Full List

Search

Recent Breaches

• BT Group December 4, 2024 • [ ransomware, technology ] BT Group confirmed that its BT Conferencing services were impacted in a ransomware incident by Black Basta.
• Chemonics December 3, 2024 • [ hack, government ] Chemonics, a large contractor for the U.S. government says a 2023 cyberattack exposed the critical personal information of more than 263,000 people.
• AEAT (Spanish Tax Agency) December 1, 2024 The ransomware group Trinity claims it stole 560 gigabytes of data from the AEAT.
• American Addiction Centers (AAC) September 23, 2024 • [ ransomware, malware, healthcare ] A ransomware attack on American Addiction Centers exposes the sensitive healthcare information of more than 400,000 people. The Rhysida ransomware gang claims responsibility for the attack.
• Pittsburgh Regional Transit December 19, 2024 • [ ransomware, malware ] Pittsburgh Regional Transit (PRT) is hit with a ransomware attack.
• Illinois Department Of Human Services April 25, 2024 • [ social, phishing, government ] The Illinois Department Of Human Services reveals that a phishing attack affected more than 1.1M public assistance clients.
• Multiple Organizations December 19, 2024 • [ hack, malware, technology ] The developers of Rspack reveal that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware.
• Adam Griffin May 6, 2024 • [ social, phishing, finance ] Adam Griffin, a crypto investor is robbed of nearly $500,000 in cryptocurrencies after a scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him to click yes to a Google prompt on his mobile device.
• GemPad December 17, 2024 The Gem Pad token launchpad is exploited for an estimated loss of $2.2M in crypto assets.
• Defense sector organization in Turkey November 18, 2024 Researchers at Proofpoint discover a sophisticated phishing attack targeting a Turkish defense sector organization via the MiyaRAT, carried out by the threat actor TA397, a.k.a. Bitter, using a Madagascar lure, and delivering malware through advanced mechanisms involving NTFS Alternate Data Streams (ADS) and scheduled tasks.
• Regional Care September 18, 2024 • [ leak, healthcare ] Nebraska-based healthcare insurance firm Regional Care discloses a data breach impacting more than 225,000 individuals as a result of an incident identified in mid-September 2024.
• RIBridges (Rhode Island's Integrated Eligibility System) December 13, 2024 • [ ransomware, malware, government ] Rhode Island is warning that its RIBridges system, managed by Deloitte, suffered a data breach exposing residents' personal information after the Brain Cipher ransomware gang hacked its systems.
• PIH Health December 1, 2024 • [ ransomware, malware, healthcare ] Threat actors claim they stole 17 million patient records from PIH Health, a southern California regional healthcare provider that is still struggling with IT and phone systems outages that have been disrupting patient care since the organization was hit by a ransomware attack on Dec. 1.
• Undisclosed Organization December 13, 2024 Researchers at Trend Micro discover an incident where an attacker used social engineering via a Microsoft Teams call to impersonate a users client and gain remote access to their system via the DarkGate malware.
• Peruvian University of Applied Sciences December 9, 2024 • [ hack, education ] The Peruvian University of Applied Sciences investigates a data breach, stating that hackers stole student data including names, emails and copies of university IDs.
• Krispy Kreme November 29, 2024 • [ ransomware, malware, retail ] US doughnut chain Krispy Kreme reveals it suffered a cyberattack in November that impacted portions of its business operations, including placing online orders. The Play ransomware gang claims responsibility for the attack.
• Large business-to-business IT service providers in Southern Europe June 25, 2024 • [ espionage, technology ] Researchers from Sentinel One and Tinext Cyber reveal the details of Operation Digital Eye, a suspected China-nexus cyber espionage group attributed to an attacks targeting large business-to-business IT service providers in Southern Europe.
• Multiple Organizations August 1, 2024 Terabytes of data belonging to thousands of AWS customers, including customer details, AWS credentials, and proprietary source code, are compromised in a large-scale cyber operation linked to the now-defunct ShinyHunters hacking group.
• Artivion November 21, 2024 • [ ransomware, malware, manufacturing ] Artivion, a leading manufacturer of heart surgery medical devices, discloses q ransomware attack that disrupted its operations and forced it to take some systems offline.
• BeyondTrust December 8, 2024 • [ hack, technology ] Privileged access management company BeyondTrust suffers a cyberattack after threat actors breached some of its Remote Support SaaS instances.