-
U.S. Department of Health and Human Services (HHS)
June 28, 2023
The U.S. Department of Health and Human Services (HHS) is listed by the Cl0p gang among the victims of a data breach occurred exploiting the MOVEit vulnerability.
-
Nebraska Supreme Court
June 28, 2023
•
[ hack, government ]
Hacktivists from the SiegedSec collective dump some data from the Nebraska Supreme Court.
-
Coachella Valley Collection Service
June 28, 2023
•
[ ransomware, malware, finance ]
The ALPHV AKA BlackCat ransomware gang claims to have acquired 575 GB of data from Coachella Valley Collection Service, a service that provides debt collection services.
-
Siemens Energy
June 27, 2023
•
[ ransomware, malware, manufacturing ]
Siemens Energy confirms that data was stolen during the recent Clop ransomware data-theft attacks using the zero-day vulnerability in the MOVEit Transfer platform.
-
Kansas Joint & Spine Specialists
June 27, 2023
•
[ ransomware, malware, healthcare ]
The ALPHV AKA BlackCat ransomware gang claims to have acquired 467 GB of data from Kansas Joint & Spine Specialists.
-
JumpCloud
June 27, 2023
•
[ espionage, technology ]
JumpCloud, a US-based enterprise software firm notifies several customers of an "ongoing incident" and as a caution, the company invalidates existing admin API keys to protect its customer organizations. Few days later, the breach is traced back to North Korean state-sponsored actors from Lazarus Group.
-
Italian Ministry of Economy and Finance
June 27, 2023
A subpage of the website of the Italian Ministry of Economy and Finance (the welfare fund), is defaced to advertise a gambling site.
-
Datasite
June 27, 2023
•
[ leak, sqlinjection, technology ]
Datasite files a notice of data breach following a third-party data breach occurred exploiting the MOVEit CVE-2023-34362 Vulnerability.
-
Chuck E. Cheese
June 27, 2023
•
[ ransomware, sqlinjection, retail ]
Chuck E. Cheese is listed among the victims of the Clop ransomware gang campaign exploiting the MOVEit CVE-2023-34362 Vulnerability.
-
Fassi Gru
June 26, 2023
•
[ ransomware, leak, malware ]
The Rhysida ransomware gang adds Fassi Gru to their leak site and claims to be in possession of 490 Gb of data.
-
Maryland's Department of Health and Human Services
June 30, 2023
•
[ ransomware, malware, government ]
The Maryland's Department of Health and Human Services is listed among the victims of the Cl0p ransomware gang exploiting the CVE-2023-34362 Vulnerability.
-
EP Global Production Solutions (Entertainment Partners)
June 30, 2023
EP Global Production Solutions (Entertainment Partners) files a notice of data breach after discovering that an unauthorized party was able to access and acquire files from the company's computer network.
-
Unknown Organization
June 30, 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of ongoing distributed denial-of-service (DDoS) attacks after U.S. organizations across multiple industry sectors are hit.
-
K&L Gates
June 29, 2023
The law firms K&L Gates is listed by the Cl0p gang among the victims of a data breach occurred exploiting the MOVEit vulnerability.
-
University of Utah
June 29, 2023
•
[ hack, sqlinjection, healthcare ]
The University of Utah confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
-
Undisclosed organization(s) in the UAE
June 29, 2023
•
[ hack, ddos, government ]
The head of UAE Cyber Security reveals that, earlier in 2023, Israel aided the United Arab Emirates (UAE) in helping repel a major distributed denial-of-service (DDoS) attack.
-
Delaware Health Net
June 29, 2023
•
[ leak, healthcare ]
The Henrietta Johnson Medical Center postes notice that some patient data was involved in a breach at Delaware Health Network (DHN), a healthcare-controlled network provider and electronic health records management provider that provides services to Henrietta Johnson Medical Center (HJMC) and other entities.
-
City National Bank
June 29, 2023
•
[ ransomware, leak, finance ]
City National Bank in Miami, Florida is added to the Clop ransomware leak site of the victims of the MOVEit breach.
-
Bristol Myers Squibb
June 29, 2023
•
[ leak, sqlinjection, manufacturing ]
Bristol Myers Squibb files a notice regarding a data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
-
BHI Energy
June 29, 2023
•
[ ransomware, malware, energy ]
US energy services firm BHI Energy discloses to have been hit by an Akira ransomware attack.