-
European Space Agency
December 23, 2024
•
[ hack, xss, government ]
The European Space Agency's official web shop is hacked as it started to load a piece of JavaScript code that generates a fake Stripe payment page at checkout.
-
Kenton County School District
December 20, 2024
•
[ social, phishing, education ]
Personal data from current and former students in Kenton County School District are compromised in a phishing scheme.
-
Thai Government Officials
December 13, 2024
•
[ espionage, malware, government ]
Researchers at Netskope discover a campaign targeting Thai government officials through DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai.
-
Kitsap Mental Health Services (KMHS)
September 17, 2024
•
[ hack, healthcare ]
Kitsap Mental Health Services discloses to have suffered a cyberattack due to an unauthorized access to their network.
-
Byte Federal
September 30, 2024
US Bitcoin ATM operator Byte Federal discloses a data breach that exposed the data of 58,000 customers after its systems were breached using a GitLab vulnerability.
-
ConnectOnCall (a subsidiary of Phreesia)
May 12, 2024
•
[ leak, healthcare ]
Healthcare software as a service (SaaS) company Phreesia notifies over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall, acquired in October 2023.
-
Comisión Nacional de los Mercados y la Competencia (CNMC)
December 10, 2024
The Spanish authorities investigate the theft of two billion mobile phone account holder records in 240 gigabytes of data from the national market competition authority.
-
City of Clark Fork
November 15, 2024
•
[ social, phishing, government ]
The City of Clark Fork is scammed out of half a million dollars by a man posing as its construction contractor.
-
Kurita America
November 29, 2024
•
[ ransomware, malware, manufacturing ]
The U.S. subsidiary of Kurita Water, a Japanese water treatment company says ransomware actors have stolen data from systems and encrypted some servers.
-
Watsonville Community Hospital
December 4, 2024
•
[ hack, healthcare ]
Watsonville Community Hospital continues operations amid ongoing investigation into a cyberattack.
-
Express Services
December 4, 2024
•
[ hack ]
Express Services experiences a data breach when an unauthorized party accessed internal user accounts.
-
Romania's Presidential Elections
December 4, 2024
•
[ espionage, government ]
Romanias constitutional court annuls the first round of the countrys presidential election, citing Russian disinformation influence.
-
BT Group
December 4, 2024
•
[ ransomware, technology ]
BT Group confirmed that its BT Conferencing services were impacted in a ransomware incident by Black Basta.
-
Chemonics
December 3, 2024
•
[ hack, government ]
Chemonics, a large contractor for the U.S. government says a 2023 cyberattack exposed the critical personal information of more than 263,000 people.
-
AEAT (Spanish Tax Agency)
December 1, 2024
The ransomware group Trinity claims it stole 560 gigabytes of data from the AEAT.
-
American Addiction Centers (AAC)
September 23, 2024
•
[ ransomware, malware, healthcare ]
A ransomware attack on American Addiction Centers exposes the sensitive healthcare information of more than 400,000 people. The Rhysida ransomware gang claims responsibility for the attack.
-
Pittsburgh Regional Transit
December 19, 2024
•
[ ransomware, malware ]
Pittsburgh Regional Transit (PRT) is hit with a ransomware attack.
-
Illinois Department Of Human Services
April 25, 2024
•
[ social, phishing, government ]
The Illinois Department Of Human Services reveals that a phishing attack affected more than 1.1M public assistance clients.
-
Multiple Organizations
December 19, 2024
•
[ hack, malware, technology ]
The developers of Rspack reveal that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware.
-
Adam Griffin
May 6, 2024
•
[ social, phishing, finance ]
Adam Griffin, a crypto investor is robbed of nearly $500,000 in cryptocurrencies after a scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him to click yes to a Google prompt on his mobile device.
