-
Atlanta Women's Health Group (AWHG)
June 12, 2023
Atlanta Women's Health Group (AWHG) files a notice of data breach after learning about a recent cybersecurity incident that made confidential patient information available to an unauthorized party.
-
Smartpay
June 10, 2023
•
[ ransomware, malware, finance ]
Eftpos provider Smartpay reveals that criminals stole customer data in a ransomware attack.
-
University of Manchester
June 9, 2023
•
[ ransomware, malware, education ]
The University of Manchester warns staff and students that they suffered a cyberattack (rumored as ransomware) where threat actors likely stole data from the University's network.
-
Regional Family Medicine
June 8, 2023
•
[ hack, healthcare ]
Regional Family Medicine files a notice of data breach after discovering that what initially appeared to be an IT outage was really a cyberattack.
-
Australian Capital Territory government (ACT)
June 8, 2023
The Australian Capital Territory government (ACT) discloses to be one of the victims of the CVE-2023-2868 vulnerability found in Barracuda's email security gateway (ESG).
-
Realm IDX
June 5, 2023
•
[ leak, sqlinjection, healthcare ]
Realm IDX, a diagnostics company, confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Radio and TV broadcasts in several Russian regions
June 5, 2023
•
[ hack, government ]
Unknown hackers manage to compromise radio and TV broadcasts in several Russian regions, transmitting a fake message from President Vladimir Putin announcing martial law due to a supposedly massive Ukraine incursion.
-
Mount Desert Hospital
June 5, 2023
•
[ ransomware, malware, healthcare ]
The Snatch ransomware group claims to have breached Mount Desert Hospital in Maine.
-
Microsoft
June 5, 2023
•
[ hack, ddos, technology ]
Outlook.com suffers a series of outages, with hacktivists known as Anonymous Sudan claiming to perform DDoS attacks on the service.
-
Briars Group
June 5, 2023
The Snatch ransomware group claims to have breached Briars Group, a London-based consultancy company.
-
-
Sky Italia
June 3, 2023
•
[ leak, technology ]
Sky Italia informs some customers of "illicit cyber activities" that could have affected their data.
-
Pluriservice
June 3, 2023
The DarkRace cyber criminal gang claims responsibility for a cyber attack to Pluriservice, leading to the exfiltration of 43 gb of data.
-
Government of Nova Scotia
June 3, 2023
•
[ leak, sqlinjection, government ]
The government of Nova Scotia confirms a data theft as a result of the exploitation of the CVE-2023-34362 vulnerability affecting popular file transfer tool MOVEit.
-
YKK
June 2, 2023
•
[ ransomware, malware, manufacturing ]
The Japanese zipper giant YKK confirms that its U.S. operations were targeted by hackers in recent weeks but said it was able to contain the threat before damage was caused. However the LockBit ransomware gang posts the company name on its leak site, threatening to leak the stolen data.
-
Colorado Department of Health Care Policy & Financing
June 15, 2023
•
[ hack, misconfiguration, government ]
Colorado Department of Health Care Policy & Financing confirms that it is in the process of investigating an incident involving the data of state residents stolen exploiting the CVE-2023-34362 vulnerability, affecting the MOVEit file transfer tool.
-
subitodisponibile
June 13, 2023
•
[ leak, retail ]
subitodisponibile.com, an Italian e-commerce portal, has 300,000 users leaked on the Exposed forum.
-
Zacks Investment Research
June 12, 2023
•
[ leak, finance ]
Zacks Investment Research (Zacks) reportedly suffers an older, previously undisclosed data breach impacting 8.8 million customers, with the database now shared on a hacking forum.
-
HopSkipDrive
June 12, 2023
•
[ leak, technology ]
Student rideshare startup HopSkipDrive confirms a data breach involving the personal data of more than 155,000 drivers.
-
Coastal Orthopedics & Sports Medicine of Southwest Florida
June 11, 2023
•
[ hack, healthcare ]
Coastal Orthopedics & Sports Medicine of Southwest Florida posts a "Notice of Privacy Event" on its website after discovering that an unauthorized party was able to gain access to the company's computer network.
