Full List

Search

Recent Breaches

• TJX Companies July 17, 2023 • [ ransomware, malware, retail ] TJX Companies is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Norwegian Government July 24, 2023 • [ hack, malware, government ] The Norwegian government warns that its ICT platform used by 12 ministries suffered a cyberattack after hackers exploited a zero-day vulnerability in third-party software.
• Johns Hopkins All Children's Hospital July 24, 2023 • [ hack, sqlinjection, healthcare ] Johns Hopkins All Children's Hospital is targeted a cyber attack exploiting the MOVEit vulnerability.
• Tempur Sealy July 23, 2023 • [ ransomware, malware, manufacturing ] Mattress giant Tempur Sealy is hit with a ALPHV/BlackCat ransomware attack forcing system shutdown.
• Alphapo July 23, 2023 Blockchain analysts blame the North Korean Lazarus hacking group for an attack on payment processing platform Alphapo where the attackers stole almost $60 million in crypto.
• Northwestern Mutual July 22, 2023 Sovos Compliance files a notice of data breach on behalf of Northwestern Mutual after discovering that the secure file transfer program used by Sovos contained a vulnerability resulting in an unauthorized party being able to access files on the company's MOVEit server.
• See Tickets July 21, 2023 • [ financial, malware, retail ] Ticketing services agency See Tickets notifies more than 300,000 individuals that their payment card data was stolen in a new web skimmer attack.
• Olympic College July 21, 2023 • [ leak, sqlinjection, education ] The Olympic College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• MasTec July 21, 2023 MasTec files a notice of data breach after discovering a MOVEit-related data breach at Delta Dental affected employees and dependents enrolled in the company's Care Opt Plus Group Benefits Plan For Hourly & Salaried Employees.
• Bates Technical College July 21, 2023 • [ hack, sqlinjection, education ] The Bates Technical College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
• Rotomail July 20, 2023 • [ ransomware, malware, manufacturing ] The Cactus ransomware gang claims responsibility for an attack to Rotomail.
• Ventiv Technology July 18, 2023 • [ ransomware, malware, technology ] Software firm Ventiv Technology is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• University of Temple July 18, 2023 • [ ransomware, malware, education ] The University of Temple is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Sound Community Bank July 18, 2023 • [ hack, misconfiguration, finance ] Sound Community Bank files a notice of potential data breach after discovering that one of the company's vendors used MOVEit to transfer Sound Community Bank customer information.
• ITT July 18, 2023 • [ ransomware, malware, manufacturing ] U.S. manufacturer ITT is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Girardini Group July 18, 2023 • [ ransomware, malware, manufacturing ] The NoEscape ransomware group hits Girardini Group, a manufacturer of stamps.
• Commission for Communications Regulation for Ireland July 18, 2023 Commission for Communications Regulation, or ComReg, the general communications regulator for Ireland, is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
• Michigan State University July 24, 2023 • [ leak, misconfiguration, education ] Michigan State University (MSU) posts a notice on its website describing a third-party data breach that occurred at two vendors used by the University: the Teachers Insurance and Annuity Association (TIAA) and the National Student Clearinghouse ("NSC") both data breaches were related to the file transfer program MOVEit, resulting in the potential exposure of student and retiree data.
• Egyptian Ministry of Health and Population July 23, 2023 • [ leak, government ] An 'established' threat actor claims to be in possession of two million data records stolen from the Egyptian Ministry of Health and Population.
• CareTree July 21, 2023 • [ hack, technology ] CareTree files a notice of data breach after discovering that an unauthorized actor was able to access the CareTree platform