Full List

Search

Recent Breaches

• Cencora February 27, 2024 • [ hack, manufacturing ] Pharmaceutical giant Cencora says they suffered a cyberattack where threat actors stole data from corporate IT systems.
• Los Angeles Airport February 24, 2024 • [ hack, government ] IntelBroker claims to have breached the database of the Los Angeles Airport, exploiting a vulnerability in the CRM system, and resulting in the compromise of 2.5 million records of plane owners.
• Staff member of the South Korean President Yoon Suk Yeol February 14, 2024 South Korean President Yoon Suk Yeols office discloses that presumed North Korean threat actors breached the personal emails of one of his staff members ahead of Yoons trip to Europe in November.
• APT28, a.k.a. Fancy Bear and Sednit February 14, 2024 The FBI takes down a botnet of small office/home office (SOHO) Ubiquiti routers used by Russia's Main Intelligence Directorate of the General Staff (GRU) to proxy malicious traffic and to target the United States and its allies in spearphishing and credential theft attacks.
• Pennsylvania’s court system February 4, 2024 • [ hack, ddos, government ] Pennsylvanias court system is hit with a distributed denial-of-service (DDoS) attack and experiences disruptions.
• Municipality of Germantown February 2, 2024 • [ ransomware, malware, government ] Tennessee's Germantown announces a ransomware attack.
• Multiple government agencies in the Philippines February 2, 2024 • [ espionage, government ] Government agencies in the Philippines announce they had repelled a cyberattack from threat actors suspected to be based in China.
• Almerys January 31, 2024 • [ hack, healthcare ] French healthcare services firm Almerys also suffers a cyberattack that exposed the data of policyholders and healthcare professionals in the country. The combination of the two breaches compromises the information of 33 million individuals.
• Encore Bank January 31, 2024 • [ hack, phishing, finance ] Encore Bank files a notice of data breach after discovering that an unauthorized party was able to gain access to an employees email account.
• Lurie Children’s Hospital January 31, 2024 • [ ransomware, malware, healthcare ] Lurie Childrens Hospital suffers a network outage, later confirmed to be a ransomware attack by the Rhysida group demanding a $3.4M ransom.
• Multiple organizations in Japan January 31, 2024 Researchers from Itochu discover an updated version of a backdoor called LODEINFO, distributed via spear-phishing attacks, and used against targets in Japan from the Chinese threat actor APT10.
• Regione Basilicata January 29, 2024 • [ ransomware, malware, government ] The local region of Basilicata in Italy suffers a ransomware attack.
• Des Moines Orthopaedic Surgeons January 24, 2024 • [ hack, healthcare ] Des Moines Orthopaedic Surgeons (DMOS) files a notice of data breach after discovering that an unauthorized actor was able to access the companys computer network.
• Beaumont Independent School District January 23, 2024 • [ ransomware, malware, education ] The Beaumont ISD phone system is back online following a ransomware attack.
• Lev Cinemas January 23, 2024 Turkish hacktivists from MeshSec project political messages about the war in Gaza onto digital signage in an Israeli movie theater.
• Russian Center for Space Hydrometeorology, aka "Planeta" (планета) January 23, 2024 • [ hack, government ] The Main Intelligence Directorate of Ukraine's Ministry of Defense claims that pro-Ukrainian hacktivists breached the Russian Center for Space Hydrometeorology, aka "Planeta" (), and wiped 2 petabytes of data.
• Unknown Healthcare organization in Thailand January 22, 2024 • [ leak, misconfiguration, healthcare ] A threat actor named Soni posts a leaked database related to healthcare. The data breach consists of 25.5k records of user information including ID, user URL, encrypted passwords (phpass), user emails, login details, account status, display names, registration dates, and user activation keys.
• Unknown Job Seeking Platform in Thailand January 22, 2024 • [ leak, technology ] A threat actor named Milw0rm leaks 61,000 rows of records related to Thai job seekers and includes an extensive range of personal information.
• Stock trading platform in Thailand January 22, 2024 • [ leak, finance ] A threat actor named Ghostr leaks about 186GB of data with 5.3 million records from a stock trading platform.
• Department of Older Persons in Thailand (DOP.go.th) January 22, 2024 The personal identifiable information (PII) primarily of elderly population in Thailand is leaked in a forum, with 690MB in size, containing 19,718,687 rows of data.