Full List

Search

Recent Breaches

• Global Affairs Canada January 19, 2022 • [ hack, ddos, government ] The Canadian government department for foreign and consular affairs suffers a cyber attack causing some services to shut down.
• Crypto January 17, 2022 • [ financial, hack, finance ] Crypto.com suffers a hack compromising 483 customer accounts with an impact estimated around $34 million.
• Undetermined January 14, 2022 On January 14, 2022 Orthodox New Year, over 70 Ukrainian government websites were defaced with political imagery and a statement in Russian, Ukrainian, and Polish before going down temporarily. Most sites were restored within hours. The attack crippled much of the government's public-facing digital infrastructure, including the most widely used site for handling government services online, Diia. Diia also has a role in Ukraine's coronavirus response and in encouraging vaccination. It also crippled the sites of the Cabinet of Ministers, and the ministries of energy, sports, agriculture, veterans' affairs, and ecology. The Ukrainian company Kitsoft also confirmed that it found the WhisperGate malware on some of its systems. At least 50 of the 70 sites targeted for defacement were developed and maintained by Kitsoft. Kitsoft was compromised, which allowed the hackers to gain access to Kitsoft's administrator panel and use the company's credentials to deface customer web sites.
• Ukraine Ministry of Foreign Affairs January 14, 2022 One of at least 15 websites belonging to Ukrainian public institutions compromised, defaced, and taken offline in a GhostWriter attack utilizing CVE-2021-32658.
• SRH Holding January 14, 2022 • [ ransomware, malware, education ] Vice Society encrypts network and threatens to leak data on their dark web portal.
• Undetermined January 13, 2022 Microsoft identified a destructive malware (dubbed WhisperGate) operation targeting multiple organizations in Ukraine. This malware first appeared on victim systems in Ukraine on January 13, 2022. The malware is assessed to be designed to look like ransomware but lacking a ransom recovery mechanism and is intended to be destructive rendering targeted devices inoperable rather than to obtain a ransom. Victims span multiple government, non-profit, and information technology organizations. A Ukrainian IT company also confirmed that it found the WhisperGate malware on some of its systems. At least 50 of the 70 sites targeted for defacement were developed and maintained by the said IT company. The latter was compromised, which allowed the hackers to gain access to its' administrator panel and use the company's credentials to deface customer web sites. Microsoft named the samples WhisperGate, while other security companies labeled the downloader as WhisperGate and WhisperKill as the actual wiper, which was considered a component of WhisperGate.
• Lewis & Clark College January 13, 2022 • [ ransomware, leak, malware ] The Quantum ransomware gand drops leaked data samples on their TOR site.
• Parasol Group January 12, 2022 • [ hack ] Parasol Group is hit with a cyber attack resulting in a multi day outage.
• Indian Medical Association January 3, 2022 Official Twitter account of the Indian Medical Association is compromised and defaced with a crypto scam.
• Impresa January 1, 2022 • [ ransomware, technology ] The Lapsu$ ransomware gang hacks and extorts the largest media conglomerate in Portugal.
• Durham Johnston Comprehensive School January 1, 2022 • [ ransomware, malware, education ] The Vice Society ransomware group leaks the data of 14 schools including the Durham Johnston Comprehensive School.
• Khyber Pakhtunkhwa Police December 29, 2021 • [ hack, leak, government ] Pakistani police department suffers data breach, over 1,400 allegedly compromised documents are posted for sale online.
• FlexBooker December 23, 2021 • [ hack, technology ] The account information of over three million users is stolen from the compromised servers of a popular schedule management program.
• CLE International December 22, 2021 • [ ransomware, malware, education ] Documents Leaked on ransomware site.
• Bako Diagnostics December 21, 2021 Georgia laboratroy services provider suffers data breach compromising protected health information of over 25,000 individuals.
• Arnprior Regional Health December 21, 2021 • [ leak, healthcare ] Canadian hospital suffers data breach.
• CompuGroup Medical December 20, 2021 • [ ransomware, malware, healthcare ] Medical software vendor suffers a ransomware attack impacting internal services.
• Grim Finance December 19, 2021 • [ hack, finance ] Decentralized platform Grim Finance is hacked, hackers steal about $30 million.
• Strongwell December 17, 2021 • [ ransomware, malware, manufacturing ] Documents Leaked on ransomware site.
• Finite Recruitment December 17, 2021 IT Recruitment firm suffers a ransomware attack, company data is published on the Conti leak site.