-
OVHcloud
July 2, 2024
•
[ hack, ddos, technology ]
OVHcloud, says it mitigated a record-breaking distributed denial of service (DDoS) attack earlier this year, allegedly launched from a botnet of MilkroTik devices, which reached an unprecedented packet rate of 840 million packets per second (Mpps).
-
Patelco Credit Union
June 29, 2024
•
[ ransomware, malware, finance ]
Patelco Credit Union discloses it experienced a ransomware attack that led to the proactive shutdown of several of its customer-facing banking systems to contain the incident's impact.
-
Carespring Healthcare Management
October 12, 2023
•
[ ransomware, malware, healthcare ]
Ohio nursing home Carespring Healthcare Management notifies approximately 77,000 individuals that their personal and medical information was compromised in a data breach that dates back to October 2023. NoEscape ransomware group has claimed responsibility for the cyberattack on Carespring Health Care Management LLC. They allege that they exfiltrated 364 GB of data from Carespring's network
-
POLADA
August 13, 2024
Threat actors "from a hostile state are believed to be behind the leak of over 50,000 confidential files from Polands anti-doping agency POLADA.
-
Alabama Cardiology Group
June 6, 2024
•
[ hack, healthcare ]
Alabama Cardiology Group notifies nearly 281,000 current and past patients, physicians and employees that threat actors stole their sensitive information.
-
Evolution Mining
August 8, 2024
•
[ ransomware, malware, energy ]
Evolution Mining informs that it has been targeted by a ransomware attack, which impacted its IT systems.
-
Undisclosed South Korean defense contractor
August 12, 2024
A South Korean defense contractor which produces operational and maintenance manuals for military equipment, including the two spy planes "Baekdu" and "Geumgang", was allegedly hacked by threat actors from North Korea.
-
National Public Data
December 1, 2023
•
[ hack, government ]
The stolen data was said to include social security numbers, full names, family information, as well as current and previous addresses. USDoD, who acted as the middleman for the breach, was arrested by Brazilian authorities last week, but the threat actor responsible for stealing the data, referred to as SXUL is still at large.
-
AT&T
July 12, 2024
•
[ leak, misconfiguration, technology ]
AT&T warns of a massive data breach where threat actors stole the call logs for approximately 109 million customers, or nearly all of its mobile customers, from an online database on the company's Snowflake account.
-
mSpy
July 11, 2024
A data breach at the Zendesk customer support site of the phone surveillance operation mSpy exposes millions of its customers who bought access to the phone spyware app over the past decade, as well as the Ukrainian company behind it, Brainstack.
-
Sibanye-Stillwater
July 11, 2024
•
[ ransomware, malware, healthcare ]
Mining giant Sibanye-Stillwater, one of the worlds biggest producers of platinum and gold, reveals that its global IT systems have suffered a cyberattack. The BlackSuit ransomware gang claims responsibility for the attack.
-
General Motors
July 9, 2024
•
[ hack, brute-force, manufacturing ]
General Motors (GM) suffers what appears to be a credential stuffing attack, affecting 65 GM MyAccounts.
-
U.S. Department of Veterans Affairs
July 8, 2024
The Microsoft Azure environment of the U.S. Department of Veterans Affairs was briefly compromised by Russian threat actors
-
-
Twilio Authy
July 3, 2024
Twilio confirms that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.
-
Louisiana Special School District
July 3, 2024
•
[ ransomware, malware, education ]
Louisiana Special School District suffers an Akira ransomware attack.
-
FIA (Fédération Internationale de l'Automobile)
July 3, 2024
FIA (Fdration Internationale de l'Automobile) says attackers gained access to personal data after compromising several FIA email accounts in a phishing attack.
-
Organizations in the manufacturing and logistics industries
July 1, 2024
•
[ ransomware, malware, manufacturing ]
Researchers from Halcyon discover Volcano Demon, a new ransomware group targeting organizations in manufacturing and logistics via an encryptor dubbed LukaLocker.
-
Florida Community Health Centers
July 1, 2024
•
[ ransomware, malware, healthcare ]
Florida Community Health Centers (FCHC) discloses to have suffered a ransomware attack affecting nearly 300,000 people.
-
Mercku
June 30, 2024
The helpdesk portal of Mercku, a router maker, is sending MetaMask phishing emails in response to newly filed support tickets, in what appears to be a compromise.
