-
Kennedy Krieger Institute
May 31, 2023
•
[ leak, misconfiguration, healthcare ]
The Johns Hopkins University and the Johns Hopkins Health System Corporation (collectively "Johns Hopkins'') file a notice of data breach on behalf of the Kennedy Krieger Institute after learning that a software vulnerability resulted in confidential consumer information being leaked.
-
Indiana Family and Social Services Administration
May 31, 2023
•
[ leak, sqlinjection, government ]
The Indiana Family and Social Services Administration (FSSA) posts a notice announcing that the protected health information of an estimated 212,193 Indiana Medicaid members was impacted by the MOVEit data breach affecting CareSource.
-
Greece's online examination platform
May 30, 2023
•
[ hack, education ]
End-of-year high school exams in Greece are disrupted by "one of the most extensive cyberattacks in the country's history," according to the country's Education Ministry.
-
Global Atlantic Financial Group
May 30, 2023
•
[ leak, sqlinjection, finance ]
Global Atlantic Financial Group files a notice of data breach after discovering the MOVEit-related data breach at Pension Benefit Information.
-
Skolkovo Foundation
May 29, 2023
•
[ hack, education ]
Hacktivists from Ukraine breach the systems of Skolkovo Foundation, the agency which oversees the high-tech business area located on the outskirts of Moscow. According to Skolkovo's statement, the hackers managed to gain limited access to certain information systems of the organization, including its file hosting service on physical servers.
-
Offices of Iranian President Ebrahim Raisi
May 29, 2023
A trove of documents, images and videos from the offices of Iranian President Ebrahim Raisi are posted online and appear to be authentic.
-
Jimbos Protocol
May 28, 2023
Jimbos Protocol, an Arbitrum-based DeFi project, suffers a flash loan attack that resulted in the loss of more than of 4000 ETH tokens, currently valued at over $7,500,000.
-
UC Davis Health
May 24, 2023
•
[ hack, phishing, healthcare ]
UC Davis Health confirms that the email account of an employee had been accessed by an unauthorized individual.
-
City of Philadelphia
May 24, 2023
The City of Philadelphia investigates a data breach after attackers "may have gained access" to City email accounts containing personal and protected health information five months ago, in May.
-
SiComputer
May 23, 2023
•
[ ransomware, manufacturing ]
The 8Base gang claims responsibility for a cyber attack against SiComputer.
-
LiveAction
May 22, 2023
•
[ ransomware, malware, technology ]
LiveAction files a notice of data breach after the company was the target of a ransomware attack.
-
Bryan Cave
May 22, 2023
Mondelez, the U.S. manufacturer of Oreo cookies and Milka chocolate, warns employees that their personal data has been compromised through a breach at the law firm Bryan Cave, which provides legal services to Mondelez and other Fortune 500 companies.
-
Azienda Trasporti Milano (ATM)
May 22, 2023
•
[ hack, ddos, government ]
The pro-Russian group NoName057(16) takes down the website of ATM, the company that manages the public transport in the city of Milan, and the Italian Transport Regulation Authority (Autorit'' di Regolazione dei Trasporti '" ART)
-
Tornado Cash
May 20, 2023
•
[ hack, finance ]
An attacker exploits crypto mixer Tornado Cash to take full control of the decentralized platform and steal $1 million. The day after the attacker reverts the control back.
-
Buckley King
May 18, 2023
•
[ ransomware, malware ]
Buckley King, a law firm, is hit with a BlackBasta ransomware attack.
-
Financial Institution Service
May 31, 2023
Financial Institution Service files a notice of data breach after discovering that the vulnerability in the file-transfer application MOVEit allowed attackers to access the personal information of more than 750,000 people.
-
Barrick Gold
May 31, 2023
Barrick Gold files a notice of data breach after discovering that attackers exploited the vulnerability in the MOVEit secure file-transfer software used by the company.
-
AlohaCare
May 31, 2023
•
[ leak, sqlinjection, healthcare ]
AlohaCare files a notice of data breach after confirming that a vulnerability in the file-transfer program MOVEit resulted in confidential patient information being accessible to an unauthorized party.
-
22 energy companies in Denmark
May 31, 2023
SektorCERT, Denmark's state-funded organization handling cyber incidents in the critical sector, reveals that 22 energy companies were breached during May 2023, exploiting the CVE-2023-28771 Zyxel vulnerability.
-
MHMR Authority of Brazos Valley
May 30, 2023
•
[ ransomware, malware, healthcare ]
The MHMR Authority of Brazos Valley reveals to have suffered a Hive ransomware attack.
