Evite

Last updated

Evite
Founded1998;26 years ago (1998)
Founders Selina Tobaccowala
Al Lieb
Parent InterActiveCorp (2001–2010)
Liberty Media (2010–present)
Private (2020–present)
Website www.evite.com

Evite is a social-planning website for creating, sending, and managing online invitations. The website offers digital invitations with RSVP tracking. It also offers greeting cards, announcements, E-Gift cards, and party planning ideas.

Contents

Evite was launched in 1998 by co-founders Al Lieb and Selina Tobaccowala. Since 2020, private investors have owned Evite after two decades of ownership under media conglomerates.

Usage

Evite is primarily an event-planning platform, offering free and "premium" (paid) digital invitations.

In 2007, Evite threatened to sue San Francisco-based startup and competitor Socializr (later acquired by Punchbowl.com) due to alleged copyright infringement. [1] [2]

Data breach

In July 2019, Evite data was found for sale online. Evite admitted that their systems were compromised and data of over 100 million accounts were stolen. According to Evite, the breach did not contain "user information more recent than 2013". The stolen data included users' real names, usernames, email addresses, passwords, dates of birth, phone numbers, and mailing addresses. Evite recommended users to change their passwords on Evite (but did not require them to do so). Also, since Evite stored plaintext passwords (not password hashes), if passwords were reused elsewhere, those accounts could be vulnerable to credential stuffing attacks. [3]

Related Research Articles

Single sign-on (SSO) is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent, software systems.

Streetdirectory.com is an online web mapping service, founded by Singapore-headquartered Virtual Map in 2000. It originally used licensed data from Singapore Land Authority under a non-exclusive agreement until July 2004. On top of providing free maps for personal use, the website also offers a variety of ad-supported services. The website has since expanded to include maps in Malaysia and Indonesia.

Arts and media industry trade groups, such as the International Federation of the Phonographic Industry (IFPI) and Motion Picture Association of America (MPAA), strongly oppose and attempt to prevent copyright infringement through file sharing. The organizations particularly target the distribution of files via the Internet using peer-to-peer software. Efforts by trade groups to curb such infringement have been unsuccessful with chronic, widespread and rampant infringement continuing largely unabated.

A data breach is a security violation, in which sensitive, protected or confidential data is copied, transmitted, viewed, stolen, altered or used by an individual unauthorized to do so. Other terms are unintentional information disclosure, data leak, information leakage and data spill. Incidents range from concerted attacks by individuals who hack for personal gain or malice, organized crime, political activists or national governments, to poorly configured system security or careless disposal of used computer equipment or data storage media. Leaked information can range from matters compromising national security, to information on actions which a government or official considers embarrassing and wants to conceal. A deliberate data breach by a person privy to the information, typically for political purposes, is more often described as a "leak".

Graduated response is a protocol or law, adopted in several countries, aimed at reducing unlawful file sharing.

Perfect 10, Inc. v. Visa Int'l Serv. Ass'n is a court case in which the pornography magazine Perfect 10 filed a complaint against Visa and MasterCard for copyright infringement and trademark infringement.

LastPass is a password manager application owned by GoTo. The standard version of LastPass comes with a web interface, but also includes plugins for various web browsers and apps for many smartphones. It also includes support for bookmarklets.

<i>Perfect 10, Inc. v. CCBill, LLC</i>

Perfect 10, Inc. v. CCBill LLC, 488 F.3d 1102, is a U.S. court case between a publisher of an adult entertainment magazine and the webhosting, connectivity, and payment service companies. The plaintiff Perfect 10 asserted that defendants CCBill and CWIE violated copyright, trademark, and state law violation of right of publicity laws, unfair competition, false and misleading advertising by providing services to websites that posted images stolen from Perfect 10's magazine and website. Defendants sought to invoke statutory safe harbor exemptions from copyright infringement liability under the Digital Millennium Copyright Act, 17 U.S.C. § 512, and from liability for state law unfair competition, false advertising claims and right of publicity based on Section 230 of the Communications Decency Act, 47 U.S.C. § 230(c)(1).

File sharing in the United Kingdom relates to the distribution of digital media in that country. In 2010, there were over 18.3 million households connected to the Internet in the United Kingdom, with 63% of these having a broadband connection. There are also many public Internet access points such as public libraries and Internet cafes.

