Evite

Last updated

Evite
Founded1998;26 years ago (1998)
Founders Selina Tobaccowala
Al Lieb
Parent InterActiveCorp (2001–2010)
Liberty Media (2010–present)
Private (2020–present)
Website www.evite.com

Evite is a social-planning website for creating, sending, and managing online invitations. The website offers digital invitations with RSVP tracking. It also offers greeting cards, announcements, E-Gift cards, and party planning ideas. [1]

Contents

Evite was launched in 1998 by co-founders Al Lieb and Selina Tobaccowala. Since 2020, private investors have owned Evite after two decades of ownership under media conglomerates.

In 2007, Evite threatened to sue San Francisco-based startup and competitor Socializr (later acquired by Punchbowl.com) due to alleged copyright infringement. [2] [3]

Data breach

In July 2019, Evite data was found for sale online. Evite admitted that their systems were compromised and data of over 100 million accounts were stolen. According to Evite, the breach did not contain "user information more recent than 2013". The stolen data included users' real names, usernames, email addresses, passwords, dates of birth, phone numbers, and mailing addresses. Evite recommended users to change their passwords, but it was not required. Also, since Evite stored plaintext passwords, if passwords were reused elsewhere, those accounts could be vulnerable to credential stuffing attacks. [4]

Related Research Articles

<span class="mw-page-title-main">Yahoo! Mail</span> American email service

Yahoo! Mail is an email service offered by the American company Yahoo, Inc. The service is free for personal use, with an optional monthly fee for additional features. Business email was previously available with the Yahoo! Small Business brand, before it transitioned to Verizon Small Business Essentials in early 2022. Launched on October 8, 1997, as of January 2020, Yahoo! Mail has 225 million users.

Single sign-on (SSO) is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent, software systems.

<span class="mw-page-title-main">LinkedIn</span> Professional network website

LinkedIn is a business and employment-focused social media platform that works through websites and mobile apps. It was launched on May 5, 2003 by Reid Hoffman and Eric Ly. Since December 2014, LinkedIn has been a wholly owned subsidiary of Microsoft. The platform is primarily used for professional networking and career development, and allows jobseekers to post their CVs and employers to post jobs. From 2015, most of the company's revenue came from selling access to information about its members to recruiters and sales professionals. LinkedIn has more than 1 billion registered members from over 200 countries and territories.

Streetdirectory.com is an online web mapping service, founded by Singapore-headquartered Virtual Map in 2000. It originally used licensed data from Singapore Land Authority under a non-exclusive agreement until July 2004. On top of providing free maps for personal use, the website also offers a variety of ad-supported services. The website has since expanded to include maps in Malaysia and Indonesia.

Arts and media industry trade groups, such as the International Federation of the Phonographic Industry (IFPI) and Motion Picture Association of America (MPAA), strongly oppose and attempt to prevent copyright infringement through file sharing. The organizations particularly target the distribution of files via the Internet using peer-to-peer software. Efforts by trade groups to curb such infringement have been unsuccessful with chronic, widespread and rampant infringement continuing largely unabated.

LastPass is a password manager application. The standard version of LastPass comes with a web interface, but also includes plugins for various web browsers and apps for many smartphones. It also includes support for bookmarklets.

<i>Perfect 10, Inc. v. CCBill, LLC</i>

Perfect 10, Inc. v. CCBill LLC, 488 F.3d 1102, is a U.S. court case between a publisher of an adult entertainment magazine and the webhosting, connectivity, and payment service companies. The plaintiff Perfect 10 asserted that defendants CCBill and CWIE violated copyright, trademark, and state law violation of right of publicity laws, unfair competition, false and misleading advertising by providing services to websites that posted images stolen from Perfect 10's magazine and website. Defendants sought to invoke statutory safe harbor exemptions from copyright infringement liability under the Digital Millennium Copyright Act, 17 U.S.C. § 512, and from liability for state law unfair competition, false advertising claims and right of publicity based on Section 230 of the Communications Decency Act, 47 U.S.C. § 230(c)(1).

