Walmart has an app called Sparks Driver. This app allows people t

o become independent driver's contractors for Walmart and deliver goods right to people doors. The Sparks app had a major data breach where $200$ Sparks accounts were accessed, and personal information was extracted from the attackers. The attack occurred between December of $2023$ and February $2024$ and went unnoticed for some time. Some of the information that accessed was social security numbers, driver's license numbers, dates of birth, names, phone numbers, email address, and mailing addresses. Walmart has since notified law enforcement and has made steps to correct the issue. They have changed their passwords and offered two year of free credit monitoring for the $200$ individuals that were affected. Walmart thinks that the attackers were able to get to this information through phishing or credential stuffing.

This article is relevant to this week's risk management lessons for several different reason. One there was an obvious data privacy breach, this could have been prevented with a more robust privacy system, or a third party that manage their cyber security they also used a third$-$party app that the hackers were able to able to breach releasing Walmart costumers$\text{'}$ information. This is also just general cyber security threat and far worse could have happened.$$

My opinion is Walmart should beef up their cyber security team and program as well work on the data privacy policy within Spark Driver. Or maybe look at using a different delivery app. Type the response