-
Pathology Resource Network
June 1, 2023
•
[ leak, sqlinjection, healthcare ]
Pathology Resource Network (PRN) adds a website notice on its homepage after discovering that Cadence Bank, which provides treasury management services to PRN, experienced a MOVEit-related data breach.
-
Quorum Federal Credit
May 31, 2023
Quorum Federal Credit Union files a notice of data breach after discovering that a vulnerability within the file transfer software MOVEit resulted in an unauthorized party being able to access confidential customer data.
-
University of Rochester
June 2, 2023
•
[ hack, sqlinjection, education ]
The University of Rochester confirms a data theft as a result of the exploitation of the CVE-2023-34362 vulnerability affecting popular file transfer tool MOVEit.
-
Hospitality Staffing Solutions (HSS)
June 2, 2023
•
[ hack ]
Hospitality Staffing Solutions (HSS) files a notice of data breach after discovering that an unauthorized party accessed the company's computer network.
-
Globalcaja
June 2, 2023
•
[ ransomware, malware, finance ]
Globalcaja, a major lender in Spain reveals to be dealing with a ransomware attack affecting several offices. The Play ransomware gang claims responsibility for the attack.
-
Elgon Information Systems (HomecareGPS)
June 2, 2023
Elgon Information Systems (Elgon), which does business under the name HomecareGPS, files a notice of data breach after learning that confidential consumer information entrusted to the company was subject to unauthorized access.
-
CareNet Medical Group (CMG)
June 2, 2023
•
[ hack, healthcare ]
CareNet Medical Group (CMG) files a notice of data breach after learning that hackers were able to obtain confidential patient information stored on the company's IT network.
-
Discovery at Home
June 1, 2023
•
[ social, phishing, retail ]
Discovery at Home issues a website notice about a phishing incident they discovered on June 1.
-
Delta Dental of California
June 1, 2023
Delta Dental of California files a notice of data breach after discovering that attackers exploited the vulnerability in MOVEit, the file-transfer application used by the company.
-
Cadence Bank
June 1, 2023
Cadence Bank files a notice of data breach after discovering that the MOVEit file transfer application used by Cadence, contained a critical vulnerability, with the incident resulting in an unauthorized party being able to access consumers' sensitive information.
-
UnitedHealthcare Student Resources
May 31, 2023
UnitedHealthcare Student Resources (Student Resources) files a notice of data breach after discovering that an unauthorized party was able to access confidential information stored on the organization's MOVEit server.
-
Undisclosed energy company in the U.S.
May 31, 2023
•
[ social, phishing, energy ]
Researchers from Cofense discover a phishing campaign was observed targeting a notable energy company in the US, employing QR codes to slip malicious emails into inboxes and bypass security.
-
Swiss Parliament website
June 2, 2023
•
[ hack, ddos, government ]
The pro-Russia NoName057(16) collective attacks the Swiss parliament website while its members discuss whether the country abandoned its neutrality to send aid to Ukraine.
-
Gruppo Mercurio
June 2, 2023
•
[ ransomware, malware, automotive ]
Gruppo Mercurio, an Italian vehicle transportation company, is hit with a LockBit 3.0 ransomware attack.
-
Middlesex County Public Schools
June 1, 2023
•
[ ransomware, malware, education ]
The superintendent for Middlesex County Public Schools confirms that the school division was the subject of a recent ransomware attack.
-
Kaspersky
June 1, 2023
•
[ hack, malware, technology ]
Russian cybersecurity firm Kaspersky discloses 'Operation Triangulation': some iPhones on its network were hacked using an iOS vulnerability that installed malware via iMessage zero-click exploits.
-
Ofcom
June 1, 2023
•
[ hack, sqlinjection, government ]
Britain's communications regulator Ofcom announces that confidential information which it held on companies it regulates was downloaded by hackers exploiting the CVE-2023-34362 vulnerability in the MOVEit file transfer tool.
-
North Mississippi Health Services
June 1, 2023
North Mississippi Health Services (NMHS) posts a notice on its website describing a third-party data breach at Cadence Bank, a company that provides treasury management services to NMHS, due to the exploitation of MOVEit vulnerability.
-
Law Foundation of Silicon Valley
June 1, 2023
The Law Foundation of Silicon Valley, a California law firm that provides free services to those in need, discloses to have been it by a ransomware attack compromising the data of 42,000 individuals.
-
University System of Georgia (USG)
June 1, 2023
•
[ ransomware, malware, education ]
Threat actors are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software, tracked as CVE-2023-34362, to steal data from organizations. Few days later the Clop ransomware gang claims responsibility for the attacks and starts extorting companies impacted by the data theft attacks,
