Full List

Search

Recent Breaches

• Kaiser Permanente employees December 15, 2024 • [ social, malware, healthcare ] Researchers at Malwarebytes detect a malicious campaign targeting Kaiser Permanente employees via Google Search Ads.
• Framingham Heart Study, managed by Boston University September 8, 2024 • [ leak, education ] Boston Universitys renowned Framingham Heart Study (FHS) is breached by threat actors, who gained access to the data of participantsboth living and deceasedof the countrys longest running, multigenerational heart study.
• Granite School District September 11, 2024 • [ ransomware, malware, education ] Granite School District discloses that a cyber attack affected all the students' records. The Rhysida ransomware gang claims responsibility for the attack.
• Center for Vein Restoration October 6, 2024 • [ hack, healthcare ] Vein care provider Center for Vein Restoration notifies over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.
• ​Electrica Group December 9, 2024 • [ ransomware, malware, energy ] Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack.
• Ukrainian Defense Companies and Security and Defense Forces December 7, 2024 • [ social, phishing, government ] The Computer Emergency Response Team of Ukraine (CERT-UA) discover a series of phishing emails targeting Ukrainian defense companies and security and defense forces with a fake NATO standards conference. Some recipients opened the phishing emails execiting the malicious RAR attachments.
• Port of Rijeka November 30, 2024 • [ ransomware, financial, leak ] The 8Base ransomware group hits Croatias Port of Rijeka, stealing sensitive data, including contracts and accounting info.
• ITO EN North America December 6, 2024 • [ ransomware, malware, manufacturing ] The Japanese corporation Ito En confirms that its U.S. subsidiary was hit with ransomware. The company is the largest producer of green tea in Japan and has subsidiaries in the U.S., Australia, China and Indonesia.
• Kirill Parubets December 5, 2024 Researchers at Citizen Lab reveal that after Kirill Parubets, a Russian programmer, was detained by Russia's Federal Security Service (FSB) for fifteen days and his phone confiscated, it was discovered that a new spyware, derived from Monokle, was secretly installed on his device upon its return.
• Tibetans and Uyghurs Individuals December 5, 2024 • [ espionage, malware ] Researchers at Trend Micro discover a previously undocumented threat activity cluster dubbed Earth Minotaur, leveraging the MOONSHINE exploit kit and an unreported Android-cum-Windows backdoor called DarkNimbus to facilitate long-term surveillance operations targeting Tibetans and Uyghurs.
• Kash Patel December 3, 2024 President-elect Donald Trumps FBI director pick, Kash Patel, is informed by the FBI itself that hed been targeted by Iranian threat actors.
• Marin County Housing Authority September 16, 2024 Threat actors steal $950,000 from Marin County Housing Authority.
• Multiple e-commerce platforms December 2, 2024 • [ leak, retail ] At least 100,000 customers' personal information, including credit cards, is believed to have been stolen from 11 e-commerce websites from multiple organizations in Japan including the coffee chain Tully's Coffee Japan and the national federation of fisheries cooperatives (JF Zengyoren).
• European Space Agency December 23, 2024 • [ hack, xss, government ] The European Space Agency's official web shop is hacked as it started to load a piece of JavaScript code that generates a fake Stripe payment page at checkout.
• Kenton County School District December 20, 2024 • [ social, phishing, education ] Personal data from current and former students in Kenton County School District are compromised in a phishing scheme.
• Thai Government Officials December 13, 2024 • [ espionage, malware, government ] Researchers at Netskope discover a campaign targeting Thai government officials through DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai.
• Kitsap Mental Health Services (KMHS) September 17, 2024 • [ hack, healthcare ] Kitsap Mental Health Services discloses to have suffered a cyberattack due to an unauthorized access to their network.
• Byte Federal September 30, 2024 US Bitcoin ATM operator Byte Federal discloses a data breach that exposed the data of 58,000 customers after its systems were breached using a GitLab vulnerability.
• ConnectOnCall (a subsidiary of Phreesia) May 12, 2024 • [ leak, healthcare ] Healthcare software as a service (SaaS) company Phreesia notifies over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall, acquired in October 2023.
• Comisión Nacional de los Mercados y la Competencia (CNMC) December 10, 2024 The Spanish authorities investigate the theft of two billion mobile phone account holder records in 240 gigabytes of data from the national market competition authority.