File sharing in the United Kingdom relates to the distribution of digital media in that country. In 2010, there were over 18.3 million households connected to the Internet in the United Kingdom, with 63% of these having a broadband connection. There are also many public Internet access points such as public libraries and Internet cafes.

The 2011 PlayStation Network outage was the result of an "external intrusion" on Sony's PlayStation Network and Qriocity services, in which personal details from approximately 77 million accounts were compromised and prevented users of PlayStation 3 and PlayStation Portable consoles from accessing the service. The attack occurred between April 17 and April 19, 2011, forcing Sony to deactivate the PlayStation Network servers on April 20. The outage lasted 23 days.

The 2012 LinkedIn hack refers to the computer hacking of LinkedIn on June 5, 2012. Passwords for nearly 6.5 million user accounts were stolen. Yevgeniy Nikulin was convicted of the crime and sentenced to 88 months in prison.

In July 2015, an unknown person or group calling itself "The Impact Team" announced they had stolen the user data of Ashley Madison, a commercial website billed as enabling extramarital affairs. The hacker(s) copied personal information about the site's user base and threatened to release users' names and personal identifying information if Ashley Madison would not immediately shut down. As evidence of the seriousness of the threat, the personal information of more than 2,500 users was initially released. The company initially denied that its records were insecure, but it continued to operate.

<span class="mw-page-title-main">Have I Been Pwned?</span> Consumer security website and email alert system

Have I Been Pwned? is a website that allows Internet users to check whether their personal data has been compromised by data breaches. The service collects and analyzes hundreds of database dumps and pastes containing information about billions of leaked accounts, and allows users to search for their own information by entering their username or email address. Users can also sign up to be notified if their email address appears in future dumps. The site has been widely touted as a valuable resource for Internet users wishing to protect their own security and privacy. Have I Been Pwned? was created by security expert Troy Hunt on 4 December 2013.

Alex Holden is the owner of Hold Security, a computer security firm. As of 2015, the firm employs 16 people.

Credential stuffing is a type of cyberattack in which the attacker collects stolen account credentials, typically consisting of lists of usernames or email addresses and the corresponding passwords, and then uses the credentials to gain unauthorized access to user accounts on other systems through large-scale automated login requests directed against a web application. Unlike credential cracking, credential stuffing attacks do not attempt to use brute force or guess any passwords – the attacker simply automates the logins for a large number of previously discovered credential pairs using standard web automation tools such as Selenium, cURL, PhantomJS or tools designed specifically for these types of attacks, such as Sentry MBA, SNIPR, STORM, Blackbullet and Openbullet.

GnosticPlayers is a computer hacking group, which is believed to have been formed in 2019 and gained notability for hacking Zynga, Canva, and several other online services.

In summer 2018, a data breach affected almost 500,000 customers of British Airways, of which almost 250,000 had their names, addresses, credit card numbers and CVV cards stolen. The attack gained access to British Airways systems via the account of a compromised third party and escalated their account privileges after finding an unsecured administrator password. The attacker stole data that British Airway's was improperly recording and also redirected users of British Airways site to a bogus one that was designed to steal more data. In October 2020 the ICO fined British Airways £20 million for breaches of GDPR related to the breach.

Data breach incidences in India were the second highest globally in 2018, according to a report by digital security firm Gemalto. With over 690 million internet subscribers and growing, India has increasingly seen a rise in data breaches both in the private and public sector. This is a list of some of the biggest data breaches in the country.

ShinyHunters is a black-hat criminal hacker group that is believed to have formed in 2020 and is said to have been involved in numerous data breaches. The stolen information is often sold on the dark web.

References

  1. "Evite Software Reviews, Demo & Pricing - 2024". www.softwareadvice.com. Retrieved July 9, 2024.
  2. Nicole, Kristen (April 30, 2007). "Evite Threatens Socializr with Lawsuit". Mashable. Archived from the original on June 2, 2007. Retrieved May 4, 2015.
  3. "Evite threatens to sue Socializr for copyright infringement". April 30, 2007. Archived from the original on January 4, 2018. Retrieved May 4, 2015.
  4. Cimpanu, Catalin. "Evite e-invite website admits security breach". ZDNet. Archived from the original on November 7, 2020. Retrieved November 7, 2020.