-
Minnesota Department of Education (MDE).
June 9, 2023
•
[ ransomware, malware, education ]
The Minnesota Department of Education (MDE), is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Extreme Networks
June 7, 2023
Extreme Networks reveals to be investigating the impact of a data breach related to MOVEit CVE-2023-34362 vulnerability.
-
Bennet
June 7, 2023
•
[ hack, retail ]
Bennet, an Italian supermarket chain, temporarily suspends the online services after suffering a cyber attack.
-
Mayberry Investments Limited
June 6, 2023
•
[ ransomware, malware, finance ]
Mayberry Investments Limited is hit with a Play ransomware attack.
-
Corebridge Financial
June 15, 2023
•
[ leak, sqlinjection, finance ]
Corebridge Financial files a notice regarding a data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
-
Swiss Insurance Company
June 15, 2023
Swiss insurance company is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Hashflow
June 14, 2023
•
[ financial, misconfiguration, finance ]
An attacker exploits a smart contract vulnerability to steal at least $600,000 from trading firm Hashflow.
-
Brunswick Corporation
June 13, 2023
•
[ hack, manufacturing ]
Brunswick Corporation experiences a cyber attack.
-
Town of Montclair
June 8, 2023
•
[ hack, government ]
The mayor of New Jersey township Montclair says the government is dealing with a cyber incident that has limited operations.
-
Commerce V3
June 8, 2023
HRM Enterprises, owner of the US's largest independent hardware store, is hit by a cyberattack resulting in the credit cards of more than 40K clients being stolen after HRM's ecommerce platform provider, Commerce V3, is breached.
-
ABIM (American Board of Internal Medicine)
June 6, 2023
•
[ hack, sqlinjection, healthcare ]
ABIM confirm to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 Vulnerability
-
Zellis
June 5, 2023
The BBC, British Airways (BA), Boots, and Aer Lingus confirm that the personal data of their staff has been exposed to hackers following a cyber incident impacting their payroll provider Zellis carried out exploiting the MOVEit CVE-2023-34362 Vulnerability
-
i2VPN
June 5, 2023
Attackers claim to have successfully breached the admin credentials of i2VPN, a popular freemium VPN proxy server app available for download on Google Play and the App Store, and publish the admin credentials in a Telegram channel.
-
Government agencies and media organizations in Ukraine
June 5, 2023
The Computer Emergency Response Team of Ukraine (CERT-UA) discover a cyber espionage campaign active since mid-2022 that gained unauthorized access to "several dozen" computers via an infostealer for Chrome and Opera browsers dubbed ThumbChop.
-
Atomic Wallet
June 3, 2023
The developers of Atomic Wallet investigate reports of large-scale theft of cryptocurrency from users' wallets, with over $35 million in crypto reportedly stolen. The North Korean threat actors from the Lazarus Group are believed to be behind the attack.
-
TSG Interactive US Services Limited (d/b/a PokerStars)
June 2, 2023
•
[ ransomware, cve-2023-34362, technology ]
PokerStars is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
-
Performance Health Technology (PH Tech)
June 2, 2023
Performance Health Technology (PH Tech), a company that provides data management services to U.S. healthcare insurers, confirms in a notice that it was impacted by the MOVEit mass-hacks
-
Harris Health System
June 2, 2023
•
[ hack, sqlinjection, healthcare ]
Harris Health System notifies patients and employees that some of their protected health information may have been compromised during a cyberattack exploiting the CVE-2023-34362 MOVEit vulnerability.
-
Starmount Life Insurance Company
June 1, 2023
•
[ hack, misconfiguration, finance ]
Unum Group's subsidiary Starmount Life Insurance Company posts a notice of data breach on its website after discovering that the company's MOVEit server was accessed by an unauthorized party.
-
Russian diplomats
June 1, 2023
Russia's Federal Security Service (FSB) also accuses U.S. intelligence of hacking "thousands of Apple phones" to spy on Russian diplomats exploiting the same vulnerability.
