Full List

Search

Recent Breaches

• Commission for Communications Regulation for Ireland July 18, 2023 Commission for Communications Regulation, or ComReg, the general communications regulator for Ireland, is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Michigan State University July 24, 2023 • [ leak, misconfiguration, education ] Michigan State University (MSU) posts a notice on its website describing a third-party data breach that occurred at two vendors used by the University: the Teachers Insurance and Annuity Association (TIAA) and the National Student Clearinghouse ("NSC") both data breaches were related to the file transfer program MOVEit, resulting in the potential exposure of student and retiree data.
• Egyptian Ministry of Health and Population July 23, 2023 • [ leak, government ] An 'established' threat actor claims to be in possession of two million data records stolen from the Egyptian Ministry of Health and Population.
• CareTree July 21, 2023 • [ hack, technology ] CareTree files a notice of data breach after discovering that an unauthorized actor was able to access the CareTree platform
• Yamaha Music Canada July 21, 2023 • [ ransomware, malware, retail ] Yamaha Music Canada suffers a ransomware attack by the Akira group.
• University at Buffalo July 21, 2023 • [ leak, sqlinjection, education ] The University at Buffalo confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• St. Petersburg College July 21, 2023 • [ leak, sqlinjection, education ] The St. Petersburg College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• Regione Umbria July 21, 2023 • [ hack, ddos, government ] The institutional webistes of the Italian region of Umbra are hit with a DDoS attack.
• American United Life Insurance July 21, 2023 American United Life Insurance Company files a notice of data breach after discovering that confidential consumer information in the company's care was subject to unauthorized access.
• Willis Towers Watson July 20, 2023 • [ leak, sqlinjection, finance ] Pension Benefits Information (PBI) files a notice of data breach on behalf of Willis Towers Watson (WTW) after discovering that experienced a MOVEit-related breach at PBI affected confidential information that had been provided to WTW.
• Teachers' Retirement System of the City of New York July 20, 2023 The Teachers' Retirement System of the City of New York posts notice of a PBI data security incident on its website.
• Roblox July 20, 2023 • [ leak, technology ] The major gaming platform Roblox has suffered a major data breach, leading to the release of personal information including addresses from those who attended the Roblox Developer Conference between 2017-2020.
• Confartigianatofc July 20, 2023 The Cactus ransomware gang claims responsibility for an attack to confartigianatofc.it
• Associated Press July 20, 2023 The Associated Press warns of a data breach impacting AP Stylebook customers where the attackers used the stolen data to conduct targeted phishing attacks.
• Artemide July 20, 2023 • [ ransomware, malware, manufacturing ] The Cactus ransomware gang claims responsibility for an attack to Artemide.
• Wake Forest University July 18, 2023 • [ ransomware, malware, education ] The Wake Forest University is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• University of Alaska July 18, 2023 • [ ransomware, malware, education ] The University of Alaska is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Ortivus July 18, 2023 A cyberattack impacting Swedish software company Ortivus leaves at least two British ambulance services without access to electronic patient records.
• Oak Valley Hospital District July 18, 2023 Oak Valley Hospital District files a notice of data breach with the Attorney General of California after experiencing a "cybersecurity incident."
• Loyola University July 18, 2023 • [ ransomware, malware, education ] The Loyola University is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.