Full List

Search

Recent Breaches

• Ezynetic Pte. Ltd June 14, 2024 Threat actors known as GhostR claim to have stolen more than 50 GB of files on loan borrowers from the Singapore MLCB (the Moneylenders Credit Bureau). The attack was carried out on Ezynetic Pte. Ltd and affected 12 moneylenders using their services.
• Split St Jerome Airport July 22, 2024 • [ ransomware, malware ] The Split St Jerome Airport is hit with an Akira ransomware attack.
• Community Care Alliance July 29, 2024 • [ ransomware, leak, malware ] Community Care Alliance is listed in the Rhysida ransomware leak site.
• Port of Tyne August 6, 2024 The Port of Tyne confirms its site was down for some time, following a distributed denial of service (DDOS) attack.
• Undisclosed commodity firm in Singapore July 15, 2024 I-GRIP, a global stop-payment mechanism created by INTERPOL successfully recovers over $40 million stolen in a BEC attack on a company in Singapore.
• Mobile Guardian August 4, 2024 A threat actor breaches Mobile Guardian, a digital classroom management platform used worldwide, and remotely wipes data from at least 13,000 student's iPads and Chromebooks.
• Hospital Español Auxilio Mutuo (Hospital Auxilio Mutuo) September 24, 2023 • [ hack, healthcare ] Hospital Espaol Auxilio Mutuo (Hospital Auxilio Mutuo) in Puerto Rico notifies of a network incident affecting 500 patients.
• Construction and machinery companies in South Korea January 15, 2024 The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the second case they exploited vulnerabilities in domestic security software (VPN and server security) to replace update files with malware, distributing remote control malware named "DoraRAT" to construction and machinery companies.
• Taiwanese government-affiliated research institute July 15, 2024 • [ espionage, malware, government ] Researchers from Cisco Talos reveal that a Taiwanese government-affiliated research institute that specializes in computing and associated technologies was breached by the nation-state threat actors APT41 with ties to China, through a variety of backdoors and post-compromise tools like ShadowPad and Cobalt Strike.
• German Federal Agency for Cartography and Geodesy (BKG) December 1, 2021 • [ espionage, government ] German authorities say that a Beijing-backed threat actor was behind a cyberattack three years ago on the countrys state cartography agency, and summon the Chinese ambassador to Berlin for further discussions.
• Undisclosed Fortune 50 company January 31, 2024 • [ ransomware, financial, malware ] Researchers from Zscaler reveal that a Fortune 50 company paid a record-breaking $75 million ransom payment to the Dark Angels ransomware gang.
• Israeli Olympic athletes July 26, 2024 • [ leak ] The sensitive data of several Israeli athletes in the Paris Olympic Games is published on Telegram in an alleged doxing attack by a group calling itself "Zeus".
• Spytech Software July 25, 2024 • [ hack, malware, technology ] Spytech, a little-known spyware maker is hacked, revealing thousands of devices around the world under its stealthy remote surveillance.
• Undisclosed financial institution July 1, 2024 • [ hack, ddos, finance ] Researchers at Radware reveal that a financial institution in the Middle East suffered a DDoS attack lasting more than 100 hours in total, averaging 4.5 million requests per second.
• KnowBe4 July 15, 2024 Cybersecurity awareness training company KnowBe4 has reveals it was duped into hiring a fake IT worker from North Korea, resulting in attempted insider threat activity.
• dYdX July 23, 2024 Decentralized finance (DeFi) crypto exchange dYdX announces that the website for its older v3 trading platform has been compromised.
• CSC ServiceWorks September 23, 2023 • [ leak ] CSC ServiceWorks, a leading provider of commercial laundry services and air vending solutions, discloses a data breach after the personal information of over 35,000 individuals was exposed in a 2023 cyberattack.
• Unicoin August 9, 2024 Unicoin, a prominent cryptocurrency company notifies the SEC that a threat actor broke into its systems and locked all of the companys employees out before taking several actions that are still being investigated.
• British Home Office March 1, 2024 • [ espionage, government ] Threat actors from APT29 working for Russias foreign intelligence service accessed corporate emails and data on individuals from the British government, after they breached Microsoft in January 2024.
• Russia's Kursk Region August 8, 2024 • [ hack, ddos, government ] Russia's Kursk region is hit by a massive distributed denial-of-service (DDoS) attack amid Ukraines surprise cross-border incursion.