-
Zellis
June 5, 2023
The BBC, British Airways (BA), Boots, and Aer Lingus confirm that the personal data of their staff has been exposed to hackers following a cyber incident impacting their payroll provider Zellis carried out exploiting the MOVEit CVE-2023-34362 Vulnerability
-
i2VPN
June 5, 2023
Attackers claim to have successfully breached the admin credentials of i2VPN, a popular freemium VPN proxy server app available for download on Google Play and the App Store, and publish the admin credentials in a Telegram channel.
-
Government agencies and media organizations in Ukraine
June 5, 2023
The Computer Emergency Response Team of Ukraine (CERT-UA) discover a cyber espionage campaign active since mid-2022 that gained unauthorized access to "several dozen" computers via an infostealer for Chrome and Opera browsers dubbed ThumbChop.
-
Atomic Wallet
June 3, 2023
The developers of Atomic Wallet investigate reports of large-scale theft of cryptocurrency from users' wallets, with over $35 million in crypto reportedly stolen. The North Korean threat actors from the Lazarus Group are believed to be behind the attack.
-
TSG Interactive US Services Limited (d/b/a PokerStars)
June 2, 2023
•
[ ransomware, cve-2023-34362, technology ]
PokerStars is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
-
Performance Health Technology (PH Tech)
June 2, 2023
Performance Health Technology (PH Tech), a company that provides data management services to U.S. healthcare insurers, confirms in a notice that it was impacted by the MOVEit mass-hacks
-
Harris Health System
June 2, 2023
•
[ hack, sqlinjection, healthcare ]
Harris Health System notifies patients and employees that some of their protected health information may have been compromised during a cyberattack exploiting the CVE-2023-34362 MOVEit vulnerability.
-
Starmount Life Insurance Company
June 1, 2023
•
[ hack, misconfiguration, finance ]
Unum Group's subsidiary Starmount Life Insurance Company posts a notice of data breach on its website after discovering that the company's MOVEit server was accessed by an unauthorized party.
-
Russian diplomats
June 1, 2023
Russia's Federal Security Service (FSB) also accuses U.S. intelligence of hacking "thousands of Apple phones" to spy on Russian diplomats exploiting the same vulnerability.
-
Pathology Resource Network
June 1, 2023
•
[ leak, sqlinjection, healthcare ]
Pathology Resource Network (PRN) adds a website notice on its homepage after discovering that Cadence Bank, which provides treasury management services to PRN, experienced a MOVEit-related data breach.
-
Quorum Federal Credit
May 31, 2023
Quorum Federal Credit Union files a notice of data breach after discovering that a vulnerability within the file transfer software MOVEit resulted in an unauthorized party being able to access confidential customer data.
-
University of Rochester
June 2, 2023
•
[ hack, sqlinjection, education ]
The University of Rochester confirms a data theft as a result of the exploitation of the CVE-2023-34362 vulnerability affecting popular file transfer tool MOVEit.
-
Hospitality Staffing Solutions (HSS)
June 2, 2023
•
[ hack ]
Hospitality Staffing Solutions (HSS) files a notice of data breach after discovering that an unauthorized party accessed the company's computer network.
-
Globalcaja
June 2, 2023
•
[ ransomware, malware, finance ]
Globalcaja, a major lender in Spain reveals to be dealing with a ransomware attack affecting several offices. The Play ransomware gang claims responsibility for the attack.
-
Elgon Information Systems (HomecareGPS)
June 2, 2023
Elgon Information Systems (Elgon), which does business under the name HomecareGPS, files a notice of data breach after learning that confidential consumer information entrusted to the company was subject to unauthorized access.
-
CareNet Medical Group (CMG)
June 2, 2023
•
[ hack, healthcare ]
CareNet Medical Group (CMG) files a notice of data breach after learning that hackers were able to obtain confidential patient information stored on the company's IT network.
-
Discovery at Home
June 1, 2023
•
[ social, phishing, retail ]
Discovery at Home issues a website notice about a phishing incident they discovered on June 1.
-
Delta Dental of California
June 1, 2023
Delta Dental of California files a notice of data breach after discovering that attackers exploited the vulnerability in MOVEit, the file-transfer application used by the company.
-
Cadence Bank
June 1, 2023
Cadence Bank files a notice of data breach after discovering that the MOVEit file transfer application used by Cadence, contained a critical vulnerability, with the incident resulting in an unauthorized party being able to access consumers' sensitive information.
-
UnitedHealthcare Student Resources
May 31, 2023
UnitedHealthcare Student Resources (Student Resources) files a notice of data breach after discovering that an unauthorized party was able to access confidential information stored on the organization's MOVEit server.
