Full List

Search

Recent Breaches

• Boone County School District December 19, 2024 • [ social, phishing, education ] Personal data from current and former students in Boone County School District are compromised in a phishing scheme.
• "Tony" (undisclosed crypto investor) December 18, 2024 • [ social, phishing, finance ] A scammer impersonating Google manages to phish 45 bitcoins approximately $4,725,000 at todays value from Tony, a 42-year-old professional from northern California.
• Military personnel in Ukraine December 18, 2024 • [ social, malware, government ] The Computer Emergency Response Team of Ukraine (CERT-UA) discloses that a threat actor tracked as UAC-0125 is leveraging Cloudflare Workers to trick military personnel in the country into downloading malware disguised as Army+, a mobile app that was introduced by the Ministry of Defence back in August 2024 in an effort to make the armed forces go paperless.
• Crypto Users February 1, 2024 • [ financial, malware, finance ] The threat actors behind the 2022 LastPass breach were able to steal an estimated $5.36 million in crypto assets from over 40 wallet addresses. The wave of attacks is said to have originated from the 2022 incident in the password manager service LastPass.
• Two individuals in Serbia December 15, 2024 • [ hack, malware ] A Serbian journalist and an activist have their phones hacked by local authorities using a cellphone-unlocking device made by forensic tool maker Cellebrite.
• LKQ Corporation November 13, 2024 Automobile parts giant LKQ Corporation disclosed that one of its business units in Canada was hacked, allowing threat actors to steal data from the company.
• SRP Federal Credit Union November 22, 2024 More than 240,000 people have information stolen during a cyberattack on SRP Federal Credit Union, one of the largest in South Carolina.
• Individuals in South Korea December 11, 2024 • [ financial, phishing, finance ] A South Korean law enforcement operation, dubbed Operation Midas, and carried out by the Korean Financial Security Institute (K-FSI), takes down a large-scale fraud network that extorted $6.3m from victims with fake online trading platforms.
• Senior American Political Figures August 1, 2024 • [ espionage, government ] The U.S. believes that the Chinese cyber espionage campaign Salt Typhoon targeted and recorded telephone calls of "very senior" American political figures.
• Multiple Romanian election sites, including bec.ro (Central Election Bureau), roaep.ro, and registrulelectoral.ro (voter registration) November 19, 2024 A report from Romanias Intelligence Service (SRI) says that the countrys election infrastructure was targeted by more than 85,000 cyberattacks with threat actors also obtaining access credentials for election-related websites and leaked them on a Russian forum less than a week before the first presidential election round.
• Multiple Organizations in the Cryptocurrency Space December 4, 2024 • [ financial, malware, finance ] The legitimate Solana JavaScript SDK is temporarily compromised in a supply chain attack, backdoored with code to steal cryptocurrency keys and drain wallets.
• Ukrainian State Registers December 19, 2024 • [ hack, government ] Suspected Russian threat actors from the XakNet collective launch one of the largest cyberattacks on Ukraines state services in recent months.
• Telecom Namibia December 11, 2024 • [ ransomware, malware, technology ] Namibia Telecom is hit with a ransomware attack by the Hunters International gang.
• Concession Peugeot December 15, 2024 • [ ransomware, malware, retail ] Cicada3301 ransomware group claims responsibility for a data breach targeting Concession Peugeot (concessions.peugeot.fr), a prominent French automotive dealership linked to the Peugeot brand. The group claims to have stolen 35GB of sensitive data
• Texas Tech University Health Sciences Center September 17, 2024 The Texas Tech University Health Sciences Center and its El Paso counterpart suffer a cyberattack that disrupted computer systems and applications, potentially exposing the data of 1.4 million patients.
• Kaiser Permanente employees December 15, 2024 • [ social, malware, healthcare ] Researchers at Malwarebytes detect a malicious campaign targeting Kaiser Permanente employees via Google Search Ads.
• Framingham Heart Study, managed by Boston University September 8, 2024 • [ leak, education ] Boston Universitys renowned Framingham Heart Study (FHS) is breached by threat actors, who gained access to the data of participantsboth living and deceasedof the countrys longest running, multigenerational heart study.
• Granite School District September 11, 2024 • [ ransomware, malware, education ] Granite School District discloses that a cyber attack affected all the students' records. The Rhysida ransomware gang claims responsibility for the attack.
• Center for Vein Restoration October 6, 2024 • [ hack, healthcare ] Vein care provider Center for Vein Restoration notifies over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.
• ​Electrica Group December 9, 2024 • [ ransomware, malware, energy ] Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack.