-
Kaspersky
June 1, 2023
•
[ hack, malware, technology ]
Russian cybersecurity firm Kaspersky discloses 'Operation Triangulation': some iPhones on its network were hacked using an iOS vulnerability that installed malware via iMessage zero-click exploits.
-
Ofcom
June 1, 2023
•
[ hack, sqlinjection, government ]
Britain's communications regulator Ofcom announces that confidential information which it held on companies it regulates was downloaded by hackers exploiting the CVE-2023-34362 vulnerability in the MOVEit file transfer tool.
-
North Mississippi Health Services
June 1, 2023
North Mississippi Health Services (NMHS) posts a notice on its website describing a third-party data breach at Cadence Bank, a company that provides treasury management services to NMHS, due to the exploitation of MOVEit vulnerability.
-
Law Foundation of Silicon Valley
June 1, 2023
The Law Foundation of Silicon Valley, a California law firm that provides free services to those in need, discloses to have been it by a ransomware attack compromising the data of 42,000 individuals.
-
University System of Georgia (USG)
June 1, 2023
•
[ ransomware, malware, education ]
Threat actors are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software, tracked as CVE-2023-34362, to steal data from organizations. Few days later the Clop ransomware gang claims responsibility for the attacks and starts extorting companies impacted by the data theft attacks,
-
biorieux
June 1, 2023
biorieux files a notice of data breach after discovering that the MOVEit file transfer software used by Vitality Group, contained a vulnerability allowing hackers to access confidential consumer information that had been provided to bioMrieux.
-
Allegiant Air
June 1, 2023
•
[ hack, sqlinjection ]
Allegiant Air confirms that 1,405 people had information accessed through the exploitation of the MOVEit vulnerability.
-
Allegheny County
June 1, 2023
Allegheny County, Pennsylvania, files a notice of data breach after confirming that a vulnerability in MOVEit, a file-transfer program used by Allegheny County, resulted in an unauthorized party being able to access confidential consumer information.
-
West Texas Gas
May 31, 2023
•
[ hack, energy ]
West Texas Gas (WTG) filed a notice of data breach after discovering that an unauthorized party gained access to their systems, copied certain files, and deleted other files.
-
VALIC Retirement Services Company
May 31, 2023
•
[ leak, finance ]
VALIC Retirement Services Company (VRSCO, VALIC) files a notice of data breach after discovering that one of the company's vendors experienced a MOVEit data breach resulting in confidential client information being leaked.
-
Tampa General Hospital
May 31, 2023
•
[ ransomware, malware, healthcare ]
Tampa General Hospital discloses that the sensitive data of 1.2 million was stolen in a failed ransomware attack.
-
Prudential Insurance Company of America
May 31, 2023
Prudential Insurance Company of America files a notice of data breach after discovering that one of the company's vendors (PBI) experienced a data breach related to the file transfer program MOVEit.
-
1st Source Bank
May 31, 2023
1st Source Bank confirms that the protected health information of 1,477 individuals was stolen in May 2023 when hackers exploited the zero day vulnerability in Progress Software's MOVEit Transfer solution.
-
Paramedic Billing Services
May 31, 2023
•
[ hack, healthcare ]
Paramedic Billing Services announces that it fell victim to a cyberattack in late May 2023.
-
Illinois Department of Innovation & Technology (DoIT)
May 31, 2023
•
[ hack, sqlinjection, government ]
The Illinois Department of Innovation & Technology (DoIT) reveals to be investigating the impact of a data breach related to MOVEit CVE-2023-34362 vulnerability.
-
GSC Game World
May 31, 2023
Leaked S.T.A.L.K.E.R 2 dev builds surface online, leaving users to wonder if it was somehow related to the GSC Game World security incident a couple of months ago or if it's another issue entirely.
-
Greater Rochester Independent Practice Association
May 31, 2023
Greater Rochester Independent Practice Association (GRIPA) files a notice of data breach after discovering that the software vulnerability within MOVEit enabled hackers to access confidential consumer information within the company's possession.
-
Granules India
May 31, 2023
•
[ ransomware, malware, manufacturing ]
The Russia-linked ransomware group LockBit claims responsibility for a cyberattack on Indian pharmaceutical giant Granules India, and publishes portions of the data it allegedly stole.
-
CCleaner
May 31, 2023
•
[ leak, technology ]
The maker of the popular optimization app CCleaner confirms that threat actors stole a trove of personal information about its paid customers following a MOVEit data breach in May.
-
Casepoint
May 31, 2023
•
[ ransomware, malware, technology ]
Casepoint says it's investigating a potential cybersecurity incident after the ransomware group BlackCat claims to have compromised the legal technology platform to steal terabytes of sensitive data.
