-
Accreditation, Audit & Risk Management Security, LLC
July 23, 2018
•
[ leak, misconfiguration, government ]
A "security incident" occurred on April 3 at a third-party vendor (Accreditation, Audit & Risk Management Security, LLC) may have compromised the personal information of employees, inmates and others involved with the Pennsylvania Department of Corrections.
-
Three U.S. congressional candidates
July 20, 2018
Microsoft reveals to have helped the U.S. government to fend off attempts by Russia to hack into the campaigns of three congressional candidates earlier this year.
-
SingHealth
July 20, 2018
•
[ leak, healthcare ]
Singapore's largest health care group, SingHealth, reveals to have suffered a cyber attack to a company database in which attackers copied information belonging to roughly 1.5 million patients, including the country's prime minster, Lee Hsien Loong.
-
Liverpool FC
July 19, 2018
•
[ hack, financial ]
Liverpool FC's fan database is hacked resulting in a serious data breach for around 150 supporters. The club confirms that season ticket holder information - including home addresses and bank details - were stolen from a club email account.
-
Sunspire Health
July 16, 2018
•
[ social, phishing, healthcare ]
Sunspire Health notifies an undisclosed number of individuals after several employee email accounts were accessed in a phishing attack between March 1, 2018 and May 4, 2018.
-
ROMWE
July 14, 2018
E-commerce site ROMWE has been hacked with over 7.3 million passwords and emails stolen. The data theft is thought to have started in July 2018.
-
Pennsylvania Department of Health
July 13, 2018
•
[ hack, government ]
A government spokesman reveals that the Pennsylvania Department of Health's birth certificate system was shut down for nearly a week last month after someone hacked into an internal website but did not take or alter citizens records.
-
Billings Clinic
July 13, 2018
•
[ social, healthcare ]
Billings Clinic discloses a breach exposing details of 8,400 patients. The organization detected anomalous activity on one of the employees' email accounts on May 14, 2018. The investigation revealed the account was compromised while the employee was travelling.
-
Ammyy
July 11, 2018
Researchers from ESET reveal that on June 13 or 14, the Ammyy website was compromised to serve a malware-tainted version of this otherwise legitimate software bundling the Kasidet trojan. To add an interesting twist to the incident, the attackers tried to hide their malicious activity behind the brand of the ongoing FIFA World Cup.
-
Monovithya Kem
July 10, 2018
•
[ espionage, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is Monovithya Kem, the daughter of a jailed opposition leader.
-
Cambodian Ministry of the Interior
July 10, 2018
•
[ espionage, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is the Cambodian Ministry of the Interior.
-
Cambodian Ministry of Economics and Finance
July 10, 2018
•
[ espionage, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is the Cambodian Ministry of Economics and Finance.
-
Cambodia
July 10, 2018
•
[ espionage, government ]
Researchers from FireEye reveal a large scale operation from TEMP.Periscope, a Chinese cyber espionage group seeking to monitor the country's upcoming and contentious July 29 national elections.
-
Gas station in Detroit
July 9, 2018
•
[ hack, misconfiguration, retail ]
Police in Detroit are looking into an apparent hack at a gas station that allowed people to steal more than 600 gallons of gas, valued at over $1,800. Authorities believe the thieves used some sort of remote device to take control of the pump.
-
Israeli Military
July 3, 2018
The Israeli military say it had uncovered a plot by Hamas militants to spy on soldiers by befriending them on social media and then luring them into downloading fake dating applications that gave Hamas access to their smartphones.
-
Fortnum & Mason
July 2, 2018
•
[ leak, misconfiguration, retail ]
Luxury retailer Fortnum & Mason is the latest big brand to be involved in a significant data breach after the company admits the details of around 23,000 competition and survey participants have been compromised in the wake of the Typeform breach.
-
Typeform
June 29, 2018
•
[ leak, misconfiguration, technology ]
Barcelona-based online survey and form building service Typeform announces a data breach after an unknown attacker downloaded a backup file containing sensitive customer information. The backup file contained data gathered by Typeform customers through surveys and online forms up until May 3, 2018.
-
Klook Travel
June 29, 2018
•
[ hack, malware, technology ]
Klook Travel informs its users about a data breach incident it suffered. The attackers exploited a malicious JS code associated with SOCIAPlus, a third-party tool integrated on the site.
-
Algonquin College
June 29, 2018
•
[ hack, education ]
The Algonquin College publishes a note indicating that the education community is still not sure how many current and former students and employees could be affected by a cyber attack that happened weeks earlier.
-
Ticketmaster
June 27, 2018
Ticketing service Ticketmaster announces a data breach affecting roughly 5% of its entire customer base, resulting in the theft of customer data, Ticketmaster login information, and payment details. The breach didn't occur at Ticketmaster itself, but at Inbenta, a provider of AI-powered live chat widgets, which Ticketmaster was deploying on some of its localized sites across the world.
