-
PricewaterhouseCoopers (PWC)
June 22, 2023
PricewaterhouseCoopers (PWC) discloses that a small number of clients had some files impacted in a cyber incident involving the MOVEit vulnerability
-
Indiana University Health (IU Health)
June 22, 2023
•
[ leak, sqlinjection, healthcare ]
Indiana University Health (IU Health) posts a notice on its website announcing a data breach that occurred as a result of a third-party vendor's (TMG Health) use of the file transfer program MOVEit.
-
Beverly Hills Plastic Surgery (BHPS)
June 21, 2023
•
[ ransomware, malware, healthcare ]
The ALPHV/BlackCat ransomware gang claims responsibility for the attack to Beverly Hills Plastic Surgery (BHPS).
-
iOttie
June 20, 2023
Car mount and mobile accessory maker iOttie warns that its site was compromised for almost two months to steal online shoppers' credit cards and personal information.
-
BreachForums
June 19, 2023
•
[ leak, technology ]
The reincarnated BreachForums site just has its user database stolen and published.
-
U.S. Office of Personnel Management
June 17, 2023
The U.S. Office of Personnel Management confirms to have suffered a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Nuance
June 16, 2023
•
[ leak, sqlinjection, technology ]
Software firm Nuance joins the list of the victims of the data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
-
Milliman Solutions
June 16, 2023
Milliman Solutions files a notice of data breach after discovering that one of the company's vendors, Pension Benefit Information, experienced a data security incident involving the file sharing application MOVEit.
-
Honeywell International
June 16, 2023
Honeywell International posts a notice on its website describing a data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
-
Ernst & Young (EY)
June 15, 2023
Ernst & Young (EY) confirms to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Transport for London (TfL)
June 15, 2023
•
[ hack, sqlinjection, government ]
Transport for London (TfL) confirms to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Yamaha Music Canada
June 13, 2023
•
[ ransomware, malware, retail ]
Yamaha Music Canada suffers a ransomware attack by the Black Byte group.
-
Missouri's Office of Administration, Information Services and Technology Division (OA-ITSD)
June 13, 2023
Missouri's Office of Administration, Information Services and Technology Division (OA-ITSD) reveals to be investigating what may have been taken by hackers during a cyberattack exploiting the CVE-2023-34362 MOVEit vulnerability.
-
Bi-Bett Corporation
June 13, 2023
•
[ hack, phishing, healthcare ]
Bi-Bett Corporation files a notice of data breach after discovering that an unauthorized party was able to access an employee's email account containing sensitive patient information.
-
Various websites of the Federal Administration and enterprises affiliated with the Swiss Confederation
June 12, 2023
•
[ hack, ddos, government ]
A press release on the Swiss government portal warns of access problems on various Federal Administration websites, as well as its online services due to a DDos attack by the pro-Russia NoName057(16) collective.
-
Lumberton ISD
June 12, 2023
•
[ ransomware, malware, education ]
The Lumberton Independent School District is hit with a Rhysida ransomware attack.
-
Generations Federal Credit Union (GFCU)
June 12, 2023
•
[ hack, finance ]
Generations Federal Credit Union (GFCU) files a notice of data breach after learning that confidential consumer information entrusted to the company was subject to unauthorized access.
-
Drake University
June 10, 2023
•
[ leak, sqlinjection, education ]
The Drake University confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Kaiserslautern University of Applied Sciences (HS Kaiserslautern)
June 9, 2023
•
[ ransomware, malware, education ]
The Kaiserslautern University of Applied Sciences (HS Kaiserslautern) is the latest German-speaking university to be hit by a ransomware attack
-
e-Devlet
June 9, 2023
A website called sorgupaneli.org is offering to provide Turkish 85 million citizens' private data allegedly stolen from the e-Devlet government services website, even claiming to be able to offer President Recep Tayyip Erdogan's personal information.
