-
U.S. Department of Agriculture
June 16, 2023
The U.S. Department of Agriculture confirms to have suffered a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
MyShopCasa
June 16, 2023
•
[ leak, retail ]
MyShopCasa, an Italian e-commerce site has its database leaked.
-
National Student Clearinghouse
June 15, 2023
•
[ ransomware, sqlinjection, education ]
Educational non-profit National Student Clearinghouse, is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
Louisiana Office of Motor Vehicles
June 15, 2023
Louisiana Office of Motor Vehicles warns that 6 millions of driver's licenses were exposed in a data breach after the Clop ransomware gang hacked their MOVEit Transfer security file transfer systems to steal stored data.
-
GreenShield Canada
June 15, 2023
GreenShield Canada, a non-profit benefits carrier that provides health and dental benefits, is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
-
PricewaterhouseCoopers (PWC)
June 22, 2023
PricewaterhouseCoopers (PWC) discloses that a small number of clients had some files impacted in a cyber incident involving the MOVEit vulnerability
-
Indiana University Health (IU Health)
June 22, 2023
•
[ leak, sqlinjection, healthcare ]
Indiana University Health (IU Health) posts a notice on its website announcing a data breach that occurred as a result of a third-party vendor's (TMG Health) use of the file transfer program MOVEit.
-
Beverly Hills Plastic Surgery (BHPS)
June 21, 2023
•
[ ransomware, malware, healthcare ]
The ALPHV/BlackCat ransomware gang claims responsibility for the attack to Beverly Hills Plastic Surgery (BHPS).
-
iOttie
June 20, 2023
Car mount and mobile accessory maker iOttie warns that its site was compromised for almost two months to steal online shoppers' credit cards and personal information.
-
BreachForums
June 19, 2023
•
[ leak, technology ]
The reincarnated BreachForums site just has its user database stolen and published.
-
U.S. Office of Personnel Management
June 17, 2023
The U.S. Office of Personnel Management confirms to have suffered a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Nuance
June 16, 2023
•
[ leak, sqlinjection, technology ]
Software firm Nuance joins the list of the victims of the data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
-
Milliman Solutions
June 16, 2023
Milliman Solutions files a notice of data breach after discovering that one of the company's vendors, Pension Benefit Information, experienced a data security incident involving the file sharing application MOVEit.
-
Honeywell International
June 16, 2023
Honeywell International posts a notice on its website describing a data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
-
Ernst & Young (EY)
June 15, 2023
Ernst & Young (EY) confirms to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Transport for London (TfL)
June 15, 2023
•
[ hack, sqlinjection, government ]
Transport for London (TfL) confirms to have been hit by a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Yamaha Music Canada
June 13, 2023
•
[ ransomware, malware, retail ]
Yamaha Music Canada suffers a ransomware attack by the Black Byte group.
-
Missouri's Office of Administration, Information Services and Technology Division (OA-ITSD)
June 13, 2023
Missouri's Office of Administration, Information Services and Technology Division (OA-ITSD) reveals to be investigating what may have been taken by hackers during a cyberattack exploiting the CVE-2023-34362 MOVEit vulnerability.
-
Bi-Bett Corporation
June 13, 2023
•
[ hack, phishing, healthcare ]
Bi-Bett Corporation files a notice of data breach after discovering that an unauthorized party was able to access an employee's email account containing sensitive patient information.
-
Various websites of the Federal Administration and enterprises affiliated with the Swiss Confederation
June 12, 2023
•
[ hack, ddos, government ]
A press release on the Swiss government portal warns of access problems on various Federal Administration websites, as well as its online services due to a DDos attack by the pro-Russia NoName057(16) collective.
