Full List

Search

Recent Breaches

• Northwestern Mutual July 22, 2023 Sovos Compliance files a notice of data breach on behalf of Northwestern Mutual after discovering that the secure file transfer program used by Sovos contained a vulnerability resulting in an unauthorized party being able to access files on the company's MOVEit server.
• See Tickets July 21, 2023 • [ financial, malware, retail ] Ticketing services agency See Tickets notifies more than 300,000 individuals that their payment card data was stolen in a new web skimmer attack.
• Olympic College July 21, 2023 • [ leak, sqlinjection, education ] The Olympic College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• MasTec July 21, 2023 MasTec files a notice of data breach after discovering a MOVEit-related data breach at Delta Dental affected employees and dependents enrolled in the company's Care Opt Plus Group Benefits Plan For Hourly & Salaried Employees.
• Bates Technical College July 21, 2023 • [ hack, sqlinjection, education ] The Bates Technical College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• Rotomail July 20, 2023 • [ ransomware, malware, manufacturing ] The Cactus ransomware gang claims responsibility for an attack to Rotomail.
• Ventiv Technology July 18, 2023 • [ ransomware, malware, technology ] Software firm Ventiv Technology is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• University of Temple July 18, 2023 • [ ransomware, malware, education ] The University of Temple is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Sound Community Bank July 18, 2023 • [ hack, misconfiguration, finance ] Sound Community Bank files a notice of potential data breach after discovering that one of the company's vendors used MOVEit to transfer Sound Community Bank customer information.
• ITT July 18, 2023 • [ ransomware, malware, manufacturing ] U.S. manufacturer ITT is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Girardini Group July 18, 2023 • [ ransomware, malware, manufacturing ] The NoEscape ransomware group hits Girardini Group, a manufacturer of stamps.
• Commission for Communications Regulation for Ireland July 18, 2023 Commission for Communications Regulation, or ComReg, the general communications regulator for Ireland, is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Michigan State University July 24, 2023 • [ leak, misconfiguration, education ] Michigan State University (MSU) posts a notice on its website describing a third-party data breach that occurred at two vendors used by the University: the Teachers Insurance and Annuity Association (TIAA) and the National Student Clearinghouse ("NSC") both data breaches were related to the file transfer program MOVEit, resulting in the potential exposure of student and retiree data.
• Egyptian Ministry of Health and Population July 23, 2023 • [ leak, government ] An 'established' threat actor claims to be in possession of two million data records stolen from the Egyptian Ministry of Health and Population.
• CareTree July 21, 2023 • [ hack, technology ] CareTree files a notice of data breach after discovering that an unauthorized actor was able to access the CareTree platform
• Yamaha Music Canada July 21, 2023 • [ ransomware, malware, retail ] Yamaha Music Canada suffers a ransomware attack by the Akira group.
• University at Buffalo July 21, 2023 • [ leak, sqlinjection, education ] The University at Buffalo confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• St. Petersburg College July 21, 2023 • [ leak, sqlinjection, education ] The St. Petersburg College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• Regione Umbria July 21, 2023 • [ hack, ddos, government ] The institutional webistes of the Italian region of Umbra are hit with a DDoS attack.
• American United Life Insurance July 21, 2023 American United Life Insurance Company files a notice of data breach after discovering that confidential consumer information in the company's care was subject to unauthorized access.