-
Undisclosed energy company in the U.S.
May 31, 2023
•
[ social, phishing, energy ]
Researchers from Cofense discover a phishing campaign was observed targeting a notable energy company in the US, employing QR codes to slip malicious emails into inboxes and bypass security.
-
Swiss Parliament website
June 2, 2023
•
[ hack, ddos, government ]
The pro-Russia NoName057(16) collective attacks the Swiss parliament website while its members discuss whether the country abandoned its neutrality to send aid to Ukraine.
-
Gruppo Mercurio
June 2, 2023
•
[ ransomware, malware, automotive ]
Gruppo Mercurio, an Italian vehicle transportation company, is hit with a LockBit 3.0 ransomware attack.
-
Middlesex County Public Schools
June 1, 2023
•
[ ransomware, malware, education ]
The superintendent for Middlesex County Public Schools confirms that the school division was the subject of a recent ransomware attack.
-
Kaspersky
June 1, 2023
•
[ hack, malware, technology ]
Russian cybersecurity firm Kaspersky discloses 'Operation Triangulation': some iPhones on its network were hacked using an iOS vulnerability that installed malware via iMessage zero-click exploits.
-
Ofcom
June 1, 2023
•
[ hack, sqlinjection, government ]
Britain's communications regulator Ofcom announces that confidential information which it held on companies it regulates was downloaded by hackers exploiting the CVE-2023-34362 vulnerability in the MOVEit file transfer tool.
-
North Mississippi Health Services
June 1, 2023
North Mississippi Health Services (NMHS) posts a notice on its website describing a third-party data breach at Cadence Bank, a company that provides treasury management services to NMHS, due to the exploitation of MOVEit vulnerability.
-
Law Foundation of Silicon Valley
June 1, 2023
The Law Foundation of Silicon Valley, a California law firm that provides free services to those in need, discloses to have been it by a ransomware attack compromising the data of 42,000 individuals.
-
University System of Georgia (USG)
June 1, 2023
•
[ ransomware, malware, education ]
Threat actors are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software, tracked as CVE-2023-34362, to steal data from organizations. Few days later the Clop ransomware gang claims responsibility for the attacks and starts extorting companies impacted by the data theft attacks,
-
biorieux
June 1, 2023
biorieux files a notice of data breach after discovering that the MOVEit file transfer software used by Vitality Group, contained a vulnerability allowing hackers to access confidential consumer information that had been provided to bioMrieux.
-
Allegiant Air
June 1, 2023
•
[ hack, sqlinjection ]
Allegiant Air confirms that 1,405 people had information accessed through the exploitation of the MOVEit vulnerability.
-
Allegheny County
June 1, 2023
Allegheny County, Pennsylvania, files a notice of data breach after confirming that a vulnerability in MOVEit, a file-transfer program used by Allegheny County, resulted in an unauthorized party being able to access confidential consumer information.
-
West Texas Gas
May 31, 2023
•
[ hack, energy ]
West Texas Gas (WTG) filed a notice of data breach after discovering that an unauthorized party gained access to their systems, copied certain files, and deleted other files.
-
VALIC Retirement Services Company
May 31, 2023
•
[ leak, finance ]
VALIC Retirement Services Company (VRSCO, VALIC) files a notice of data breach after discovering that one of the company's vendors experienced a MOVEit data breach resulting in confidential client information being leaked.
-
Tampa General Hospital
May 31, 2023
•
[ ransomware, malware, healthcare ]
Tampa General Hospital discloses that the sensitive data of 1.2 million was stolen in a failed ransomware attack.
-
Prudential Insurance Company of America
May 31, 2023
Prudential Insurance Company of America files a notice of data breach after discovering that one of the company's vendors (PBI) experienced a data breach related to the file transfer program MOVEit.
-
1st Source Bank
May 31, 2023
1st Source Bank confirms that the protected health information of 1,477 individuals was stolen in May 2023 when hackers exploited the zero day vulnerability in Progress Software's MOVEit Transfer solution.
-
Paramedic Billing Services
May 31, 2023
•
[ hack, healthcare ]
Paramedic Billing Services announces that it fell victim to a cyberattack in late May 2023.
-
Illinois Department of Innovation & Technology (DoIT)
May 31, 2023
•
[ hack, sqlinjection, government ]
The Illinois Department of Innovation & Technology (DoIT) reveals to be investigating the impact of a data breach related to MOVEit CVE-2023-34362 vulnerability.
-
GSC Game World
May 31, 2023
Leaked S.T.A.L.K.E.R 2 dev builds surface online, leaving users to wonder if it was somehow related to the GSC Game World security incident a couple of months ago or if it's another issue entirely.
