-
Valley Mountain Regional Center
August 1, 2023
•
[ leak, healthcare ]
Valley Mountain Regional Center discloses a breach.
-
Mitre Corporation
January 31, 2024
The MITRE Corporation says that a state-backed threat actors breached its systems (MITRE's Networked Experimentation, Research, and Virtualization Environment - NERVE) in January 2024 by chaining the two Ivanti VPN zero-days CVE-2023-46805 and CVE-2024-21887.
-
Muleshoe water facility
January 16, 2024
CyberArmyofRussia_Reborn, a group with ties to the Russian government is suspected of carrying out a cyberattack in the Muleshoe water facility that caused a tank at a Texas water facility to overflow.
-
-
Blackstone Valley Community Health Care
December 12, 2023
On December 12, 2023, the Hunters International group claimed responsibility for an attack on Blackstone Valley Community Health Care in Rhode Island. But it wasnt until April 18, 2024 that BCVHC notified the 34,416 people affected. In December, months before patients were ever notified, the threat actors dumped 16.6 GB of files on their leak site that anyone could access. At last check, the data, some of which is patient data, is still available on the leak site.
-
-
Undisclosed T-Mobile vendor
June 19, 2024
T-Mobile denies it was breached or that source code was stolen after the threat actor IntelBroker claims to be selling stolen data from the telecommunications company. The data seems to have been stolen from a third-party vendor.
-
Truist Bank
June 13, 2024
•
[ hack, leak, finance ]
Truist Bank, a leading U.S. commercial bank, confirms this week that its systems were breached in an October 2023 cyberattack after a threat actor posted some of the company's data for sale on a hacking forum.
-
Teamviewer
June 27, 2024
TeamViewer, the company that makes widely used remote access tools for companies, confirms an ongoing cyberattack on its corporate network carried out by the Russian state-sponsored actor APT29
-
United Seating and Mobility d/b/a Numotion
June 10, 2024
•
[ ransomware, malware, manufacturing ]
United Seating and Mobility, a provider of wheelchair and mobility equipment that does business as Numotion, discloses that an unauthorized third party had access to its computer systems and used ransomware to encrypt files. 602,000 individuals are affected.
-
Neiman Marcus
June 24, 2024
•
[ hack, malware, retail ]
High-end department store Neiman Marcus discloses a data breach, shortly before the threat actor 'Sp1d3r' offered to sell information belonging to millions of the companys customers. The hack impacted 64,000 users and is likely part of the massive SnowFlake campaign.
-
Los Angeles Unified School District
June 6, 2024
•
[ leak, education ]
Los Angeles Unified School District (LAUSD) officials are investigating a threat actor's claims that they're selling stolen databases containing records belonging to millions of students and thousands of teachers. 24 million records are allegedly compromised.
-
The Post Millennial
May 2, 2024
Have I Been Pwned adds the information for 26,818,266 people whose data was leaked in a recent hack of The Post Millennial conservative news website.
-
Superior Air-Ground Ambulance Service
May 15, 2023
•
[ hack, healthcare ]
Superior Air-Ground Ambulance Service, an Illinois-based air-ground ambulance company notifies more than 858,000 individuals that their sensitive information was compromised in a hacking incident that happened about a year ago.
-
Ascension
May 8, 2024
•
[ ransomware, malware, healthcare ]
Ascension, one of the largest private healthcare systems in the United States, takes some of its systems offline to investigate what it describes as a "cyber security event" confirmed to be a Black Basta ransomware attack.
-
Coradix-Magnescan
May 7, 2024
•
[ hack, healthcare ]
Coradix-Magnescan, a French company that provides medical radiological imaging, warns patients it is currently dealing with a cyberattack that risks complicating their appointments.
-
Kosovo government websites
May 7, 2024
•
[ hack, ddos, government ]
Pro-Russia threat actors target Kosovo government websites, including the websites of the president and prime minister, with DDoS attacks. The attacks are a retaliation for Kosovos support of Ukraine with military equipment.
-
Undisclosed crypto investor
May 3, 2024
•
[ financial, hack, phishing ]
An individual loses around $71 million worth of bitcoin in what appears to be an address poisoning attack. A week later the author of the attack returns the stolen bounty.
-
Shook Lin & Bok
April 9, 2024
•
[ ransomware, malware ]
The law firm Shook Lin & Bok is hit by an Akira ransomware attack.
-
Dropbox
April 24, 2024
Cloud storage firm Dropbox says threat actors breached production systems for its Dropbox Sign eSignature platform and gained access to authentication tokens, MFA keys, hashed passwords, and customer information.
