-
Undisclosed organizations in El Salvador
April 1, 2024
•
[ leak ]
Researchers from Resecurity identify a massive leak of the personally identifiable information (PII) of over five million citizens from El Salvador on the Dark Web, impacting more than 80% of the countrys population.
-
London Drugs
April 28, 2024
•
[ ransomware, malware, retail ]
Canadian pharmacy chain London Drugs closes all its retail stores to contain what it described as a "cybersecurity incident." One month later the LockBit ransomware operation claims responsibility for the attack.
-
Coffee County, GA
April 15, 2024
Coffee County is hit with a cyber attack.
-
Tipton Wastewater Treatment Plant
April 20, 2024
•
[ hack ]
The Cyber Army of Russia claims responsibility for a cyber attack to the Tipton Wastewater Treatment Plant. An investigation by Mandiant claims that this group may be linked operationally to APT44 GRU Sandworm
-
Medios de Prevención Externos Sur SL
March 22, 2024
•
[ ransomware, malware, healthcare ]
Medios de Prevencin Externos Sur SL, a medical company servicing Spain's Guardia Civil, is hit with a LockBit ransomware attack.
-
Valley Mountain Regional Center
August 1, 2023
•
[ leak, healthcare ]
Valley Mountain Regional Center discloses a breach.
-
Mitre Corporation
January 31, 2024
The MITRE Corporation says that a state-backed threat actors breached its systems (MITRE's Networked Experimentation, Research, and Virtualization Environment - NERVE) in January 2024 by chaining the two Ivanti VPN zero-days CVE-2023-46805 and CVE-2024-21887.
-
Muleshoe water facility
January 16, 2024
CyberArmyofRussia_Reborn, a group with ties to the Russian government is suspected of carrying out a cyberattack in the Muleshoe water facility that caused a tank at a Texas water facility to overflow.
-
-
Blackstone Valley Community Health Care
December 12, 2023
On December 12, 2023, the Hunters International group claimed responsibility for an attack on Blackstone Valley Community Health Care in Rhode Island. But it wasnt until April 18, 2024 that BCVHC notified the 34,416 people affected. In December, months before patients were ever notified, the threat actors dumped 16.6 GB of files on their leak site that anyone could access. At last check, the data, some of which is patient data, is still available on the leak site.
-
-
Undisclosed T-Mobile vendor
June 19, 2024
T-Mobile denies it was breached or that source code was stolen after the threat actor IntelBroker claims to be selling stolen data from the telecommunications company. The data seems to have been stolen from a third-party vendor.
-
Truist Bank
June 13, 2024
•
[ hack, leak, finance ]
Truist Bank, a leading U.S. commercial bank, confirms this week that its systems were breached in an October 2023 cyberattack after a threat actor posted some of the company's data for sale on a hacking forum.
-
Teamviewer
June 27, 2024
TeamViewer, the company that makes widely used remote access tools for companies, confirms an ongoing cyberattack on its corporate network carried out by the Russian state-sponsored actor APT29
-
United Seating and Mobility d/b/a Numotion
June 10, 2024
•
[ ransomware, malware, manufacturing ]
United Seating and Mobility, a provider of wheelchair and mobility equipment that does business as Numotion, discloses that an unauthorized third party had access to its computer systems and used ransomware to encrypt files. 602,000 individuals are affected.
-
Neiman Marcus
June 24, 2024
•
[ hack, malware, retail ]
High-end department store Neiman Marcus discloses a data breach, shortly before the threat actor 'Sp1d3r' offered to sell information belonging to millions of the companys customers. The hack impacted 64,000 users and is likely part of the massive SnowFlake campaign.
-
Los Angeles Unified School District
June 6, 2024
•
[ leak, education ]
Los Angeles Unified School District (LAUSD) officials are investigating a threat actor's claims that they're selling stolen databases containing records belonging to millions of students and thousands of teachers. 24 million records are allegedly compromised.
-
The Post Millennial
May 2, 2024
Have I Been Pwned adds the information for 26,818,266 people whose data was leaked in a recent hack of The Post Millennial conservative news website.
-
Superior Air-Ground Ambulance Service
May 15, 2023
•
[ hack, healthcare ]
Superior Air-Ground Ambulance Service, an Illinois-based air-ground ambulance company notifies more than 858,000 individuals that their sensitive information was compromised in a hacking incident that happened about a year ago.
-
Ascension
May 8, 2024
•
[ ransomware, malware, healthcare ]
Ascension, one of the largest private healthcare systems in the United States, takes some of its systems offline to investigate what it describes as a "cyber security event" confirmed to be a Black Basta ransomware attack.
