-
TSG Interactive US Services Limited (d/b/a PokerStars)
June 2, 2023
•
[ ransomware, cve-2023-34362, technology ]
PokerStars is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
-
Performance Health Technology (PH Tech)
June 2, 2023
Performance Health Technology (PH Tech), a company that provides data management services to U.S. healthcare insurers, confirms in a notice that it was impacted by the MOVEit mass-hacks
-
Harris Health System
June 2, 2023
•
[ hack, sqlinjection, healthcare ]
Harris Health System notifies patients and employees that some of their protected health information may have been compromised during a cyberattack exploiting the CVE-2023-34362 MOVEit vulnerability.
-
Starmount Life Insurance Company
June 1, 2023
•
[ hack, misconfiguration, finance ]
Unum Group's subsidiary Starmount Life Insurance Company posts a notice of data breach on its website after discovering that the company's MOVEit server was accessed by an unauthorized party.
-
Russian diplomats
June 1, 2023
Russia's Federal Security Service (FSB) also accuses U.S. intelligence of hacking "thousands of Apple phones" to spy on Russian diplomats exploiting the same vulnerability.
-
Pathology Resource Network
June 1, 2023
•
[ leak, sqlinjection, healthcare ]
Pathology Resource Network (PRN) adds a website notice on its homepage after discovering that Cadence Bank, which provides treasury management services to PRN, experienced a MOVEit-related data breach.
-
Quorum Federal Credit
May 31, 2023
Quorum Federal Credit Union files a notice of data breach after discovering that a vulnerability within the file transfer software MOVEit resulted in an unauthorized party being able to access confidential customer data.
-
University of Rochester
June 2, 2023
•
[ hack, sqlinjection, education ]
The University of Rochester confirms a data theft as a result of the exploitation of the CVE-2023-34362 vulnerability affecting popular file transfer tool MOVEit.
-
Hospitality Staffing Solutions (HSS)
June 2, 2023
•
[ hack ]
Hospitality Staffing Solutions (HSS) files a notice of data breach after discovering that an unauthorized party accessed the company's computer network.
-
Globalcaja
June 2, 2023
•
[ ransomware, malware, finance ]
Globalcaja, a major lender in Spain reveals to be dealing with a ransomware attack affecting several offices. The Play ransomware gang claims responsibility for the attack.
-
Elgon Information Systems (HomecareGPS)
June 2, 2023
Elgon Information Systems (Elgon), which does business under the name HomecareGPS, files a notice of data breach after learning that confidential consumer information entrusted to the company was subject to unauthorized access.
-
CareNet Medical Group (CMG)
June 2, 2023
•
[ hack, healthcare ]
CareNet Medical Group (CMG) files a notice of data breach after learning that hackers were able to obtain confidential patient information stored on the company's IT network.
-
Discovery at Home
June 1, 2023
•
[ social, phishing, retail ]
Discovery at Home issues a website notice about a phishing incident they discovered on June 1.
-
Delta Dental of California
June 1, 2023
Delta Dental of California files a notice of data breach after discovering that attackers exploited the vulnerability in MOVEit, the file-transfer application used by the company.
-
Cadence Bank
June 1, 2023
Cadence Bank files a notice of data breach after discovering that the MOVEit file transfer application used by Cadence, contained a critical vulnerability, with the incident resulting in an unauthorized party being able to access consumers' sensitive information.
-
UnitedHealthcare Student Resources
May 31, 2023
UnitedHealthcare Student Resources (Student Resources) files a notice of data breach after discovering that an unauthorized party was able to access confidential information stored on the organization's MOVEit server.
-
Undisclosed energy company in the U.S.
May 31, 2023
•
[ social, phishing, energy ]
Researchers from Cofense discover a phishing campaign was observed targeting a notable energy company in the US, employing QR codes to slip malicious emails into inboxes and bypass security.
-
Swiss Parliament website
June 2, 2023
•
[ hack, ddos, government ]
The pro-Russia NoName057(16) collective attacks the Swiss parliament website while its members discuss whether the country abandoned its neutrality to send aid to Ukraine.
-
Gruppo Mercurio
June 2, 2023
•
[ ransomware, malware, automotive ]
Gruppo Mercurio, an Italian vehicle transportation company, is hit with a LockBit 3.0 ransomware attack.
-
Middlesex County Public Schools
June 1, 2023
•
[ ransomware, malware, education ]
The superintendent for Middlesex County Public Schools confirms that the school division was the subject of a recent ransomware attack.
