-
Rutherford County Schools
November 25, 2024
•
[ hack, education ]
Rutherford County Schools confirm to be dealing with a network and systems disruption since November 25.
-
Richmond University Medical Center
May 6, 2024
•
[ ransomware, malware, healthcare ]
The Richmond University Medical Center in New York is investigating a ransomware attack since May 2023 and it recently determined that the incident resulted in a data breach affecting more than 670,000 people.
-
Keesal, Young & Logan
June 7, 2024
The law firm Keesal, Young & Logan discloses that it recently detected a data breach, and an investigation showed that more than 316,000 people were impacted. Threat actors may have obtained names, Social Security numbers, drivers license numbers, financial account information and other data.
-
Minneapolis Park and Recreation Board
November 20, 2024
•
[ ransomware, malware, government ]
The RansomHub operation takes credit for a damaging attack on the Minneapolis Park and Recreation Board.
-
Wirral University Teaching Hospital
November 25, 2024
•
[ hack, healthcare ]
Major UK healthcare provider Wirral University Teaching Hospital (WUTH), part of the NHS Foundation Trust, suffers a cyberattack that causes a systems outage leading to postponing appointments and scheduled procedures.
-
Undisclosed prisons in the U.K.
November 23, 2024
•
[ leak, government ]
Confidential prison layouts in the U.K. are leaked onto the dark web.
-
Walsworth Publishing Company
February 9, 2024
Commercial printing firm Walsworth Publishing Company discloses a data breach affecting over 107,000 individuals, after the company discovered that its website and purchasing page had been compromised.
-
Blue Yonder
November 21, 2024
•
[ ransomware, malware, technology ]
Supply chain management firm Blue Yonder warns that a ransomware attack caused significant disruption to its services, with the outages impacting grocery store chains in the UK.
-
Crypto users in Linkedin
November 22, 2024
•
[ financial, social, finance ]
Researchers at Microsoft reveal that the North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of cryptocurrency as part of social engineering campaigns orchestrated over a six-month period.
-
The Real World
November 21, 2024
Threat actors break into The Real World, far-right influencer Andrew Tates online university, steal user data on close to 800,000 users, and flood chats with emojis.
-
Human rights groups, private security companies, and state and educational institutions in Central Asia, East Asia, and Europe
November 21, 2024
•
[ espionage, malware, government ]
Researchers at Recorded Future identify an ongoing Russia-linked cyber-espionage campaign targeting human rights groups, private security companies, and state and educational institutions in Central Asia, East Asia, and Europe using custom malware.
-
Mexico Legal Affairs Office
November 20, 2024
•
[ ransomware, malware, government ]
Mexicos president Claudia Sheinbaum says that the government is investigating an alleged ransomware hack of her administrations legal affairs office after what appeared to be samples of personal information from a database of government employees were posted online.
-
American Associated Pharmacies
November 18, 2024
•
[ ransomware, malware, retail ]
Ransomware group Embargo threatens to publish nearly 1.5 terabytes of data allegedly stolen in an attack on American Associated Pharmacies, a collaborative of 2,000 independent pharmacies.
-
Library of Congress
November 17, 2024
The Library of Congress says that threat actors broke into its communications systems and were able to read its email correspondence with congressional offices for most of this year.
-
Undisclosed nuclear-related organization
October 1, 2024
•
[ espionage, malware, energy ]
Researchers at Kaspersky reveal that the Lazarus Group, the threat actor linked to the Democratic People's Republic of Korea (DPRK), has been observed leveraging a "complex infection chain" targeting at least two employees belonging to an unnamed nuclear-related organization. The attacks, part of Operation Dream Job, culminated in the deployment of a new modular backdoor referred to as CookiePlus,
-
Governments and armed forces, think tanks, academic researchers, and Ukrainian entities
October 1, 2024
•
[ espionage, malware, government ]
Researchers at Trend Micro reveal the details of a campaign carried out by the Russia-linked APT29 threat actor, leveraging malicious Remote Desktop Protocol (RDP) configuration files.
-
Ford X Account
December 31, 2024
•
[ hack, manufacturing ]
Ford confirms that its X account was briefly compromised, after posts referencing the Israel-Palestine war are published.
-
DEphoto
December 28, 2024
The threat actor known as 0mid16B breaches DEphoto, a U.K. photo business, twice in few days, acquiring the personal information of 555,952 customers.
-
Alder Hey Children’s Hospital
November 28, 2024
•
[ ransomware, malware, healthcare ]
Alder Hey Childrens Hospital says it is investigating claims that its systems may have been breached and that patient records and other information was stolen, after the ransomware group INC Ransom adds Alder Hey to its leak site.
-
Numocity
November 21, 2024
•
[ leak, technology ]
The threat actor named CyberN-----s claims to have breached Tesla leaking 116,000 rows of data. in reality the data belongs to Numocity, a manufacturer of EV charging software, middleware, smart charges and more.
