Naftogaz
January 25, 2024
•[ hack, energy ]
Naftogaz, Ukraine's state-owned gas and oil company, is hit by a large-scale cyberattack.
BrightStar Care
January 24, 2024
•[ ransomware, malware, healthcare ]
The ALPHV/BlackCat ransomware gang claims responsibility for ransomware attack to BrightStar Care. The same day another group Sieged Sec claims to have breached the same organization.
EquiLend
January 23, 2024
•[ ransomware, malware, finance ]
New York-based global financial technology firm EquiLend says its operations have been disrupted after some systems were taken offline in a cyberattack. The LockBit ransomware gang claims responsibility for the attack.
Southern Water
January 23, 2024
•[ ransomware, malware ]
Southern Water confirms to have been hit with a Black Basta ransomware attack. The ransomware group claims to have stolen 750 Gb of files.
Grace Lutheran Foundation
January 22, 2024
•[ ransomware, malware, healthcare ]
Grace Lutheran Foundation, d/b/a Grace Lutheran Communities posts a notice about a data breach discovered on January 22, 2024. The same day the ALPHV/BlackCat ransomware gang claims responsibility for the attack.
Chula Book
January 22, 2024
•[ leak, retail ]
An individual known as Naraka lists a data dump for sale on breachforums.is, featuring one of Thailand's largest bookstores called Chula Book. The breach affects over 160,000 users.
Veolia North America
January 19, 2024
•[ ransomware, malware, government ]
Veolia North America, a subsidiary of transnational conglomerate Veolia, discloses a ransomware attack that impacts systems part of its Municipal Water division and disrupts its bill payment systems.
Jason's Deli
January 19, 2024
•[ hack, brute-force, retail ]
Jason's Deli warns of a data breach in notifications sent to customers of its online platform stating that their personal data was exposed in credential stuffing attacks.
Community Memorial Healthcare
January 18, 2024
•[ hack, healthcare ]
Community Memorial Healthcare (CMH) files a notice of data breach after discovering that an unauthorized party had accessed the companys IT network.
US Health Department
January 18, 2024
•[ financial, government ]
Threat actors stole about $7.5 million from the US Health Department, after accessing an HHS system that processes civilian grant payments.
Foxsemicon Integrated Technology
January 17, 2024
•[ ransomware, leak, hack ]
Foxsemicon Integrated Technology, a subsidiary of Taiwanese electronics giant Foxconn, appears to have been targeted by the notorious LockBit ransomware group, which claims to have exfiltrated 5 Tb of data.
Several Government Websites in Switzerland
January 17, 2024
•[ hack, ddos, government ]
A DDoS attack claimed by the pro-Russian group NoName057(16), temporarily disrupts access to a number of government websites, following Ukrainian President Volodymyr Zelenskys visit to Davos.
Multiple organizations in Bahrain
January 15, 2024
•[ hack, technology ]
The Anonymous Collective takes down several organizations in Bahrain, including prominent media outlets like Akhbar al-Khaleej, Al-Ayam, Gulf Daily News, and Al-Bilad, in retaliation for the countrys support for the US and UK strikes on Yemen.
GALA Hispanic Theatre
January 11, 2024
The GALA Hispanic Theatre, a popular theater in Washington, D.C. has more than $250,000 in stolen funds returned after hackers managed to siphon the money out of their bank account.
Lush
January 11, 2024
•[ ransomware, malware, retail ]
Lush, the privately-owned British cosmetics retailer is currently responding to a cyber security incident. Few week later the Akira ransomware gang claims responsibility for the attack.
Water for People
January 11, 2024
•[ ransomware, malware, healthcare ]
The ransomware-as-a-service gang Medusa lists Water for People on its darknet site, threatening to publish stolen information unless the nonprofit pays a $300,000 extortion fee.
CoinGecko’s X (formerly Twitter) account
January 10, 2024
•[ finance, phishing, hack ]
Cryptocurrency data aggregator CoinGeckos X (formerly Twitter) account is briefly compromised to promote a crypto scam.
United States Department of Transportation (DOT)
January 8, 2024
•[ hack, government ]
The threat actor known as IntelBroker claims responsibility for a data breach targeting the United States Department of Transportation (DOT), containing. 5.8 million flight logs from the year 2015.
Official X Account of Netgear
January 8, 2024
•[ hack, malware, manufacturing ]
The official NetgearTwitter/X accounts (together with over 160,000 followers) are the latest hijacked to push scams designed to infect potential victims with cryptocurrency wallet drainer malware.
Roku
March 15, 2024
•[ hack, brute-force, technology ]
Roku warns that 576,000 accounts were hacked in new credential stuffing attacks after disclosing another incident that compromised 15,000 accounts in early March.