Full List

Search

Recent Breaches

• CGI Federal January 17, 2024 • [ hack, misconfiguration, government ] The Government Accountability Office warns of a breach resulting in the compromise of data associated with thousands of current and former employees. The attack was carried out exploiting the CVE-2023-22515 Atlassian vulnerability from one of its contractors, CGI Federal.
• Schneider Electric January 17, 2024 • [ ransomware, malware, manufacturing ] Schneider Electric suffers a Cactus ransomware attack in the company's Sustainability Business division, leading to the theft of corporate data.
• Socket January 16, 2024 • [ financial, finance ] Blockchain protocol Socket pauses some operations after a threat actor steals $3.3 million.
• National Bank of Angola January 16, 2024 • [ hack, education ] The National Bank of Angola discloses to have suffered a cyber attack.
• Government Employees Insurance Company (GEICO) January 15, 2024 • [ leak, finance ] A threat actor identified as wangfei19860902055 advertises the sale of a database related to Government Employees Insurance Company (GEICO) on a popular dark web forum.
• Shinwa Co January 15, 2024 • [ ransomware, leak, malware ] Shinwa Co is added to the LockBit 3.0 ransomware leak site.
• Maisons de l’Avenir January 15, 2024 • [ ransomware, leak, malware ] Maisons de lAvenir is added to the LockBit 3.0 ransomware leak site.
• Calvià City Council in Majorca January 13, 2024 • [ ransomware, malware, government ] The Calvi City Council in Majorca announces to be targeted by a ransomware attack, which impacted municipal services. The attackers demand a 10M (approximately $11M) ransom.
• Alpha Supported Living Services January 12, 2024 • [ social, phishing, healthcare ] Alpha Supported Living Services (Alpha) files a notice of data breach after discovering that the organization was the recent victim of a phishing attack.
• Medjet January 9, 2024 • [ hack, healthcare ] Medjet and Medjet Assist (Medjet) file a notice of data breach after discovering that information that had been entrusted to the company was subject to unauthorized access.
• M9com January 9, 2024 A pro-Ukraine hacktivist group named Blackjack, allegedly affiliated to the SBU (the Security Service of Ukraine) claims a cyberattack against Russian provider of internet services M9com, deleting around 20 terabytes of data as a direct response to the attack against Kyivstar mobile operator.
• X account for the U.S. Securities and Exchange Commission (SEC) January 9, 2024 • [ hack, social, government ] The X account for the U.S. Securities and Exchange Commission is hacked to issue a fake announcement on the approval of Bitcoin ETFs on security exchanges.
• Government of Palau March 15, 2024 • [ ransomware, malware, government ] The government of Palau is hit with an alleged ransomware attack by the LockBit and DragonForce ransomware gangs.
• Fujitsu March 15, 2024 • [ hack, malware, technology ] Japanese tech giant Fujitsu discloses that several of its systems were infected by malware and warns that the hackers stole customer data.
• Alabama State Government websites March 13, 2024 • [ hack, ddos, government ] The hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupts Alabama state government.
• Rhysida March 13, 2024 • [ ransomware, malware, manufacturing ] A cyberattack dirsrupts operations at MarineMax, one of the worlds biggest boat sellers. The Rhysida ransomware group claims responsibility for the attack.
• Meduza March 11, 2024 The Russian independent media organization Meduza says that it has been targeted by an unprecedented cyber campaign ahead of the upcoming presidential election.
• Roku March 8, 2024 • [ hack, brute-force, technology ] Roku says it canceled unauthorized subscriptions and refunded more than 15,000 accounts after discovering what they called suspicious activity.
• City of Hamilton March 6, 2024 • [ ransomware, malware, government ] The city of Hamilton is still recovering from a ransomware attack that has affected nearly every facet of government functions.
• WOOFi March 5, 2024 Decentralized finance platform WOOFi experiences an $8.75 million exploit when an unidentified hacker used flash loans to manipulate the algorithm.