-
Alabama Cardiology Group
June 6, 2024
•
[ hack, healthcare ]
Alabama Cardiology Group notifies nearly 281,000 current and past patients, physicians and employees that threat actors stole their sensitive information.
-
Evolution Mining
August 8, 2024
•
[ ransomware, malware, energy ]
Evolution Mining informs that it has been targeted by a ransomware attack, which impacted its IT systems.
-
Undisclosed South Korean defense contractor
August 12, 2024
A South Korean defense contractor which produces operational and maintenance manuals for military equipment, including the two spy planes "Baekdu" and "Geumgang", was allegedly hacked by threat actors from North Korea.
-
National Public Data
December 1, 2023
•
[ hack, government ]
The stolen data was said to include social security numbers, full names, family information, as well as current and previous addresses. USDoD, who acted as the middleman for the breach, was arrested by Brazilian authorities last week, but the threat actor responsible for stealing the data, referred to as SXUL is still at large.
-
AT&T
July 12, 2024
•
[ leak, misconfiguration, technology ]
AT&T warns of a massive data breach where threat actors stole the call logs for approximately 109 million customers, or nearly all of its mobile customers, from an online database on the company's Snowflake account.
-
mSpy
July 11, 2024
A data breach at the Zendesk customer support site of the phone surveillance operation mSpy exposes millions of its customers who bought access to the phone spyware app over the past decade, as well as the Ukrainian company behind it, Brainstack.
-
Sibanye-Stillwater
July 11, 2024
•
[ ransomware, malware, healthcare ]
Mining giant Sibanye-Stillwater, one of the worlds biggest producers of platinum and gold, reveals that its global IT systems have suffered a cyberattack. The BlackSuit ransomware gang claims responsibility for the attack.
-
General Motors
July 9, 2024
•
[ hack, brute-force, manufacturing ]
General Motors (GM) suffers what appears to be a credential stuffing attack, affecting 65 GM MyAccounts.
-
U.S. Department of Veterans Affairs
July 8, 2024
The Microsoft Azure environment of the U.S. Department of Veterans Affairs was briefly compromised by Russian threat actors
-
-
Twilio Authy
July 3, 2024
Twilio confirms that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.
-
Louisiana Special School District
July 3, 2024
•
[ ransomware, malware, education ]
Louisiana Special School District suffers an Akira ransomware attack.
-
FIA (Fédération Internationale de l'Automobile)
July 3, 2024
FIA (Fdration Internationale de l'Automobile) says attackers gained access to personal data after compromising several FIA email accounts in a phishing attack.
-
Organizations in the manufacturing and logistics industries
July 1, 2024
•
[ ransomware, malware, manufacturing ]
Researchers from Halcyon discover Volcano Demon, a new ransomware group targeting organizations in manufacturing and logistics via an encryptor dubbed LukaLocker.
-
Florida Community Health Centers
July 1, 2024
•
[ ransomware, malware, healthcare ]
Florida Community Health Centers (FCHC) discloses to have suffered a ransomware attack affecting nearly 300,000 people.
-
Mercku
June 30, 2024
The helpdesk portal of Mercku, a router maker, is sending MetaMask phishing emails in response to newly filed support tickets, in what appears to be a compromise.
-
Roll20
June 29, 2024
•
[ hack, technology ]
Roll20, a popular online tabletop platform for role-playing games (RPGs), reveals that its systems were breached.
-
Central Bank of Iran (CBI) and several other banks in the country
August 14, 2024
Iran International reports that a massive cyber attack disrupted operations of the Central Bank of Iran (CBI) and several other banks in the country.
-
Undisclosed victim
July 13, 2024
Scam Sniffer reports that a crypto scammer returned $9.27 million in stablecoins to a victim, after stealing $24.23 million in various crypto assets (38.26% of the total stolen amount)
-
Disney
July 13, 2024
A self-proclaimed hacktivist group named NullBulge, aiming to protect artists rights and ensure fair compensation for their work, claims to have breached Disney and leaks 1.2 TB of the companys internal Slack infrastructure.
