-
Community Memorial Healthcare
January 18, 2024
•
[ hack, healthcare ]
Community Memorial Healthcare (CMH) files a notice of data breach after discovering that an unauthorized party had accessed the companys IT network.
-
US Health Department
January 18, 2024
•
[ financial, government ]
Threat actors stole about $7.5 million from the US Health Department, after accessing an HHS system that processes civilian grant payments.
-
Foxsemicon Integrated Technology
January 17, 2024
•
[ ransomware, leak, hack ]
Foxsemicon Integrated Technology, a subsidiary of Taiwanese electronics giant Foxconn, appears to have been targeted by the notorious LockBit ransomware group, which claims to have exfiltrated 5 Tb of data.
-
Several Government Websites in Switzerland
January 17, 2024
•
[ hack, ddos, government ]
A DDoS attack claimed by the pro-Russian group NoName057(16), temporarily disrupts access to a number of government websites, following Ukrainian President Volodymyr Zelenskys visit to Davos.
-
Multiple organizations in Bahrain
January 15, 2024
•
[ hack, technology ]
The Anonymous Collective takes down several organizations in Bahrain, including prominent media outlets like Akhbar al-Khaleej, Al-Ayam, Gulf Daily News, and Al-Bilad, in retaliation for the countrys support for the US and UK strikes on Yemen.
-
GALA Hispanic Theatre
January 11, 2024
The GALA Hispanic Theatre, a popular theater in Washington, D.C. has more than $250,000 in stolen funds returned after hackers managed to siphon the money out of their bank account.
-
Lush
January 11, 2024
•
[ ransomware, malware, retail ]
Lush, the privately-owned British cosmetics retailer is currently responding to a cyber security incident. Few week later the Akira ransomware gang claims responsibility for the attack.
-
Water for People
January 11, 2024
•
[ ransomware, malware, healthcare ]
The ransomware-as-a-service gang Medusa lists Water for People on its darknet site, threatening to publish stolen information unless the nonprofit pays a $300,000 extortion fee.
-
CoinGecko’s X (formerly Twitter) account
January 10, 2024
•
[ finance, phishing, hack ]
Cryptocurrency data aggregator CoinGeckos X (formerly Twitter) account is briefly compromised to promote a crypto scam.
-
United States Department of Transportation (DOT)
January 8, 2024
•
[ hack, government ]
The threat actor known as IntelBroker claims responsibility for a data breach targeting the United States Department of Transportation (DOT), containing. 5.8 million flight logs from the year 2015.
-
Official X Account of Netgear
January 8, 2024
•
[ hack, malware, manufacturing ]
The official NetgearTwitter/X accounts (together with over 160,000 followers) are the latest hijacked to push scams designed to infect potential victims with cryptocurrency wallet drainer malware.
-
Roku
March 15, 2024
•
[ hack, brute-force, technology ]
Roku warns that 576,000 accounts were hacked in new credential stuffing attacks after disclosing another incident that compromised 15,000 accounts in early March.
-
International Monetary Fund (IMF)
March 15, 2024
•
[ hack, government ]
The International Monetary Fund (IMF) discloses that a cyberattack in February led to the compromise of 11 email accounts.
-
Scranton School District
March 15, 2024
•
[ ransomware, malware, education ]
The Scranton School District is hit with a ransomware attack.
-
Encina Wastewater Authority (EWA)
March 15, 2024
•
[ ransomware, malware, government ]
Encina Wastewater Authority (EWA) is hit by the BlackByte ransomware group.
-
On Q Financial
March 14, 2024
•
[ ransomware, malware, finance ]
On Q Financial discloses a breach due to the ScreenConnect CVE-2024-1709 and CVE-2024-1708 vulnerabilities. The BianLian ransomware group claims responsibility for the attack.
-
Taxpayers in the U.S.
March 11, 2024
As the tax deadline approaches, the U.S. Internal Revenue Service (IRS) warns taxpayers about impersonation scams.
-
French government agencies
March 11, 2024
•
[ hack, government ]
A number of French government agencies are hit by intense cyberattacks
-
Acuity
March 9, 2024
The threat actor known as IntelBroker claims responsibility for a data breach targeting Acuity, a Federal contractor. The breach resulted in the theft of sensitive data and documents from two prominent U.S. government entities: U.S. Immigration and Customs Enforcement (ICE) and U.S. Citizenship and Immigration Services (USCIS). One month later Acuity confirms the breach.
-
Lithuania
March 8, 2024
•
[ espionage, government ]
A report published by Lithuanian security services warne that China has escalated its espionage operations against Lithuania.