-
Hetzner
November 1, 2017
•
[ hack, misconfiguration, technology ]
A key database operated by large South African data centre operator and website hosting service provider Hetzner is compromised, and the company advises clients to change their passwords immediately. Compromised data includes customer and bank account details.
-
Line 204
October 30, 2017
Line 204, a Hollywood film and television production and rental company, reveals that hackers from The Dark Overlord collective have stolen its client database. The breach probably happened in September 2017.
-
T-Mobile
October 27, 2017
T-Mobile warns customers targeted by hackers trying to take control of their SIM cards, exploiting a vulnerability on its website.
-
Fontanka
October 24, 2017
Using a tool called Bad Rabbit, a threat actor launched a ransomware operation that encrypted data on networks in Bulgaria, Japan, Russia, Turkey, and Ukraine. The operation is believed to have disrupted the Kiev metro system's payment network and delayed flights at Odessa's airport. In October 2018, the United Kingdom attributed this incident to Russian military intelligence.
-
Dell
October 24, 2017
•
[ hack, malware, manufacturing ]
KrebsOnSecurity reveals that a web site set up by PC maker Dell Inc. to help customers recover from malicious software (DellBackupandRecoveryCloudStorage.com) may have been hijacked for a few weeks this summer.
-
Chase Brexton Health Care
October 17, 2017
Chase Brexton Health Care notifies 16,562 patients after four employees fell for a phishing attack. The phishing emails were sent on August 2 and 3, and by August 4, the attackers had re-routed employees' paychecks.
-
Bithumb
October 16, 2017
•
[ hack, finance ]
Local news publications and leading media outlets in South Korea reported that Bithumb, the world's largest cryptocurrency exchange by trading volume, suffered a security breach that affected 30,000 users on the trading platform.
-
Hyatt Hotels Corp.
October 12, 2017
•
[ financial, malware, retail ]
Hyatt Hotels Corp reveals to have discovered unauthorized access to payment card information at certain Hyatt-managed locations worldwide between March 18, 2017 and July 2, 2017.
-
Equifax
October 12, 2017
Equifax says it has removed third-party code from its credit report assistance Web site that prompted visitors to download spyware disguised as an update for Adobe's Flash Player software.
-
Prince Albert Police homepage
November 8, 2017
•
[ hack, government ]
Hackers from Team System Dz deface the Prince Albert Police homepage and leave the message "I love Islamic State".
-
City of Spring Hill
November 8, 2017
•
[ ransomware, malware, government ]
The City of Spring Hill, Tennessee is hit by a ransomware attack. The attackers demand a $250,000 ransom.
-
Golden Optometric
November 6, 2017
•
[ ransomware, malware, healthcare ]
Goldon Optometric informs some patients whose information was affected by a CrySiS ransomware attack.
-
Maria Kanellis
November 5, 2017
Another WWE Diva has her private photos leaked. This time the victim is Maria Kanellis.
-
Verticalscope
November 2, 2017
For the second time since June 2016, hackers compromise Verticalscope.com, a Canadian company that manages hundreds of popular Web discussion forums totaling more than 45 million user accounts, and sell the stolen account in the black market.
-
The Times of Israel
November 2, 2017
The Times of Israel and Asia Times websites are hijacked and defaced by suspected Turkish hackers, who post messages in favor of Palestine, on the 100th anniversary of the Balfour Declaration.
-
University of Fraser Valley (UFV)
November 1, 2017
An unknown attacker (or groups of attackers) breaches the network of University of Fraser Valley (UFV) and threatens to dump student information unless university top brass pay 30,000 CAD (23,000 USD).
-
Family and Children's Services of Lanark, Leeds and Grenville
November 1, 2017
•
[ ransomware, malware, healthcare ]
Two Ontario children's aid societies (Children's Aid Society of Oxford County and Family and Children's Services of Lanark, Leeds and Grenville) are hit by ransomware.
-
Clarkson Plc
November 1, 2017
British shipping services provider Clarkson Plc reveals to have been the victim of a cyber security hack and warns that the person or persons behind the attack may release some data shortly.
-
Midland County
October 27, 2017
•
[ hack, government ]
The Midland County District Attorney warns residents after their third-party payment system is hacked.
-
Coinhive
October 23, 2017
•
[ hack, malware, technology ]
The DNS records for coinhive.com are manipulated to redirect requests for the coinhive.min.js to a third party server hosting a modified version of the JavaScript file with a hardcoded site key and letting the attacker "steal" hashes from users.
