-
Blackstone Valley Community Health Care
December 12, 2023
On December 12, 2023, the Hunters International group claimed responsibility for an attack on Blackstone Valley Community Health Care in Rhode Island. But it wasnt until April 18, 2024 that BCVHC notified the 34,416 people affected. In December, months before patients were ever notified, the threat actors dumped 16.6 GB of files on their leak site that anyone could access. At last check, the data, some of which is patient data, is still available on the leak site.
-
-
Undisclosed T-Mobile vendor
June 19, 2024
T-Mobile denies it was breached or that source code was stolen after the threat actor IntelBroker claims to be selling stolen data from the telecommunications company. The data seems to have been stolen from a third-party vendor.
-
Truist Bank
June 13, 2024
•
[ hack, leak, finance ]
Truist Bank, a leading U.S. commercial bank, confirms this week that its systems were breached in an October 2023 cyberattack after a threat actor posted some of the company's data for sale on a hacking forum.
-
Teamviewer
June 27, 2024
TeamViewer, the company that makes widely used remote access tools for companies, confirms an ongoing cyberattack on its corporate network carried out by the Russian state-sponsored actor APT29
-
United Seating and Mobility d/b/a Numotion
June 10, 2024
•
[ ransomware, malware, manufacturing ]
United Seating and Mobility, a provider of wheelchair and mobility equipment that does business as Numotion, discloses that an unauthorized third party had access to its computer systems and used ransomware to encrypt files. 602,000 individuals are affected.
-
Neiman Marcus
June 24, 2024
•
[ hack, malware, retail ]
High-end department store Neiman Marcus discloses a data breach, shortly before the threat actor 'Sp1d3r' offered to sell information belonging to millions of the companys customers. The hack impacted 64,000 users and is likely part of the massive SnowFlake campaign.
-
Los Angeles Unified School District
June 6, 2024
•
[ leak, education ]
Los Angeles Unified School District (LAUSD) officials are investigating a threat actor's claims that they're selling stolen databases containing records belonging to millions of students and thousands of teachers. 24 million records are allegedly compromised.
-
The Post Millennial
May 2, 2024
Have I Been Pwned adds the information for 26,818,266 people whose data was leaked in a recent hack of The Post Millennial conservative news website.
-
Superior Air-Ground Ambulance Service
May 15, 2023
•
[ hack, healthcare ]
Superior Air-Ground Ambulance Service, an Illinois-based air-ground ambulance company notifies more than 858,000 individuals that their sensitive information was compromised in a hacking incident that happened about a year ago.
-
Ascension
May 8, 2024
•
[ ransomware, malware, healthcare ]
Ascension, one of the largest private healthcare systems in the United States, takes some of its systems offline to investigate what it describes as a "cyber security event" confirmed to be a Black Basta ransomware attack.
-
Coradix-Magnescan
May 7, 2024
•
[ hack, healthcare ]
Coradix-Magnescan, a French company that provides medical radiological imaging, warns patients it is currently dealing with a cyberattack that risks complicating their appointments.
-
Kosovo government websites
May 7, 2024
•
[ hack, ddos, government ]
Pro-Russia threat actors target Kosovo government websites, including the websites of the president and prime minister, with DDoS attacks. The attacks are a retaliation for Kosovos support of Ukraine with military equipment.
-
Undisclosed crypto investor
May 3, 2024
•
[ financial, hack, phishing ]
An individual loses around $71 million worth of bitcoin in what appears to be an address poisoning attack. A week later the author of the attack returns the stolen bounty.
-
Shook Lin & Bok
April 9, 2024
•
[ ransomware, malware ]
The law firm Shook Lin & Bok is hit by an Akira ransomware attack.
-
Dropbox
April 24, 2024
Cloud storage firm Dropbox says threat actors breached production systems for its Dropbox Sign eSignature platform and gained access to authentication tokens, MFA keys, hashed passwords, and customer information.
-
Panda Restaurant Group
March 10, 2024
•
[ leak ]
Panda Restaurant Group discloses a data breach after threat actors compromised its corporate systems and stole the personal information of an undisclosed number of associates.
-
Kansas City Scout Traffic Management System
April 25, 2024
•
[ hack, government ]
The Kansas City Scout System is taken down by a cyberattack.for 3 months
-
Financial Business and Consumer Solutions (FBCS)
February 14, 2024
•
[ hack, finance ]
Financial Business and Consumer Solutions (FBCS) warns initially 1,955,385 impacted individuals in the United States that the company suffered a data breach after discovering unauthorized access to specific systems in its network. One month later the company says over 3.2 million people have been impacted.
-
Los Angeles County Department of Health Services
February 19, 2024
•
[ hack, phishing, government ]
The Los Angeles County Department of Health Services discloses a data breach after thousands of patients' personal and health information was exposed in a phishing attack impacting over two dozen employees.
