Full List

Search

Recent Breaches

• City of Clark Fork November 15, 2024 • [ social, phishing, government ] The City of Clark Fork is scammed out of half a million dollars by a man posing as its construction contractor.
• Kurita America November 29, 2024 • [ ransomware, malware, manufacturing ] The U.S. subsidiary of Kurita Water, a Japanese water treatment company says ransomware actors have stolen data from systems and encrypted some servers.
• Watsonville Community Hospital December 4, 2024 • [ hack, healthcare ] Watsonville Community Hospital continues operations amid ongoing investigation into a cyberattack.
• Express Services December 4, 2024 • [ hack ] Express Services experiences a data breach when an unauthorized party accessed internal user accounts.
• Romania's Presidential Elections December 4, 2024 • [ espionage, government ] Romanias constitutional court annuls the first round of the countrys presidential election, citing Russian disinformation influence.
• BT Group December 4, 2024 • [ ransomware, technology ] BT Group confirmed that its BT Conferencing services were impacted in a ransomware incident by Black Basta.
• Chemonics December 3, 2024 • [ hack, government ] Chemonics, a large contractor for the U.S. government says a 2023 cyberattack exposed the critical personal information of more than 263,000 people.
• AEAT (Spanish Tax Agency) December 1, 2024 The ransomware group Trinity claims it stole 560 gigabytes of data from the AEAT.
• American Addiction Centers (AAC) September 23, 2024 • [ ransomware, malware, healthcare ] A ransomware attack on American Addiction Centers exposes the sensitive healthcare information of more than 400,000 people. The Rhysida ransomware gang claims responsibility for the attack.
• Pittsburgh Regional Transit December 19, 2024 • [ ransomware, malware ] Pittsburgh Regional Transit (PRT) is hit with a ransomware attack.
• Illinois Department Of Human Services April 25, 2024 • [ social, phishing, government ] The Illinois Department Of Human Services reveals that a phishing attack affected more than 1.1M public assistance clients.
• Multiple Organizations December 19, 2024 • [ hack, malware, technology ] The developers of Rspack reveal that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware.
• Adam Griffin May 6, 2024 • [ social, phishing, finance ] Adam Griffin, a crypto investor is robbed of nearly $500,000 in cryptocurrencies after a scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him to click yes to a Google prompt on his mobile device.
• GemPad December 17, 2024 The Gem Pad token launchpad is exploited for an estimated loss of $2.2M in crypto assets.
• Defense sector organization in Turkey November 18, 2024 Researchers at Proofpoint discover a sophisticated phishing attack targeting a Turkish defense sector organization via the MiyaRAT, carried out by the threat actor TA397, a.k.a. Bitter, using a Madagascar lure, and delivering malware through advanced mechanisms involving NTFS Alternate Data Streams (ADS) and scheduled tasks.
• Regional Care September 18, 2024 • [ leak, healthcare ] Nebraska-based healthcare insurance firm Regional Care discloses a data breach impacting more than 225,000 individuals as a result of an incident identified in mid-September 2024.
• RIBridges (Rhode Island's Integrated Eligibility System) December 13, 2024 • [ ransomware, malware, government ] Rhode Island is warning that its RIBridges system, managed by Deloitte, suffered a data breach exposing residents' personal information after the Brain Cipher ransomware gang hacked its systems.
• PIH Health December 1, 2024 • [ ransomware, malware, healthcare ] Threat actors claim they stole 17 million patient records from PIH Health, a southern California regional healthcare provider that is still struggling with IT and phone systems outages that have been disrupting patient care since the organization was hit by a ransomware attack on Dec. 1.
• Undisclosed Organization December 13, 2024 Researchers at Trend Micro discover an incident where an attacker used social engineering via a Microsoft Teams call to impersonate a users client and gain remote access to their system via the DarkGate malware.
• Peruvian University of Applied Sciences December 9, 2024 • [ hack, education ] The Peruvian University of Applied Sciences investigates a data breach, stating that hackers stole student data including names, emails and copies of university IDs.