-
iVoy
July 28, 2020
Delivery startup, iVoy, suffers a breach with 127,432 account users' emails and passwords being exposed on an online forum.
-
Catholic Diocese of Hong Kong
July 28, 2020
The Catholic Diocese of Hong Kong to China has been hacked by RedDelta, a Chinese-state sponsored threat actor. The network intrusion was part of a campaign that occurred ahead of the anticipated September 2020 renewal of the China-Vatican provisional agreement.
-
The city of Lafayette, CO
July 27, 2020
•
[ ransomware, malware, government ]
The City of Lafayette suffers a ransomware attack that impact the phone services, email, and online payment reservation systems. The city is forced to pay $45,000.
-
Flood
July 26, 2020
•
[ hack, misconfiguration, technology ]
Software testing service Flood.io suffers a breach blamed on OAuth tokens stolen by the attackers from Waydev.
-
Sylva, NC
July 23, 2020
•
[ social, misconfiguration, government ]
A town board meeting in Sylva, NC was Zoom-bombed with unknown participants shouting racist remarks.
-
Garmin
July 23, 2020
Garmin is hit by a WastedLocker ransomware attack.
-
Administrador de Infraestructuras Ferroviarias (ADIF)
July 23, 2020
•
[ ransomware, malware, government ]
Administrador de Infraestructuras Ferroviarias (ADIF), a Spanish state-owned railway infrastructure manager is hit by REvil ransomware operators.
-
Twilio
July 22, 2020
Twilio discloses that its TaskRouter JS SDK was compromised by attackers after they gained access to one of its misconfigured Amazon AWS S3 buckets which left the SDK's path publicly readable and writable for roughly five years, since 2015.
-
SUNY Erie Community College
July 22, 2020
•
[ hack, malware, education ]
About 50 computers at SUNY Erie Community College are disabled by a malware attack.
-
Pepperstone
July 21, 2020
Pepperstone sends out an email to clients, alerting them of a data security incident in which third parties are reaching out to the broker's clients and falsely claiming to be Pepperstone.
-
DeepSource
July 21, 2020
•
[ social, phishing, technology ]
DeepSource resets the user logins after an employee falls for the Sawfish phishing campaign.
-
Kent State University
August 3, 2020
•
[ ransomware, malware, education ]
Kent State University is among the victims of the Blackbaud ransomware attack.
-
Moderna
July 30, 2020
•
[ espionage, healthcare ]
Chinese government-backed hackers have targeted Moderna in a bid to steal data.
-
British Dental Association
July 30, 2020
•
[ ransomware, malware, healthcare ]
The British Dental Association suffers from a ransomware attack and possibly has sensitive information of its members exposed.
-
Rhode Island College Foundation
July 28, 2020
•
[ ransomware, malware, education ]
Rhode Island College Foundation is another victim of the Blackbaud ransomware attack.
-
Pontifical Institute for Foreign Missions (PIME)
July 28, 2020
The Pontifical Institute for Foreign Missions (PIME) has been hacked by RedDelta, a Chinese-state sponsored threat actor. The network intrusion was part of a campaign that occurred ahead of the anticipated September 2020 renewal of the China-Vatican provisional agreement.
-
New York state's Metropolitan Transport Authority
July 28, 2020
•
[ leak, misconfiguration, government ]
The New York Metropolitan Authority blames Google algorithm for adding porn titles to train station search results.
-
Dresdner Khlanlagenbau GmbH (DKA)
July 28, 2020
The Nefilim ransomware operation begins to publish unencrypted files stolen from a Dussmann Group subsidiary, Dresdner K hlanlagenbau GmbH (DKA), during a recent attack.
-
Promo
July 27, 2020
•
[ leak, technology ]
Promo.com, an Israeli-based marketing video creation site, discloses a data breach after a database containing 22 million user records is leaked for free on a hacker forum.
-
Drizly
July 27, 2020
ShinyHunters leaks the database of Drizly, containing approximately 2.5 million records
