-
Organization for the Prohibition of Chemical Weapons
October 4, 2018
•
[ espionage, misconfiguration, government ]
A threat actor, believed to be Russian military intelligence, targeted the office of the Organization for the Prohibition of Chemical Weapons in The Hague with a view of compromising its Wi-Fi network for espionage purposes.
-
Managed Service Providers
October 3, 2018
•
[ hack, malware, technology ]
The US Department of Homeland Security issues an alert about "ongoing" cyber-attacks against managed service providers, indirectly attributed to APT10.
-
St. Francis Xavier University
November 1, 2018
•
[ financial, malware, education ]
Canadian St. Francis Xavier University shuts down the entire network following a cryptojacking attack which attempted to use its systems' computing power to mine for Bitcoin.
-
Healthcare
November 1, 2018
•
[ insider, healthcare ]
Colbi Trent Defiore, an employee at a Virginia tech company, has been sent to prison for stealing PII from Healthcare.gov customers. Defiore improperly accessed the Healthcare.gov database several times in November 2018 and used the stolen information to commit fraud.
-
Episcopal Health Services
November 1, 2018
•
[ hack, phishing, healthcare ]
Episcopal Health Services notifies patients after employee email accounts are hacked.
-
NorthBay Healthcare Corporation
October 31, 2018
•
[ leak, healthcare ]
NorthBay Healthcare Corporation suffers a data breach affecting the information of everyone who applied for a position within the organization between December 2012 and May 2018.
-
MapleChange
October 28, 2018
MapleChange, a Canadian crypto exchange, suffers a hack and looses all the funds (913 BTC, $6M worth), despite many accuse the exchange of attempting to stage an exit scam.
-
Cathay Pacific
October 24, 2018
Cathay Pacific announces to have discovered unauthorised access to some of its information system containing passenger data of up to 9.4 million people. The attack started in March and went undetected for some months.
-
Internet Solutions
October 23, 2018
•
[ hack, misconfiguration, technology ]
Internet Solutions (IS) sends a notice to clients to warn them about a breach, and urges them to change their passwords and take additional steps to secure their servers. Later the company confirms that its internal monitoring systems have detected "irregular activity" on some of its virtual services.
-
Children's Hospital of Philadelphia (CHOP)
October 23, 2018
Children's Hospital of Philadelphia (CHOP) notifies some of its current and former patients of two email incidents, both involving health information, occurred respectively on August 23, and September 6.
-
Orange County Branch of the Girl Scouts of America
October 22, 2018
•
[ hack, education ]
Hackers breach the Orange County, Calif. branch of the Girl Scouts of America, potentially exposing personal information for 2,800 members and their families.
-
Trade
October 21, 2018
Cryptocurrency exchange Trade.io reveals a security breach: an unknown party withdraws over 50 million Trade tokens (TIO), worth over $7.5 million, from its cold storage wallets.
-
City of West Haven
October 16, 2018
•
[ ransomware, malware, government ]
The City of West Haven pays $2,000 after having 23 of its servers encrypted from a ransomware attack.
-
EOSBet
October 15, 2018
Hackers are believed to have stolen $338,000 worth of EOS cryptocurrency from blockchain-powered gambling dApp EOSBet.
-
Onslow Water and Sewer Authority (ONWASA)
October 13, 2018
•
[ ransomware, malware, government ]
The Onslow Water and Sewer Authority (ONWASA) is hit by a targeted ransomware attack carried out via Ryuk.
-
Shopper Approved
October 9, 2018
•
[ hack, malware, retail ]
Shopper Approved is the latest victim of the Magecart gang. The incident took place on September 15.
-
Minnesota Department of Human Services
October 9, 2018
•
[ social, phishing, government ]
The Minnesota Department of Human Services falls victim to a phishing email scam. The attackers accessed the information of approximately 21,000 individuals in two incidents back in June and July.
-
SpankChain
October 6, 2018
•
[ financial, misconfiguration, finance ]
SpankChain, an adult industry focused cryptocurrency, has $38,000 worth of Ethereum stolen due to a smart contract bug.
-
Hetzner South Africa
October 5, 2018
•
[ hack, technology ]
The South African branch of Hetzner, a well-known web hosting provider, suffers a new security breach. The attacker manages to gain access to customer details.
-
Federation Internationale de Football Association (FIFA)
October 4, 2018
A threat actor compromised the Federation Internationale de Football Association (FIFA) in December 2016 and January 2017. Seven of the individuals alleged to be behind this incident, believed to be Russian military intelligence (known as GRU), were indicted by the U.S. Justice Department.
