-
Ukrainian State Registers
December 19, 2024
•
[ hack, government ]
Suspected Russian threat actors from the XakNet collective launch one of the largest cyberattacks on Ukraines state services in recent months.
-
Telecom Namibia
December 11, 2024
•
[ ransomware, malware, technology ]
Namibia Telecom is hit with a ransomware attack by the Hunters International gang.
-
Concession Peugeot
December 15, 2024
•
[ ransomware, malware, retail ]
Cicada3301 ransomware group claims responsibility for a data breach targeting Concession Peugeot (concessions.peugeot.fr), a prominent French automotive dealership linked to the Peugeot brand. The group claims to have stolen 35GB of sensitive data
-
Texas Tech University Health Sciences Center
September 17, 2024
The Texas Tech University Health Sciences Center and its El Paso counterpart suffer a cyberattack that disrupted computer systems and applications, potentially exposing the data of 1.4 million patients.
-
Kaiser Permanente employees
December 15, 2024
•
[ social, malware, healthcare ]
Researchers at Malwarebytes detect a malicious campaign targeting Kaiser Permanente employees via Google Search Ads.
-
Framingham Heart Study, managed by Boston University
September 8, 2024
•
[ leak, education ]
Boston Universitys renowned Framingham Heart Study (FHS) is breached by threat actors, who gained access to the data of participantsboth living and deceasedof the countrys longest running, multigenerational heart study.
-
Granite School District
September 11, 2024
•
[ ransomware, malware, education ]
Granite School District discloses that a cyber attack affected all the students' records. The Rhysida ransomware gang claims responsibility for the attack.
-
Center for Vein Restoration
October 6, 2024
•
[ hack, healthcare ]
Vein care provider Center for Vein Restoration notifies over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.
-
Electrica Group
December 9, 2024
•
[ ransomware, malware, energy ]
Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack.
-
Ukrainian Defense Companies and Security and Defense Forces
December 7, 2024
•
[ social, phishing, government ]
The Computer Emergency Response Team of Ukraine (CERT-UA) discover a series of phishing emails targeting Ukrainian defense companies and security and defense forces with a fake NATO standards conference. Some recipients opened the phishing emails execiting the malicious RAR attachments.
-
Port of Rijeka
November 30, 2024
•
[ ransomware, financial, leak ]
The 8Base ransomware group hits Croatias Port of Rijeka, stealing sensitive data, including contracts and accounting info.
-
ITO EN North America
December 6, 2024
•
[ ransomware, malware, manufacturing ]
The Japanese corporation Ito En confirms that its U.S. subsidiary was hit with ransomware. The company is the largest producer of green tea in Japan and has subsidiaries in the U.S., Australia, China and Indonesia.
-
Kirill Parubets
December 5, 2024
Researchers at Citizen Lab reveal that after Kirill Parubets, a Russian programmer, was detained by Russia's Federal Security Service (FSB) for fifteen days and his phone confiscated, it was discovered that a new spyware, derived from Monokle, was secretly installed on his device upon its return.
-
Tibetans and Uyghurs Individuals
December 5, 2024
•
[ espionage, malware ]
Researchers at Trend Micro discover a previously undocumented threat activity cluster dubbed Earth Minotaur, leveraging the MOONSHINE exploit kit and an unreported Android-cum-Windows backdoor called DarkNimbus to facilitate long-term surveillance operations targeting Tibetans and Uyghurs.
-
Kash Patel
December 3, 2024
President-elect Donald Trumps FBI director pick, Kash Patel, is informed by the FBI itself that hed been targeted by Iranian threat actors.
-
Marin County Housing Authority
September 16, 2024
Threat actors steal $950,000 from Marin County Housing Authority.
-
Multiple e-commerce platforms
December 2, 2024
•
[ leak, retail ]
At least 100,000 customers' personal information, including credit cards, is believed to have been stolen from 11 e-commerce websites from multiple organizations in Japan including the coffee chain Tully's Coffee Japan and the national federation of fisheries cooperatives (JF Zengyoren).
-
European Space Agency
December 23, 2024
•
[ hack, xss, government ]
The European Space Agency's official web shop is hacked as it started to load a piece of JavaScript code that generates a fake Stripe payment page at checkout.
-
Kenton County School District
December 20, 2024
•
[ social, phishing, education ]
Personal data from current and former students in Kenton County School District are compromised in a phishing scheme.
-
Thai Government Officials
December 13, 2024
•
[ espionage, malware, government ]
Researchers at Netskope discover a campaign targeting Thai government officials through DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai.