-
Carlson Wagonlit Travel (CWT)
July 25, 2020
US corporate travel management firm Carlson Wagonlit Travel (CWT) suffers an intrusion and it is believed to have paid a $4.5m ransom to get its data back.
-
Instacart
July 23, 2020
•
[ leak, brute-force, retail ]
Online shopping service Instacart says reused passwords are to blame for a recent spate of account breaches, which saw personal data belonging to hundreds of thousands of Instacart customers stolen and put up for sale on the dark web.
-
CouchSurfing
July 23, 2020
•
[ hack, technology ]
CouchSurfing, an online service that lets users find free lodgings, investigates a security breach after hackers began selling the details of 17 million users on Telegram channels and hacking forums.
-
MyHeritage
July 21, 2020
MyHeritage, a genealogy website based in Israel, announces that some of its users had been subjected to a phishing attack to obtain their log-in details for the site, apparently targeting email addresses obtained in the attack on GEDmatch just two days before.
-
Regis
August 3, 2020
•
[ leak, healthcare ]
Aged care operator Regis has been hit by a cyber attack. The incident led to data loss, but does not seem to have disrupted its services.
-
-
Undisclosed Vietnamese IT corporation
August 1, 2020
•
[ ransomware, malware, technology ]
Researchers from Kela reveal that an undisclosed Vietnamese IT corporation was hit with the Maze ransomware exploiting the CVE-2019-11510 vulnerability.
-
2gether
July 31, 2020
•
[ hack, financial, finance ]
2gether reveals a cyberattack in which roughly 1.2 million in cryptocurrency has been stolen from cryptocurrency investment accounts.
-
-
Family Medical Center of Michigan
July 30, 2020
•
[ ransomware, malware, healthcare ]
Michigan medical center suffers ransomware attack, only financial data is compromised,
-
European Bank for Reconstruction and Development (EBRD) Twitter account
July 29, 2020
•
[ hack, phishing, government ]
The European Bank for Reconstruction and Development (EBRD) Twitter account is hijacked.
-
The Bank of Ireland
July 28, 2020
•
[ financial, social, finance ]
One of Ireland's largest banks, Bank of Ireland, has been fined almost 1.7 million after regulators discovered it had failed to inform financial regulators and the police after a fraudster tricked them into transferring funds from a client's account.
-
Legacy Community Health
July 28, 2020
•
[ social, phishing, healthcare ]
Legacy Commmunity Health's notification indicates that an employee fell for a phishing attack on July 28. The compromise was detected on July 29. Although they have no indications of misuse, patient information in emails in that employee's mailbox contained some patients names, dates of service, and health information related to care at Legacy. "In limited instances," the notification reads, the email account also included patient Social Security numbers.
-
Providence Children's Museum
July 28, 2020
•
[ hack, education ]
The Providence Children's Museum is another victim of the Blackbaud hack.
-
Hong Kong Study Mission to China
July 28, 2020
The Hong Kong Study Mission to China has been hacked by RedDelta, a Chinese-state sponsored threat actor. The network intrusion was part of a campaign that occurred ahead of the anticipated September 2020 renewal of the China-Vatican provisional agreement.
-
Century Specialty Script, LLC
July 28, 2020
•
[ hack, misconfiguration, retail ]
Century Specialty Script, LLC disclosed a data breach from July where one employee's Microsoft Office365 account was compromised.
-
Waydev
July 26, 2020
Hackers use a blind SQL injection vulnerability to gain access to Waydev's database, from where they stole GitHub and GitLab OAuth tokens from other companies.
-
Dave
July 26, 2020
•
[ leak, misconfiguration, finance ]
Loan app Dave.com has 7.5 million records leaked, blaming the breach to the OAuth tokens stolen by the attackers from Waydev.
-
Beaumont Health
July 25, 2020
•
[ social, phishing, healthcare ]
Beaumont Health, Michigan's largest healthcare provider warns around 6,000 patients that their data may have been exposed following a phishing attack that occurred between January 3, 2020, and January 29, 2020.
-
Emotet botnet
July 24, 2020
•
[ hack, malware, technology ]
Someone is taking fun at the Emotet botnet and disrupting its operations by hacking into the malware's distribution sites and replacing malicious payloads with memes and GIFs.
