-
Woodruff Arts Center
April 26, 2019
•
[ ransomware, malware ]
The Woodruff Arts Center says it is investigating a security breach after a massive network outage, allegedly caused by ransomware.
-
Undisclosed financial institution
April 25, 2019
Researchers from Cybereason discover a spear phishing campaign targeting a financial institution, and installing a sophisticated backdoor called ServHelper to take over the network.
-
Hong Kong branch of Amnesty International
April 25, 2019
•
[ espionage, hack, government ]
The Hong Kong branch of human rights group Amnesty International reveal it was targeted by state-sponsored hackers in a cyberattack "consistent with those carried out by hostile groups linked to the Chinese government".
-
Docker
April 25, 2019
An unauthorized person gain access to a Docker Hub database that exposed sensitive information for approximately 190,000 users. This information included some usernames and hashed passwords, as well as tokens for GitHub and Bitbucket repositories.
-
Chase Bank Customers
April 25, 2019
•
[ social, phishing, finance ]
A new phishing scam targeting Chase bank customers is discovered that not only asks for personal information, but also requests that the victim uploads a selfie of himself holding his ID or driver license.
-
Unknown Organization
April 24, 2019
Hackers from LulzSec Italia dump more than 5,000 credentials from the National Archives of the Italian Ministry of Cultural Heritage and Activities.
-
Aebi Schmidt
April 23, 2019
•
[ ransomware, malware, manufacturing ]
Aebi Schmidt, a Swiss manufacturing giant with operations in the U.S., is hit by a ransomware attack.
-
-
Bodybuilding
April 22, 2019
•
[ social, phishing, retail ]
Bodybuilding.com notifies its customers of a security breach detected during February 2019 which was the direct result of a phishing email received back in July 2018. Potentially 18M users are impacted.
-
Partners for Quality
April 19, 2019
•
[ hack, phishing, healthcare ]
Partners for Quality notifies 3,673 clients after some employees' email accounts are compromised.
-
-
Chipotle
April 17, 2019
Some Chipotle customers claim their accounts have been hacked and report fraudulent orders charged to their credit cards. The company states credential stuffing is to blame.
-
Tertiary Education Subsidy (TES) applicants
May 1, 2019
Officials reveal that the Tertiary Education Subsidy (TES) applicants database, containing the private data of 1,130,899 applicants was accessed by unknown intruders on March 16.
-
Telangana State Southern Power Distribution Company Ltd (TSSPDCL)
May 1, 2019
•
[ hack, energy ]
The websites of Telangana State Southern Power Distribution Company Ltd (TSSPDCL) and its AP counterpart were hacked a couple of days ago, disrupting web services, including online payments.
-
Sugar-Salem School District 322
April 26, 2019
•
[ ransomware, malware, education ]
A ransomware attack takes down servers at Sugar-Salem School District 322.
-
Scott County Schools
April 24, 2019
•
[ financial, phishing, education ]
Scott County Schools announce that the district was the victim of a $3.7 million online scam, when an undisclosed vendor told the district it never was paid for an invoice.
-
Doctors' Management Services (DMS)
April 24, 2019
•
[ ransomware, malware, healthcare ]
Doctors' Management Services (DMS) reveals to have been struck with GandCrab ransomware on Christmas Eve last year, possibly exposing the PII of its clients' patients.
-
Lime
April 23, 2019
•
[ hack, misconfiguration, manufacturing ]
Eight e-scooters from Lime, a Brisbane-based manufacturer, have their audio files swapped during a test in the streets of Brisbane.
-
EmCare Inc.
April 20, 2019
•
[ hack, phishing, healthcare ]
EmCare Inc. discloses that an unauthorized party obtained access to a number of employees' email accounts that contained the personal information of as many as 60,000 individuals, 31,000 of which are patients.
-
Ukrainian military
April 16, 2019
•
[ espionage, phishing, malware ]
Researchers from FireEye reveal that multiple Ukrainian military departments were targeted by a spear phishing campaign which attempted to drop a RATVERMIN backdoor as part of a second-stage payload delivered with the help of a Powershell script.
