-
Lake Oswego School District
July 6, 2018
Lake Oswego School District warns students about a phishing email after the District Twitter account and an employee email accounts are hacked.
-
B&B Hospitality Group
July 6, 2018
•
[ financial, retail ]
B&B Hospitality Group (B&BHG) announces that it has identified and addressed a payment card security incident that affected nine restaurants in the New York metropolitan area.
-
Yatra
July 5, 2018
Online travel booking website Yatra.com is compromised and attackers steal 5 million user records that include email address & physical addresses, phone numbers & plain text passwords & PINs. The breach happened back in 2013, and it came to light now.
-
Taiwan Democratic Progressive Party's (DPP)
July 3, 2018
•
[ hack, misconfiguration, government ]
The Democratic Progressive Party's (DPP) official website is defaced by Chinese hackers and the website is replaced with pictures and words reading "Chinese netizens are supporting Tsai Ing-wen to run for re-election" in simplified Chinese characters.
-
South Eastern Regional College (SERC)
June 28, 2018
•
[ hack, phishing, education ]
Personal information of hundreds of staff at the South Eastern Regional College is compromised after detecting suspicious email activity as the consequence of a hack.
-
Official website of Ernakulam Siva Temple
June 28, 2018
•
[ hack ]
The official website of Ernakulam Siva Temple is defaced with anti-national slogans and offensive language besides a Pakistan flag.
-
GitHub account of the Gentoo Linux distribution
June 28, 2018
•
[ hack, malware, technology ]
An unknown hacker temporarily takes control over the GitHub account of the Gentoo Linux organization and embed malicious code inside the operating system's distributions that would delete user files. The malicious code fails to trigger properly and users' remain safe.
-
City of Midland
June 28, 2018
City of Midland is the latest municipality being breached because of a vulnerability in the Superion's Click2Gov application.
-
PDQ
June 22, 2018
•
[ hack, financial ]
PDQ, a fast-casual dining restaurant warns customers about a cyber attack on its computer systems in which hackers were able to access or acquire personal information from the chain's customers who paid with credit cards. The breach lasted nearly a year, from May 19, 2017 to April 20, 2018.
-
Road Sign close to ICE headquarters
June 20, 2018
Someone hacks a road sign close to the ICE headquarter in Portland and defaces it with the "Abolish ICE" message.
-
Flightradar24
June 18, 2018
•
[ leak, technology ]
Users of the popular flight-tracking site Flightradar24 are told to change their passwords after the site warns of a data breach. The breach may have compromised the email addresses and hashed passwords for a small subset of Flightradar24 users (those who registered prior to March 16, 2016).
-
Chlorine distillation plant in Ukraine
July 11, 2018
•
[ hack, malware, energy ]
The Ukrainian Secret Service (SBU) reveals it stopped a cyber-attack with the VPNFilter malware on a chlorine distillation plant in the village of Aulska, in the Dnipropetrovsk region. The SBU accuses Russia of operating the malware and launching the attack.
-
Aviation ID Australia
July 11, 2018
Aviation ID Australia, the company that issues Aviation Security Identity Cards (ASICs) is hacked and notifies hundreds of people that their ASIC application information may have been stolen.
-
Career and Technology Education Centers (C-TEC)
July 10, 2018
•
[ leak, misconfiguration, education ]
Career and Technology Education Centers (C-TEC) reveals it suffered a possible data breach earlier this year that could have exposed individuals' names and Social Security numbers. The breach happened on May 25 when an unauthorized person had access to a private file for several minutes.
-
Cambodian People's Party
July 10, 2018
•
[ espionage, hack, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is the ruling Cambodian People's Party.
-
Cambodian National Election Committee
July 10, 2018
•
[ espionage, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is the Cambodian National Election Committee.
-
Cambodian Ministry of Foreign Affairs and International Cooperation
July 10, 2018
•
[ espionage, hack, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is the Cambodian Ministry of Foreign Affairs and International Cooperation.
-
Macy's Inc.
July 9, 2018
•
[ hack, phishing, retail ]
Macy's Inc. warns customers that hackers compromised the login information of some users of the retailer's websites. The suspicious activity took place from April 26 to June 12. A third party obtained valid usernames and passwords through websites not related to macys.com.
-
Timehop
July 8, 2018
Timehop discloses a security breach that has compromised the personal data of 21 million users (essentially its entire user base). Around a fifth of the affected users have also had a phone number that was attached to their account breached in the attack.
-
VSDC
July 6, 2018
Research from Qihoo 360 Total Security reveal that hackers have breached the website of VSDC, a popular company that provides free audio and video conversion and editing software. Three different incidents have been recorded during which hackers changed the download links on the VSDC website with links that initiated downloads from servers operated by the attackers.