<i>Viacom International Inc. v. YouTube, Inc.</i> U.S. copyright court case

Viacom International, Inc. v. YouTube, Inc., 676 F.3d 19, was a United States Court of Appeals for the Second Circuit decision regarding liability for copyright infringement committed by the users of an online video hosting platform.

The 2011 PlayStation Network outage was the result of an "external intrusion" on Sony's PlayStation Network and Qriocity services, in which personal details from approximately 77 million accounts were compromised and prevented users of PlayStation 3 and PlayStation Portable consoles from accessing the service. The attack occurred between April 17 and April 19, 2011, forcing Sony to deactivate the PlayStation Network servers on April 20. On May 4, Sony confirmed that personally identifiable information from each of the 77 million accounts had been exposed. The outage lasted 23 days.

The 2012 LinkedIn hack refers to the computer hacking of LinkedIn on June 5, 2012. Passwords for nearly 6.5 million user accounts were stolen. Yevgeniy Nikulin was convicted of the crime and sentenced to 88 months in prison.

<i>Craigslist Inc. v. 3Taps Inc.</i> 2013 Northern District of California Court case

Craigslist Inc. v. 3Taps Inc., 942 F.Supp.2d 962 was a Northern District of California Court case in which the court held that sending a cease-and-desist letter and enacting an IP address block is sufficient notice of online trespassing, which a plaintiff can use to claim a violation of the Computer Fraud and Abuse Act.

In July 2015, an unknown person or group calling itself "The Impact Team" announced they had stolen the user data of Ashley Madison, a commercial website billed as enabling extramarital affairs. The hacker(s) copied personal information about the site's user base and threatened to release users' names and personal identifying information if Ashley Madison would not immediately shut down. As evidence of the seriousness of the threat, the personal information of about more than 2,500 users was initially released. The company initially denied that their records were insecure, and continued to operate.

<span class="mw-page-title-main">Have I Been Pwned?</span> Consumer security website and email alert system

Have I Been Pwned? is a website that allows Internet users to check whether their personal data has been compromised by data breaches. The service collects and analyzes hundreds of database dumps and pastes containing information about billions of leaked accounts, and allows users to search for their own information by entering their username or email address. Users can also sign up to be notified if their email address appears in future dumps. The site has been widely touted as a valuable resource for Internet users wishing to protect their own security and privacy. Have I Been Pwned? was created by security expert Troy Hunt on 4 December 2013.

Alex Holden is the owner of Hold Security, a computer security firm. As of 2015, the firm employs 16 people.

Credential stuffing is a type of cyberattack in which the attacker collects stolen account credentials, typically consisting of lists of usernames or email addresses and the corresponding passwords, and then uses the credentials to gain unauthorized access to user accounts on other systems through large-scale automated login requests directed against a web application. Unlike credential cracking, credential stuffing attacks do not attempt to use brute force or guess any passwords – the attacker simply automates the logins for a large number of previously discovered credential pairs using standard web automation tools such as Selenium, cURL, PhantomJS or tools designed specifically for these types of attacks, such as Sentry MBA, SNIPR, STORM, Blackbullet and Openbullet.

Data breach incidences in India were the second highest globally in 2018, according to a report by digital security firm Gemalto. With over 690 million internet subscribers and growing, India has increasingly seen a rise in data breaches both in the private and public sector. This is a list of some of the biggest data breaches in the country. This was reported stealing over 500 Million credit cards.

ShinyHunters is a criminal black-hat hacker group that is believed to have formed in 2020 and is said to have been involved in numerous data breaches. The stolen information is often sold on the dark web.

References

  1. Nicole, Kristen (April 30, 2007). "Evite Threatens Socializr with Lawsuit". Mashable. Archived from the original on June 2, 2007. Retrieved May 4, 2015.
  2. "Evite threatens to sue Socializr for copyright infringement". April 30, 2007. Archived from the original on January 4, 2018. Retrieved May 4, 2015.
  3. Cimpanu, Catalin. "Evite e-invite website admits security breach". ZDNet. Archived from the original on November 7, 2020. Retrieved November 7, 2020.