-
Gramercy Surgery Center
June 14, 2024
•
[ leak, healthcare ]
The threat actor(s) known as Everest Team add Gramercy Surgery Center (Gramercy) to its leak site, and claims to have acquired more than 460 GB of files.
-
Betances Health Center
July 12, 2024
•
[ ransomware, malware, healthcare ]
The ransomware group Hunters International adds Betances Health Center in New York to their leak site.
-
Bayhealth Hospital
July 31, 2024
•
[ ransomware, malware, healthcare ]
The Rhysida Ransomware group claims to have breached Bayhealth Hospital in Delaware and offers alleged stolen data for 25 BTC.
-
Florida’s Sumter County Sheriff’s Office
August 6, 2024
•
[ ransomware, malware, government ]
Floridas Sumter County Sheriffs Office confirms that it experienced a Rhysida ransomware attack.
-
Delhi Hospital
July 29, 2024
•
[ ransomware, leak, malware ]
Delhi Hospital (also known as Richard Parish Hospital) in Louisiana is added to the RADAR and DISPOSSESSORs (R&D) ransomware leak site.
-
Home users' devices worldwide
July 20, 2024
•
[ ransomware, malware ]
A massive Magniber ransomware campaign encrypts home users' devices worldwide and demands thousand-dollar ransoms.
-
Iran's Ministry of Information and Communications Technology
August 1, 2024
•
[ hack, ddos, government ]
Israel-based hacktivists from the group WeRedEvils take credit for an ongoing internet outage in Iran.
-
Sable International
August 1, 2024
Sable International, a prominent U.K.-based company offering immigration services and legal resources, warns officials in multiple countries that a recent cyberattack may have exposed sensitive customer information. The BianLian ransomware gang claims responsibility for the attack and starts emailing customers about the incident, likely to put pressure on the firm to pay a ransom.
-
OneBlood
July 29, 2024
•
[ ransomware, malware, healthcare ]
OneBlood, a large not-for-profit blood center that serves hospitals and patients in the United States, is dealing with an IT systems outage caused by a ransomware attack.
-
Microsoft
July 30, 2024
•
[ hack, ddos, technology ]
Microsoft says that a DDoS attack led to an eight hour outage involving its Azure portal, as well as some Microsoft 365 and Microsoft Purview services.
-
Avanpost
July 26, 2024
•
[ hack, leak, technology ]
A pro-Ukrainian hacker group, known as Cyber Anarchy Squad, claims it hacked the Russian information security firm Avanpost and leaked 390 gigabytes of its data, destroyed over 60 terabytes, and disrupted over 400 virtual machines and physical workstations.
-
Ezynetic Pte. Ltd
June 14, 2024
Threat actors known as GhostR claim to have stolen more than 50 GB of files on loan borrowers from the Singapore MLCB (the Moneylenders Credit Bureau). The attack was carried out on Ezynetic Pte. Ltd and affected 12 moneylenders using their services.
-
Split St Jerome Airport
July 22, 2024
•
[ ransomware, malware ]
The Split St Jerome Airport is hit with an Akira ransomware attack.
-
Community Care Alliance
July 29, 2024
•
[ ransomware, leak, malware ]
Community Care Alliance is listed in the Rhysida ransomware leak site.
-
Port of Tyne
August 6, 2024
The Port of Tyne confirms its site was down for some time, following a distributed denial of service (DDOS) attack.
-
Undisclosed commodity firm in Singapore
July 15, 2024
I-GRIP, a global stop-payment mechanism created by INTERPOL successfully recovers over $40 million stolen in a BEC attack on a company in Singapore.
-
Mobile Guardian
August 4, 2024
A threat actor breaches Mobile Guardian, a digital classroom management platform used worldwide, and remotely wipes data from at least 13,000 student's iPads and Chromebooks.
-
Hospital Español Auxilio Mutuo (Hospital Auxilio Mutuo)
September 24, 2023
•
[ hack, healthcare ]
Hospital Espaol Auxilio Mutuo (Hospital Auxilio Mutuo) in Puerto Rico notifies of a network incident affecting 500 patients.
-
Construction and machinery companies in South Korea
January 15, 2024
The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the second case they exploited vulnerabilities in domestic security software (VPN and server security) to replace update files with malware, distributing remote control malware named "DoraRAT" to construction and machinery companies.
-
Taiwanese government-affiliated research institute
July 15, 2024
•
[ espionage, malware, government ]
Researchers from Cisco Talos reveal that a Taiwanese government-affiliated research institute that specializes in computing and associated technologies was breached by the nation-state threat actors APT41 with ties to China, through a variety of backdoors and post-compromise tools like ShadowPad and Cobalt Strike.
