-
Kitsap Mental Health Services (KMHS)
September 17, 2024
•
[ hack, healthcare ]
Kitsap Mental Health Services discloses to have suffered a cyberattack due to an unauthorized access to their network.
-
Byte Federal
September 30, 2024
US Bitcoin ATM operator Byte Federal discloses a data breach that exposed the data of 58,000 customers after its systems were breached using a GitLab vulnerability.
-
ConnectOnCall (a subsidiary of Phreesia)
May 12, 2024
•
[ leak, healthcare ]
Healthcare software as a service (SaaS) company Phreesia notifies over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall, acquired in October 2023.
-
Comisión Nacional de los Mercados y la Competencia (CNMC)
December 10, 2024
The Spanish authorities investigate the theft of two billion mobile phone account holder records in 240 gigabytes of data from the national market competition authority.
-
City of Clark Fork
November 15, 2024
•
[ social, phishing, government ]
The City of Clark Fork is scammed out of half a million dollars by a man posing as its construction contractor.
-
Kurita America
November 29, 2024
•
[ ransomware, malware, manufacturing ]
The U.S. subsidiary of Kurita Water, a Japanese water treatment company says ransomware actors have stolen data from systems and encrypted some servers.
-
Watsonville Community Hospital
December 4, 2024
•
[ hack, healthcare ]
Watsonville Community Hospital continues operations amid ongoing investigation into a cyberattack.
-
Express Services
December 4, 2024
•
[ hack ]
Express Services experiences a data breach when an unauthorized party accessed internal user accounts.
-
Romania's Presidential Elections
December 4, 2024
•
[ espionage, government ]
Romanias constitutional court annuls the first round of the countrys presidential election, citing Russian disinformation influence.
-
BT Group
December 4, 2024
•
[ ransomware, technology ]
BT Group confirmed that its BT Conferencing services were impacted in a ransomware incident by Black Basta.
-
Chemonics
December 3, 2024
•
[ hack, government ]
Chemonics, a large contractor for the U.S. government says a 2023 cyberattack exposed the critical personal information of more than 263,000 people.
-
AEAT (Spanish Tax Agency)
December 1, 2024
The ransomware group Trinity claims it stole 560 gigabytes of data from the AEAT.
-
American Addiction Centers (AAC)
September 23, 2024
•
[ ransomware, malware, healthcare ]
A ransomware attack on American Addiction Centers exposes the sensitive healthcare information of more than 400,000 people. The Rhysida ransomware gang claims responsibility for the attack.
-
Pittsburgh Regional Transit
December 19, 2024
•
[ ransomware, malware ]
Pittsburgh Regional Transit (PRT) is hit with a ransomware attack.
-
Illinois Department Of Human Services
April 25, 2024
•
[ social, phishing, government ]
The Illinois Department Of Human Services reveals that a phishing attack affected more than 1.1M public assistance clients.
-
Multiple Organizations
December 19, 2024
•
[ hack, malware, technology ]
The developers of Rspack reveal that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware.
-
Adam Griffin
May 6, 2024
•
[ social, phishing, finance ]
Adam Griffin, a crypto investor is robbed of nearly $500,000 in cryptocurrencies after a scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him to click yes to a Google prompt on his mobile device.
-
GemPad
December 17, 2024
The Gem Pad token launchpad is exploited for an estimated loss of $2.2M in crypto assets.
-
Defense sector organization in Turkey
November 18, 2024
Researchers at Proofpoint discover a sophisticated phishing attack targeting a Turkish defense sector organization via the MiyaRAT, carried out by the threat actor TA397, a.k.a. Bitter, using a Madagascar lure, and delivering malware through advanced mechanisms involving NTFS Alternate Data Streams (ADS) and scheduled tasks.
-
Regional Care
September 18, 2024
•
[ leak, healthcare ]
Nebraska-based healthcare insurance firm Regional Care discloses a data breach impacting more than 225,000 individuals as a result of an incident identified in mid-September 2024.
