Full List

Search

Recent Breaches

• American Water October 3, 2024 American Water, the largest publicly traded U.S. water and wastewater utility company, is forced to shut down some of its systems after a cyberattack.
• AFP (Agence France-Presse) September 27, 2024 • [ hack ] Global news agency AFP (Agence France-Presse) warns that it suffered a cyberattack, which impacted IT systems and content delivery services for its partners.
• National Dutch police (Politie) September 27, 2024 • [ espionage, government ] The National Dutch police (Politie) says that a state actor was likely behind a data breach detected the previous week.
• University Medical Center Health System September 27, 2024 • [ ransomware, malware, healthcare ] University Medical Center Health System (UMC) in Lubbock is forced to divert ambulances after a ransomware attack shuts down many of its systems.
• 14 water facilities in southern Lebanon and Beirut September 26, 2024 A pro-Israel hacktivist group known as Red Evil and We Red Evils claims to have compromised water systems used by Hezbollah, taking control of supervisory control and data acquisition (SCADA) software associated with 14 water facilities in southern Lebanon and Beirut, and managed to change chlorine levels.
• Deloitte September 24, 2024 • [ leak, misconfiguration, technology ] The threat actor known as IntelBroker announces late last week on the BreachForums cybercrime forum the availability of internal communications obtained from Deloitte, specifically an internet-exposed Apache Solr server that was accessible with default credentials. However the company replies that there is no thret to sensitive data.
• Duopharma Biotech September 24, 2024 • [ ransomware, malware, healthcare ] Malaysian pharmaceutical firm Duopharma Biotech is hit with a Valencia ransomware attack. The threat actor claims to have stolen 25.7GB of sensitive information.
• City of Pleasanton September 24, 2024 • [ ransomware, malware, government ] The City of Pleasanton in California is hit with a Valencia ransomware attack. The threat actor claims to have stolen 283GB of sensitive information.
• MoneyGram September 23, 2024 • [ hack, finance ] Money transfer giant MoneyGram confirms it suffered a cyberattack after dealing with system outages and customer complaints about lack of service since Friday.
• Shezmu September 21, 2024 • [ hack, finance ] Shezmu, a crypto landing platform, suffers a $4.9 million worth hack after a storage vault is compromised. However the platform is able to recover the stolen funds within hours of successfully negotiating with the threat actor.
• Banana Gun September 19, 2024 Users of the Telegram-based cryptocurrency trading bot Banana Gun have been drained of nearly $2 million worth of digital assets.
• Ethena Labs September 18, 2024 Ethena Labs, the team behind the decentralized synthetic dollar protocol, temporarily deactivates its front end after threat actors compromised its domain registrar account.
• Providence Public School District September 12, 2024 • [ ransomware, malware, education ] The Providence Public School District (PPSD) faces internet outages after discovering irregular activity." The Medusa ransomware gang claims responsibility for the attack.
• Cultura September 10, 2024 Cultura, which has 110 stores in France, also falls victim to a cyberattack. The company says that one of its external IT service providers "was the victim of a malicious intrusion into its database as part of an attack that targeted several stores."
• Free Russia Foundation September 7, 2024 The U.S.-based Free Russia Foundation nonprofit says it is investigating a data breach after thousands of emails and documents supposedly related to its work are published online. The organization suspects that the incident is linked to the Kremlin-sponsored group tracked as Coldriver
• Physical Medicine & Rehabilitation Center September 6, 2024 • [ leak, healthcare ] The Physical Medicine & Rehabilitation Center posts a notice on its website about an incident in July that affected patients at their New Jersey and New York locations. The Meow Leaks claims responsibility for the attack.
• Latvian government and critical infrastructure websites September 4, 2024 According to Latvian cybersecurity officials, politically motivated threat actors linked to Russia and Belarus are targeting Latvian government and critical infrastructure websites in a new wave of cyberattacks.
• Cisco September 4, 2024 • [ leak, malware, technology ] Ciscos site for selling company-themed merchandise is offline and under maintenance due to threat actors compromising it with JavaScript code that steals sensitive customer details provided at checkout exploiting CVE-2024-34102.
• VK September 3, 2024 • [ leak, technology ] A threat actor using the alias HikkI-Chan leaks the personal details of over 390 million VK users (specifically, 390,425,719) on the notorious cybercrime and hacker platform Breach Forums. The data was stolen from a third-party.
• Transport for London September 2, 2024 • [ hack, government ] Transport for London (TfL), the city's transport authority, is investigating an ongoing cyberattack.