Full List

Search

Recent Breaches

• Ukrainian Defense Companies and Security and Defense Forces December 7, 2024 • [ social, phishing, government ] The Computer Emergency Response Team of Ukraine (CERT-UA) discover a series of phishing emails targeting Ukrainian defense companies and security and defense forces with a fake NATO standards conference. Some recipients opened the phishing emails execiting the malicious RAR attachments.
• Port of Rijeka November 30, 2024 • [ ransomware, financial, leak ] The 8Base ransomware group hits Croatias Port of Rijeka, stealing sensitive data, including contracts and accounting info.
• ITO EN North America December 6, 2024 • [ ransomware, malware, manufacturing ] The Japanese corporation Ito En confirms that its U.S. subsidiary was hit with ransomware. The company is the largest producer of green tea in Japan and has subsidiaries in the U.S., Australia, China and Indonesia.
• Kirill Parubets December 5, 2024 Researchers at Citizen Lab reveal that after Kirill Parubets, a Russian programmer, was detained by Russia's Federal Security Service (FSB) for fifteen days and his phone confiscated, it was discovered that a new spyware, derived from Monokle, was secretly installed on his device upon its return.
• Tibetans and Uyghurs Individuals December 5, 2024 • [ espionage, malware ] Researchers at Trend Micro discover a previously undocumented threat activity cluster dubbed Earth Minotaur, leveraging the MOONSHINE exploit kit and an unreported Android-cum-Windows backdoor called DarkNimbus to facilitate long-term surveillance operations targeting Tibetans and Uyghurs.
• Kash Patel December 3, 2024 President-elect Donald Trumps FBI director pick, Kash Patel, is informed by the FBI itself that hed been targeted by Iranian threat actors.
• Marin County Housing Authority September 16, 2024 Threat actors steal $950,000 from Marin County Housing Authority.
• Multiple e-commerce platforms December 2, 2024 • [ leak, retail ] At least 100,000 customers' personal information, including credit cards, is believed to have been stolen from 11 e-commerce websites from multiple organizations in Japan including the coffee chain Tully's Coffee Japan and the national federation of fisheries cooperatives (JF Zengyoren).
• European Space Agency December 23, 2024 • [ hack, xss, government ] The European Space Agency's official web shop is hacked as it started to load a piece of JavaScript code that generates a fake Stripe payment page at checkout.
• Kenton County School District December 20, 2024 • [ social, phishing, education ] Personal data from current and former students in Kenton County School District are compromised in a phishing scheme.
• Thai Government Officials December 13, 2024 • [ espionage, malware, government ] Researchers at Netskope discover a campaign targeting Thai government officials through DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai.
• Kitsap Mental Health Services (KMHS) September 17, 2024 • [ hack, healthcare ] Kitsap Mental Health Services discloses to have suffered a cyberattack due to an unauthorized access to their network.
• Byte Federal September 30, 2024 US Bitcoin ATM operator Byte Federal discloses a data breach that exposed the data of 58,000 customers after its systems were breached using a GitLab vulnerability.
• ConnectOnCall (a subsidiary of Phreesia) May 12, 2024 • [ leak, healthcare ] Healthcare software as a service (SaaS) company Phreesia notifies over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall, acquired in October 2023.
• Comisión Nacional de los Mercados y la Competencia (CNMC) December 10, 2024 The Spanish authorities investigate the theft of two billion mobile phone account holder records in 240 gigabytes of data from the national market competition authority.
• City of Clark Fork November 15, 2024 • [ social, phishing, government ] The City of Clark Fork is scammed out of half a million dollars by a man posing as its construction contractor.
• Kurita America November 29, 2024 • [ ransomware, malware, manufacturing ] The U.S. subsidiary of Kurita Water, a Japanese water treatment company says ransomware actors have stolen data from systems and encrypted some servers.
• Watsonville Community Hospital December 4, 2024 • [ hack, healthcare ] Watsonville Community Hospital continues operations amid ongoing investigation into a cyberattack.
• Express Services December 4, 2024 • [ hack ] Express Services experiences a data breach when an unauthorized party accessed internal user accounts.
• Romania's Presidential Elections December 4, 2024 • [ espionage, government ] Romanias constitutional court annuls the first round of the countrys presidential election, citing Russian disinformation influence.