Full List

Search

Recent Breaches

• Emby May 1, 2023 • [ hack, misconfiguration, technology ] Emby says it remotely shut down an undisclosed number of user-hosted media server instances that were recently hacked by exploiting a previously known vulnerability and an insecure admin account configuration.
• SNY Cargo May 1, 2023 Researchers from ClearSky Security reveal the details of 'Fata Morgana' a watering hole attack on at least eight shipping and logistics companies in Israel. The attack is highly likely to be orchestrated by a nation-state actor from Iran, with a low confidence specific attribution to Tortoiseshell (also called TA456 or Imperial Kitten).
• Barracuda May 1, 2023 • [ hack, malware, technology ] Barracuda, a company known for its email and network security solutions, warns customers that some of their Email Security Gateway (ESG) appliances were breached last week by targeting CVE-2023-2868, a now-patched zero-day vulnerability.
• TIC Hosting April 30, 2023 • [ hack, technology ] TIC Hosting, a hosting provider in Romania, suffers a data breach affecting 300 customers.
• North Carolina Housing Finance Agency April 30, 2023 • [ financial, phishing, government ] The North Carolina Housing Finance Agency (NCHFA) loses nearly $3 million in a business email compromise (BEC) scam.
• Aetonix Systems April 28, 2023 Health and personal information of up to 100,000 patients at Queensway Carleton Hospital are affected by a major data breach involving Aetonix Systems, an Ottawa-based third-party software provider.
• Truman State University April 26, 2023 • [ hack, malware, education ] Truman State University in Kirksville, Missouri says it is in the process of recovering from a "cybersecurity virus attack" that forced it to shut down the campus network and order all school-issued devices to be turned off.
• National Insurance Institute April 26, 2023 • [ hack, ddos, government ] Anonymous Sudan claims to have taken down the Israel National Insurance Institute.
• Keystone SMILES Community Learning Center April 26, 2023 • [ ransomware, malware, healthcare ] The LockBit ransomware gang apologizes for breaching Keystone SMILES Community Learning Center, nonprofit preschool organization.
• City of Lowell April 25, 2023 • [ ransomware, malware, government ] The City of Lowell announces to have been hit by a ransomware attack. The Play ransomware gang claims responsibility for the attack.
• Williamsport Home April 24, 2023 • [ leak, healthcare ] Williamsport Home confirms that it experienced a data incident,
• Fullerton India April 24, 2023 • [ ransomware, malware, finance ] The LockBit ransomware claims to have hit Indian non-bank lender Fullerton India and threatens to dump more than 600 gigabytes of financial data unless it receives a $3 million extortion payment.
• Clarke County Hospital April 24, 2023 • [ ransomware, malware, healthcare ] The Clarke County Hospital is added to the list of the Royal ransomware victims.
• Limbach Facility Services April 23, 2023 • [ hack ] Limbach Facility Services confirms to have fallen victim to a cyberattack that affected the availability and functionality of its computer network.
• Albany ENT & Allergy Services April 23, 2023 • [ ransomware, malware, healthcare ] Both BianLian and RansomHouse ransomware gangs list Albany ENT & Allergy Services in their leak site.
• Murfreesboro Medical Clinic & SurgiCenter April 22, 2023 • [ hack, healthcare ] Murfreesboro Medical Clinic & SurgiCenter is forced offline after a cyberattack.
• Multiplan April 22, 2023 • [ ransomware, malware, finance ] The Cl0p ransomware gang claims to have hacked Multiplan, allegedly exfiltrated exploiting the CVE-2023-0669 Fortra GoAnywhere MFT Vulnerability.
• MedExHCO April 22, 2023 • [ ransomware, malware, finance ] The Cl0p ransomware gang claims to have hacked MedExHCO, allegedly exfiltrated exploiting the CVE-2023-0669 Fortra GoAnywhere MFT Vulnerability.
• ITx April 22, 2023 • [ ransomware, malware, finance ] The Cl0p ransomware gang claims to have hacked ITx, a revenue management company, allegedly exfiltrated exploiting the CVE-2023-0669 Fortra GoAnywhere MFT Vulnerability.
• Europa April 20, 2023 • [ hack, misconfiguration, government ] Even the Europa.eu website is observed serving Fortnite spam within the same campaign.