-
ADT
October 2, 2024
Home and small business security company ADT discloses it suffered a breach after threat actors gained access to its systems using stolen credentials and exfiltrated employee account data.
-
Barbados Revenue Authority
September 30, 2024
230GB of records from the Barbados Revenue Authority, such as property tax records and vehicle owners registration records, are being offered for sale.
-
Richmond Community Schools
September 28, 2024
•
[ ransomware, malware, education ]
Richmond Community Schools in Indiana posts to social media that student and staff information in the PowerSchool software system was breached in a ransomware attack.
-
Diehl Defence
September 27, 2024
•
[ espionage, malware, manufacturing ]
The North Korea-linked APT Kimsuky is linked to a cyberattack on Diehl Defence, a German manufacturer of advanced military systems.
-
Senator Ben Cardin
September 26, 2024
•
[ espionage, phishing, government ]
An advanced deepfake operation targets Sen. Ben Cardin, the Democratic chair of the Senate Foreign Relations Committee, who is involved in a Zoom conversation with a fake Dymtro Kuleba, the former Ukrainian Minister of Foreign Affairs.
-
Truflation
September 25, 2024
•
[ financial, malware, finance ]
Crypto project Truflation loses over $5 million from its treasury multisig and personal wallets in a malware attack
-
Globe Pharmaceuticals
September 24, 2024
Bangladeshi drugs maker Globe Pharmaceuticals is hit with a Valencia ransomware attack. The threat actor claims to have stolen 200MB of sensitive information.
-
Satia
September 24, 2024
•
[ ransomware, malware, manufacturing ]
Indian paper manufacturer Satia is hit with a Valencia ransomware attack. The threat actor claims to have stolen 7.1GB of sensitive information.
-
Water utility in Arkansas City
September 24, 2024
•
[ hack, government ]
Arkansas City, a small city in Cowley County, Kansas, is forced to switch its water treatment facility to manual operations over the weekend to contain a cyberattack detected on Sunday morning.
-
OpenAI's press account on X
September 23, 2024
•
[ financial, social, finance ]
Crypto scammers hijack OpenAI Newsroom, OpenAI's press account on X, formerly Twitter, to advertise a nonexistent token $OPENAI.
-
Undisclosed 3rd party software tool
September 23, 2024
The threat actor, going by the alias grep, leaks over 12,000 (11,802) call records with audio, which they claim belong to Twilio customers. Twilio denies the claims, clarifying that they were not breached, but a customers data was exposed due to a vulnerability in a third-party tool used by the customers developers.
-
Dell
September 22, 2024
•
[ hack, technology ]
Grep, the threat actor who claimed to have breached Dell, now claims to have breached the same company again.
-
Fylde Coast Academy Trust
September 20, 2024
•
[ ransomware, malware, education ]
The Fylde Coast Academy Trust is hit with a ransomware attack.
-
Unibot
September 19, 2024
Reports emerge that even the users of the cryptocurrency trading bot Unibot are drained of digital assets.
-
Equiniti Trust Company, formerly known as American Stock Transfer & Trust Company
September 19, 2024
•
[ financial, misconfiguration, finance ]
In a second breach, an unknown threat actor was able to create fake accounts with American Stock Transfer & Trust, by using stolen Social Security numbers of various American Stock Transfer accountholders, allowing them to liquidate securities held in the legitimate accounts and transfer approximately $1.9 million to external bank accounts.
-
Equiniti Trust Company, formerly known as American Stock Transfer & Trust Company
September 19, 2024
•
[ financial, phishing, finance ]
Equiniti Trust Company agrees to pay $850K after an unknown threat actor, pretending to be an employee of a U.S.-based public issuer client of American Stock Transfer, instructed the Company to issue millions of new shares, liquidate those shares, and send the proceeds to an bank in Hong Kong, leading to a loss of roughly $4.78 million.
-
DeltaPrime
September 16, 2024
•
[ financial, finance ]
DeltaPrime, a decentralized finance (DeFi) platform, announces that its Arbitrum-based protocol, DeltaPrime Blue, was exploited in a cyber attack that drained approximately $5.98 million.
-
Pacific Islands Forum Secretariat
September 12, 2024
•
[ espionage, hack, government ]
Chinese state-sponsored hackers are reportedly suspected of compromising the networks of the Pacific Islands Forum (PIF) Secretariat, a regional diplomatic body based in Fiji.
-
Fortinet
September 12, 2024
•
[ leak, misconfiguration, technology ]
Fortinet confirms it suffered a data breach after a threat actor with the moniker of "Fortibitch" claims to have stolen 440GB of files from the company's Microsoft Sharepoint server.
-
Indodax
September 11, 2024
Indodax, a major cryptocurrency exchange in Indonesia, pauses operations after $22 million in coins is stolen.
