Full List

Search

Recent Breaches

• German Federal Agency for Cartography and Geodesy (BKG) December 1, 2021 • [ espionage, government ] German authorities say that a Beijing-backed threat actor was behind a cyberattack three years ago on the countrys state cartography agency, and summon the Chinese ambassador to Berlin for further discussions.
• Undisclosed Fortune 50 company January 31, 2024 • [ ransomware, financial, malware ] Researchers from Zscaler reveal that a Fortune 50 company paid a record-breaking $75 million ransom payment to the Dark Angels ransomware gang.
• Israeli Olympic athletes July 26, 2024 • [ leak ] The sensitive data of several Israeli athletes in the Paris Olympic Games is published on Telegram in an alleged doxing attack by a group calling itself "Zeus".
• Spytech Software July 25, 2024 • [ hack, malware, technology ] Spytech, a little-known spyware maker is hacked, revealing thousands of devices around the world under its stealthy remote surveillance.
• Undisclosed financial institution July 1, 2024 • [ hack, ddos, finance ] Researchers at Radware reveal that a financial institution in the Middle East suffered a DDoS attack lasting more than 100 hours in total, averaging 4.5 million requests per second.
• KnowBe4 July 15, 2024 Cybersecurity awareness training company KnowBe4 has reveals it was duped into hiring a fake IT worker from North Korea, resulting in attempted insider threat activity.
• dYdX July 23, 2024 Decentralized finance (DeFi) crypto exchange dYdX announces that the website for its older v3 trading platform has been compromised.
• CSC ServiceWorks September 23, 2023 • [ leak ] CSC ServiceWorks, a leading provider of commercial laundry services and air vending solutions, discloses a data breach after the personal information of over 35,000 individuals was exposed in a 2023 cyberattack.
• Unicoin August 9, 2024 Unicoin, a prominent cryptocurrency company notifies the SEC that a threat actor broke into its systems and locked all of the companys employees out before taking several actions that are still being investigated.
• British Home Office March 1, 2024 • [ espionage, government ] Threat actors from APT29 working for Russias foreign intelligence service accessed corporate emails and data on individuals from the British government, after they breached Microsoft in January 2024.
• Russia's Kursk Region August 8, 2024 • [ hack, ddos, government ] Russia's Kursk region is hit by a massive distributed denial-of-service (DDoS) attack amid Ukraines surprise cross-border incursion.
• Nexera August 7, 2024 The decentralized finance (DeFi) protocol Nexera falls victim to a significant exploit, resulting in the theft of approximately $1.8 million worth of digital assets.
• Millinocket Regional Hospital July 25, 2024 • [ ransomware, malware, healthcare ] Millinocket Regional Hospital (MRHME) suffers a RansomHub ransomware attack. The threat actors claim to have exfiltrated 10 GB of files.
• Dispatch centers in the Highland Lakes and across Central Texas August 4, 2024 • [ hack, ddos, government ] A reported cyberattack disrupts 9-1-1 service at dispatch centers in the Highland Lakes and across Central Texas for over five hours.
• South Korean construction trade organization January 15, 2024 The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the first case they compromised the website of a South Korean construction trade organization to disseminate malware to visitors.
• Convex Finance August 1, 2024 Decentralized finance protocol Convergence suffers a smart contract exploit that allows a threat actor to mint and sell $210,000 worth of native tokens and steal $2,000 in unclaimed staking rewards,
• Bausch Health February 21, 2024 The threat actor known as Sp1d3rHunters claims to have stolen extensive data from Bausch Health (1.6 Million DEA Numbers and Prescriber Details) and attempts to extort the company. The breach seems to be linked to compromised Snowflake accounts.
• City of Columbus July 18, 2024 • [ ransomware, malware, government ] The City of Columbus, Ohio, says it's investigating whether personal data was stolen in a ransomware attack that disrupted the City's services. The attackers claimed to have stolen 6.5 terabytes of data, including personal information such as names, addresses, dates of birth, Social Security numbers, bank account details, and driver's license information of approximately 500,000 residents.
• Gemini June 3, 2024 • [ hack, finance ] Cryptocurrency exchange Gemini warns it suffered a data breach incident caused by a cyberattack at its Automated Clearing House (ACH) service provider, whose name was not disclosed.
• Jefferson County Clerk’s Office July 22, 2024 • [ hack, government ] A cyber attack forces the Jefferson County Clerks Office to close eight branches.