-
-
Indian Government
December 22, 2022
•
[ hack, government ]
New malicious campaign targeting the operations of the Indian Government
-
GeoSouthern Energy Corporation
December 21, 2022
•
[ hack, energy ]
GeoSouthern Energy Corporation file a notice of data breach after learning that a recent cyberattack compromised confidential information belonging to current and former employees as well as their dependents.
-
Monte Cristalina S.A
December 19, 2022
Monte Cristalina S.A. was added to LockBit3.0's leak site and access to Monte Cristalina's website has been blocked
-
Israeli CCTV cameras
December 19, 2022
•
[ hack, misconfiguration, government ]
An Iranian group of hackers, known as Moses Staff, had seized control of dozens of Israeli CCTV cameras.
-
Cott Systems
December 26, 2022
•
[ hack, technology ]
Cott Systems, a cloud-based solutions provider, informed its customers that an "organized cyberattack" had hit the company systems and resulted in "unusual activity" on its servers
-
Maybank
December 25, 2022
•
[ leak, finance ]
Communications and Digital minister Fahmi Fadzil said his ministry through the Personal Data Protection Department in collaboration with CyberSecurity Malaysia is seeking feedback from Maybank and Astro on the alleged data leaks to ensure the legitimacy of data ownership
-
Ziedot
December 23, 2022
NoName057(16) claims to have conducted a DDoS attack against the website of a Latvian charity organization.
-
Nonstop Administration and Insurance Services
December 22, 2022
•
[ hack, finance, healthcare ]
Nonstop Administration and Insurance Services files a notice of data breach on behalf of Eisner Health after learning that a 2022 cyberattack compromised confidential information belonging to Eisner Health patients.
-
Midwest Orthopaedic Consultants (MOC)
December 22, 2022
•
[ hack, healthcare ]
An unauthorized third party had accessed and potentially obtained certain files containing patient names, addresses, identification numbers, health insurance information, payment information, dates of birth, and clinical information.
-
MedInform
December 21, 2022
•
[ leak, misconfiguration, finance ]
MedInform files a notice of data breach after learning that an unauthorized user was able to access confidential information belonging to Cleveland Clinic patients that were stored on the company's computer network.
-
FBI
December 21, 2022
The Russian hacker group, KillNet, claims to have infiltrated the FBIs database, allegedly stealing the personal information of more than 10,000 US federal agents.
-
Undisclosed company in financial services
December 26, 2022
•
[ ransomware, finance ]
The BlackCat ransomware gang publish the data of a compromised a company in financial services, and create a replica of the victim's site to publish stolen data on it.
-
Port of Lisbon Administration (APL)
December 25, 2022
•
[ ransomware, malware, government ]
The Administration of the Port of Lisbon was hit by a ransomware attack leveraging financial reports, audits, budgets, contracts, cargo information, ship logs, crew details, customer PII (personally identifiable information), port documentation, email correspondence, and more.
-
Polish Public Procurement Office
December 24, 2022
•
[ hack, ddos, government ]
NoName057(16) claims to have conducted DDoS attacks against the websites of seven Polish public institutions.
-
Twitter
December 23, 2022
•
[ hack, misconfiguration, technology ]
A threat actor claims to be selling public and private data of 400 million Twitter users scraped in 2021 using a now-fixed API vulnerability.
-
Bristol Community College
December 23, 2022
•
[ ransomware, malware, education ]
Bristol Community College is hit with a ransomware attack.
-
U.S. Healthcare Organizations
December 22, 2022
Pro-Russian threat actor group Killnet decided to advance their political goals by targeting American hospitals and healthcare organizations
-
Minuteman Senior Services
December 22, 2022
•
[ hack, phishing, healthcare ]
Minuteman Senior Services confirms that an unauthorized individual gained access to the email account of an employee.
-
PayPal
December 21, 2022
•
[ leak, brute-force, finance ]
PayPal sends out data breach notifications to approximately 35,000 users who had their accounts accessed through credential stuffing attacks that exposed some personal data.
