chemical facilities have lousy security in place<\/span><\/h3>\n

The US Government Accountability Office (GAO) has issued its report<\/a> [PDF] on network security at the nation’s dangerous chemical manufacturing facilities and, unfortunately, it is a little grim.<\/p>\n

The report said that, among other failings in their network and data protections, facilities aren’t getting updated standards from the government on what they should be doing to protect against hackers.<\/p>\n

“GAO found that the [Chemical Facilty Anti-Terrorism Standards] program has guidance designed to help the estimated 3,300 CFATS-covered facilities comply with cybersecurity and other standards, but the guidance has not been updated in more than 10 years, in contrast with internal control standards which recommend periodic review.” \u00ae<\/p>\n

Sponsored:<\/span> Webcast: Ransomware has gone nuclear<\/a><\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Plus: Pop’s Lady Gaga popped in hack, and more Roundup\u00a0 Let’s catch you up on infosec news beyond the bits and bytes we’ve already reported.\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":35039,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-35038","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nI know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?) 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?) 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-05-18T07:58:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"664\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?)\",\"datePublished\":\"2020-05-18T07:58:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/\"},\"wordCount\":1639,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/\",\"name\":\"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?) 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg\",\"datePublished\":\"2020-05-18T07:58:08+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg\",\"width\":1000,\"height\":664},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?) 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/","og_locale":"en_US","og_type":"article","og_title":"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?) 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-05-18T07:58:08+00:00","og_image":[{"width":1000,"height":664,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?)","datePublished":"2020-05-18T07:58:08+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/"},"wordCount":1639,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/","url":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/","name":"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?) 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg","datePublished":"2020-05-18T07:58:08+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh.jpg","width":1000,"height":664},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/i-know-what-you-leased-last-summer-asset-database-leak-hits-capita-rolls-royce-tesco-every-little-helps-eh\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"I know what you leased last summer: Asset database leak hits Capita, Rolls-Royce, Tesco (every little helps, eh?)"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=35038"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35038\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/35039"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=35038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=35038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=35038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}