-
Tibetans and Uyghurs Individuals
December 5, 2024
•
[ espionage, malware ]
Researchers at Trend Micro discover a previously undocumented threat activity cluster dubbed Earth Minotaur, leveraging the MOONSHINE exploit kit and an unreported Android-cum-Windows backdoor called DarkNimbus to facilitate long-term surveillance operations targeting Tibetans and Uyghurs.
-
Kash Patel
December 3, 2024
President-elect Donald Trumps FBI director pick, Kash Patel, is informed by the FBI itself that hed been targeted by Iranian threat actors.
-
Marin County Housing Authority
September 16, 2024
Threat actors steal $950,000 from Marin County Housing Authority.
-
Multiple e-commerce platforms
December 2, 2024
•
[ leak, retail ]
At least 100,000 customers' personal information, including credit cards, is believed to have been stolen from 11 e-commerce websites from multiple organizations in Japan including the coffee chain Tully's Coffee Japan and the national federation of fisheries cooperatives (JF Zengyoren).
-
European Space Agency
December 23, 2024
•
[ hack, xss, government ]
The European Space Agency's official web shop is hacked as it started to load a piece of JavaScript code that generates a fake Stripe payment page at checkout.
-
Kenton County School District
December 20, 2024
•
[ social, phishing, education ]
Personal data from current and former students in Kenton County School District are compromised in a phishing scheme.
-
Thai Government Officials
December 13, 2024
•
[ espionage, malware, government ]
Researchers at Netskope discover a campaign targeting Thai government officials through DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai.
-
Kitsap Mental Health Services (KMHS)
September 17, 2024
•
[ hack, healthcare ]
Kitsap Mental Health Services discloses to have suffered a cyberattack due to an unauthorized access to their network.
-
Byte Federal
September 30, 2024
US Bitcoin ATM operator Byte Federal discloses a data breach that exposed the data of 58,000 customers after its systems were breached using a GitLab vulnerability.
-
ConnectOnCall (a subsidiary of Phreesia)
May 12, 2024
•
[ leak, healthcare ]
Healthcare software as a service (SaaS) company Phreesia notifies over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall, acquired in October 2023.
-
Comisión Nacional de los Mercados y la Competencia (CNMC)
December 10, 2024
The Spanish authorities investigate the theft of two billion mobile phone account holder records in 240 gigabytes of data from the national market competition authority.
-
City of Clark Fork
November 15, 2024
•
[ social, phishing, government ]
The City of Clark Fork is scammed out of half a million dollars by a man posing as its construction contractor.
-
Kurita America
November 29, 2024
•
[ ransomware, malware, manufacturing ]
The U.S. subsidiary of Kurita Water, a Japanese water treatment company says ransomware actors have stolen data from systems and encrypted some servers.
-
Watsonville Community Hospital
December 4, 2024
•
[ hack, healthcare ]
Watsonville Community Hospital continues operations amid ongoing investigation into a cyberattack.
-
Express Services
December 4, 2024
•
[ hack ]
Express Services experiences a data breach when an unauthorized party accessed internal user accounts.
-
Romania's Presidential Elections
December 4, 2024
•
[ espionage, government ]
Romanias constitutional court annuls the first round of the countrys presidential election, citing Russian disinformation influence.
-
BT Group
December 4, 2024
•
[ ransomware, technology ]
BT Group confirmed that its BT Conferencing services were impacted in a ransomware incident by Black Basta.
-
Chemonics
December 3, 2024
•
[ hack, government ]
Chemonics, a large contractor for the U.S. government says a 2023 cyberattack exposed the critical personal information of more than 263,000 people.
-
AEAT (Spanish Tax Agency)
December 1, 2024
The ransomware group Trinity claims it stole 560 gigabytes of data from the AEAT.
-
American Addiction Centers (AAC)
September 23, 2024
•
[ ransomware, malware, healthcare ]
A ransomware attack on American Addiction Centers exposes the sensitive healthcare information of more than 400,000 people. The Rhysida ransomware gang claims responsibility for the attack.
