-
Colorado Department of Health Care Policy & Financing
June 15, 2023
•
[ hack, misconfiguration, government ]
Colorado Department of Health Care Policy & Financing confirms that it is in the process of investigating an incident involving the data of state residents stolen exploiting the CVE-2023-34362 vulnerability, affecting the MOVEit file transfer tool.
-
subitodisponibile
June 13, 2023
•
[ leak, retail ]
subitodisponibile.com, an Italian e-commerce portal, has 300,000 users leaked on the Exposed forum.
-
Zacks Investment Research
June 12, 2023
•
[ leak, finance ]
Zacks Investment Research (Zacks) reportedly suffers an older, previously undisclosed data breach impacting 8.8 million customers, with the database now shared on a hacking forum.
-
HopSkipDrive
June 12, 2023
•
[ leak, technology ]
Student rideshare startup HopSkipDrive confirms a data breach involving the personal data of more than 155,000 drivers.
-
Coastal Orthopedics & Sports Medicine of Southwest Florida
June 11, 2023
•
[ hack, healthcare ]
Coastal Orthopedics & Sports Medicine of Southwest Florida posts a "Notice of Privacy Event" on its website after discovering that an unauthorized party was able to gain access to the company's computer network.
-
Minnesota Department of Education (MDE).
June 9, 2023
•
[ ransomware, malware, education ]
The Minnesota Department of Education (MDE), is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Extreme Networks
June 7, 2023
Extreme Networks reveals to be investigating the impact of a data breach related to MOVEit CVE-2023-34362 vulnerability.
-
Bennet
June 7, 2023
•
[ hack, retail ]
Bennet, an Italian supermarket chain, temporarily suspends the online services after suffering a cyber attack.
-
Mayberry Investments Limited
June 6, 2023
•
[ ransomware, malware, finance ]
Mayberry Investments Limited is hit with a Play ransomware attack.
-
Corebridge Financial
June 15, 2023
•
[ leak, sqlinjection, finance ]
Corebridge Financial files a notice regarding a data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
-
Swiss Insurance Company
June 15, 2023
Swiss insurance company is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Hashflow
June 14, 2023
•
[ financial, misconfiguration, finance ]
An attacker exploits a smart contract vulnerability to steal at least $600,000 from trading firm Hashflow.
-
Brunswick Corporation
June 13, 2023
•
[ hack, manufacturing ]
Brunswick Corporation experiences a cyber attack.
-
Town of Montclair
June 8, 2023
•
[ hack, government ]
The mayor of New Jersey township Montclair says the government is dealing with a cyber incident that has limited operations.
-
Commerce V3
June 8, 2023
HRM Enterprises, owner of the US's largest independent hardware store, is hit by a cyberattack resulting in the credit cards of more than 40K clients being stolen after HRM's ecommerce platform provider, Commerce V3, is breached.
-
ABIM (American Board of Internal Medicine)
June 6, 2023
•
[ hack, sqlinjection, healthcare ]
ABIM confirm to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 Vulnerability
-
Zellis
June 5, 2023
The BBC, British Airways (BA), Boots, and Aer Lingus confirm that the personal data of their staff has been exposed to hackers following a cyber incident impacting their payroll provider Zellis carried out exploiting the MOVEit CVE-2023-34362 Vulnerability
-
i2VPN
June 5, 2023
Attackers claim to have successfully breached the admin credentials of i2VPN, a popular freemium VPN proxy server app available for download on Google Play and the App Store, and publish the admin credentials in a Telegram channel.
-
Government agencies and media organizations in Ukraine
June 5, 2023
The Computer Emergency Response Team of Ukraine (CERT-UA) discover a cyber espionage campaign active since mid-2022 that gained unauthorized access to "several dozen" computers via an infostealer for Chrome and Opera browsers dubbed ThumbChop.
-
Atomic Wallet
June 3, 2023
The developers of Atomic Wallet investigate reports of large-scale theft of cryptocurrency from users' wallets, with over $35 million in crypto reportedly stolen. The North Korean threat actors from the Lazarus Group are believed to be behind the attack.
