Full List

Search

Recent Breaches

• Fortra LLC June 19, 2023 Approximately 16,000 members of Blue Cross Vermont health plans have their protected health information compromised in a January 2023 cyberattack carried out exploiting the CVE-2023-0669 zero-day vulnerability in Fortra's GoAnywhere MFT file transfer solution and accessed and stole sensitive data such as names, birth dates, addresses, medical information, and insurance information. Around 5% of the affected individuals also had their financial information stolen.
• Undisclosed Property Manager June 18, 2023 • [ hack, malware, healthcare ] Australia's largest private health insurer Medibank Private discloses that a file containing names and contact details of staff members had been compromised after its property manager faced a cybersecurity breach due to the exploitation of the MOVEit CVE-2023-34362 vulnerability.
• Central Bank of Malta June 18, 2023 • [ hack, ddos, finance ] The collective Turk Hack Team takes down the website of the Central Bank of Malta
• Parker Wellbore June 16, 2023 • [ hack, energy ] Parker Wellbore files a notice of data breach after learning that hackers gained access to confidential information that had been entrusted to the company.
• East Western Bank June 16, 2023 • [ leak, malware, finance ] East Western Bank joins the list of the victims of the data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
• U.S Department of Energy (DOE) June 15, 2023 • [ ransomware, government ] The U.S Department of Energy confirms that two DOE entities suffered a breach after the Clop ransomware gang exploited the CVE-2023-34362 vulnerability, affecting the MOVEit file transfer tool.
• Service members of the U.S. Military June 15, 2023 • [ espionage, malware, government ] Service members across the military report receiving smartwatches unsolicited in the mail. The smartwatches, when used, auto-connect to Wi-Fi and begin connecting to cell phones unprompted, gaining access to a myriad of user data, and could also connect malware.
• Oregon Office of Motor Vehicles June 15, 2023 • [ ransomware, malware, government ] Oregon Office of Motor Vehicles (Oregon Department of Transportation) warns that 3.5 millions of driver's licenses were exposed in a data breach after the Clop ransomware gang hacked their MOVEit Transfer security file transfer systems to steal stored data.
• Datasite June 15, 2023 • [ ransomware, leak, malware ] Financial software provider Datasite is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
• Activision Blizzard June 25, 2023 • [ hack, ddos, technology ] A distributed denial-of-service (DDoS) attack targets the servers of Diablo's developer, Activision Blizzard.
• New York City Department of Education (NYC DOE) June 24, 2023 The New York City Department of Education (NYC DOE) says hackers stole documents containing the sensitive personal information of up to 45,000 students from its MOVEit Transfer server.
• Undisclosed airport June 23, 2023 • [ leak ] The database of an undisclosed Italian airport with 7.8 million records is on sale in the dark web.
• European healthcare institution June 22, 2023 Researchers from Check Point disclose the details of a cyber incident involving a hospital that was inadvertently affected by a self-propagating malware infection introduced to the healthcare institution's network via a USB drive.
• American Civil Liberties Union Foundation June 22, 2023 The American Civil Liberties Union Foundation confirms that the Clop Ransomware gang, exploiting the vulnerability in MOVEit Transfer accessed the information of about 575 people.
• UofL Health June 21, 2023 • [ leak, healthcare ] UofL Health confirms to have been affected by the data breach on popular file transfer tool MOVEit
• University of Missouri June 21, 2023 The University of Missouri confirms to have suffered a cyber attack exploiting the MOVEit CVE-2023-34362 vulnerability.
• Forevermoto June 21, 2023 • [ leak, retail ] Forevermoto, an Italian e-commerce site dedicated to motorbikes has its database leaked online.
• AT&T Corporation June 21, 2023 The same threat actor is also offering email account access to AT&T Corporation.
• Stephen F. Austin State University June 20, 2023 Stephen F. Austin State University is hit with a cyberattack.
• European Investment Bank (EIB) June 19, 2023 • [ hack, ddos, finance ] The pro-Russian Killnet hacktivist group claims to have taken down the network infrastructure of the European Investment Bank - EIB.