-
Equiniti Trust Company, formerly known as American Stock Transfer & Trust Company
September 19, 2024
•
[ financial, phishing, finance ]
Equiniti Trust Company agrees to pay $850K after an unknown threat actor, pretending to be an employee of a U.S.-based public issuer client of American Stock Transfer, instructed the Company to issue millions of new shares, liquidate those shares, and send the proceeds to an bank in Hong Kong, leading to a loss of roughly $4.78 million.
-
DeltaPrime
September 16, 2024
•
[ financial, finance ]
DeltaPrime, a decentralized finance (DeFi) platform, announces that its Arbitrum-based protocol, DeltaPrime Blue, was exploited in a cyber attack that drained approximately $5.98 million.
-
Pacific Islands Forum Secretariat
September 12, 2024
•
[ espionage, hack, government ]
Chinese state-sponsored hackers are reportedly suspected of compromising the networks of the Pacific Islands Forum (PIF) Secretariat, a regional diplomatic body based in Fiji.
-
Fortinet
September 12, 2024
•
[ leak, misconfiguration, technology ]
Fortinet confirms it suffered a data breach after a threat actor with the moniker of "Fortibitch" claims to have stolen 440GB of files from the company's Microsoft Sharepoint server.
-
Indodax
September 11, 2024
Indodax, a major cryptocurrency exchange in Indonesia, pauses operations after $22 million in coins is stolen.
-
American Water
October 3, 2024
American Water, the largest publicly traded U.S. water and wastewater utility company, is forced to shut down some of its systems after a cyberattack.
-
AFP (Agence France-Presse)
September 27, 2024
•
[ hack ]
Global news agency AFP (Agence France-Presse) warns that it suffered a cyberattack, which impacted IT systems and content delivery services for its partners.
-
National Dutch police (Politie)
September 27, 2024
•
[ espionage, government ]
The National Dutch police (Politie) says that a state actor was likely behind a data breach detected the previous week.
-
University Medical Center Health System
September 27, 2024
•
[ ransomware, malware, healthcare ]
University Medical Center Health System (UMC) in Lubbock is forced to divert ambulances after a ransomware attack shuts down many of its systems.
-
14 water facilities in southern Lebanon and Beirut
September 26, 2024
A pro-Israel hacktivist group known as Red Evil and We Red Evils claims to have compromised water systems used by Hezbollah, taking control of supervisory control and data acquisition (SCADA) software associated with 14 water facilities in southern Lebanon and Beirut, and managed to change chlorine levels.
-
Deloitte
September 24, 2024
•
[ leak, misconfiguration, technology ]
The threat actor known as IntelBroker announces late last week on the BreachForums cybercrime forum the availability of internal communications obtained from Deloitte, specifically an internet-exposed Apache Solr server that was accessible with default credentials. However the company replies that there is no thret to sensitive data.
-
Duopharma Biotech
September 24, 2024
•
[ ransomware, malware, healthcare ]
Malaysian pharmaceutical firm Duopharma Biotech is hit with a Valencia ransomware attack. The threat actor claims to have stolen 25.7GB of sensitive information.
-
City of Pleasanton
September 24, 2024
•
[ ransomware, malware, government ]
The City of Pleasanton in California is hit with a Valencia ransomware attack. The threat actor claims to have stolen 283GB of sensitive information.
-
MoneyGram
September 23, 2024
•
[ hack, finance ]
Money transfer giant MoneyGram confirms it suffered a cyberattack after dealing with system outages and customer complaints about lack of service since Friday.
-
Shezmu
September 21, 2024
•
[ hack, finance ]
Shezmu, a crypto landing platform, suffers a $4.9 million worth hack after a storage vault is compromised. However the platform is able to recover the stolen funds within hours of successfully negotiating with the threat actor.
-
Banana Gun
September 19, 2024
Users of the Telegram-based cryptocurrency trading bot Banana Gun have been drained of nearly $2 million worth of digital assets.
-
Ethena Labs
September 18, 2024
Ethena Labs, the team behind the decentralized synthetic dollar protocol, temporarily deactivates its front end after threat actors compromised its domain registrar account.
-
Providence Public School District
September 12, 2024
•
[ ransomware, malware, education ]
The Providence Public School District (PPSD) faces internet outages after discovering irregular activity." The Medusa ransomware gang claims responsibility for the attack.
-
Cultura
September 10, 2024
Cultura, which has 110 stores in France, also falls victim to a cyberattack. The company says that one of its external IT service providers "was the victim of a malicious intrusion into its database as part of an attack that targeted several stores."
-
Free Russia Foundation
September 7, 2024
The U.S.-based Free Russia Foundation nonprofit says it is investigating a data breach after thousands of emails and documents supposedly related to its work are published online. The organization suspects that the incident is linked to the Kremlin-sponsored group tracked as Coldriver
