Full List

Search

Recent Breaches

• Organizations, businesses, and individuals in Japan January 8, 2025 • [ espionage, government ] Japan's National Police Agency (NPA) and National Center of Incident Readiness and Strategy for Cybersecurity (NCSC) accuse a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019.
• STIIIZY January 1, 2025 • [ ransomware, retail ] Popular cannabis brand STIIIZY discloses a data breach after threat actors breached its point-of-sale (POS) vendor to steal customer information, including government IDs and purchase information. The Everest. ransomware group claims responsibility for the attack.
• PowerSchool December 19, 2024 • [ hack, education ] Education software firm PowerSchool confirms it suffered a cybersecurity incident that allowed a threat actor to steal the personal information of students and teachers from school districts using its PowerSchool SIS platform.
• Nodex January 6, 2025 • [ hack, leak, technology ] Ukrainian hacktivists, part of the Ukrainian Cyber Alliance group, announce they had breached Russian internet service provider Nodex's network and wiped hacked systems after stealing sensitive documents.
• United Nations' International Civil Aviation Organization (ICAO) January 7, 2025 • [ leak, government ] The United Nations' International Civil Aviation Organization (ICAO) announces it is investigating what it describes as a "reported security incident." 42,000 recruitment application data records are affected.
• Blacon High School January 17, 2025 • [ ransomware, education ] Blacon High School announces a temporary closure after falling victim to a "ransomware attack".
• International AIDS Vaccine Initiative (IAVI) January 15, 2025 • [ ransomware, malware, healthcare ] The International AIDS Vaccine Initiative (IAVI) discloses a ransomware attack. The INC Ransom group claims responsibility.
• MedSave Health Insurance January 1, 2025 • [ leak, healthcare ] A threat actor with the Moniker 0mid16B claims to have breached MedSave Health Insurance TPA Ltd (MedSave), stealing 561 gigabytes of databases, containing data of 10,617,943 people.
• City of Corvallis (Councilor Paul Schaffer) January 8, 2025 • [ hack, phishing, government ] A Corvallis city councilor's email is hacked by a scammer and used to reach nearly 3,500 email addresses in an attempt to steal the recipients' personal information.
• Turin Public Transport December 27, 2024 • [ hack, ddos, government ] Pro-Russia threat actors from Noname057(16) target Italian ministries, institutions, critical infrastructure websites and private organizations in coincidence with the visit of Ukrainian President Volodymyr Zelensky to Italy.
• Wolf Haldenstein Adler Freeman & Herz January 10, 2025 • [ leak ] Wolf Haldenstein Adler Freeman & Herz LLP ("Wolf Haldenstein") a U.S. Law Firm, reports it has suffered a data breach that exposed the personal information of nearly 3.5 million individuals to threat actors.
• City of Winston-Salem January 1, 2025 • [ hack, government ] Winston-Salem, North Carolina, residents are not able to pay their utility bills online after a post-Christmas cyberattack knocked the city's systems offline.
• BayMark Health Services September 1, 2024 • [ ransomware, healthcare ] BayMark Health Services, North America's largest provider of substance use disorder (SUD) treatment and recovery services, notifies an undisclosed number of patients that attackers stole their personal and health information in a September 2024 breach. The RansomHub operation claimed responsibility for the breach.
• Rosreestr January 6, 2025 • [ hack, government ] Silent Crow, a group of threat actors with unknown ties claims responsibility for breaching a Russian government agency, Rosreestr, which is responsible for managing property and land records.
• Medusind December 1, 2023 • [ leak, healthcare ] Medusind, a leading billing provider for healthcare organizations, notifies hundreds of thousands of individuals of a data breach that exposed their personal and health information more than a year ago, in December 2023. 360,934 individuals are affected.
• Argentina's airport security police (PSA) January 6, 2025 • [ financial, hack, government ] Argentina's airport security police (PSA) falls victim to a cyberattack that reportedly compromised the personal and financial data of its officers and civilian personnel.
• Mizuho Bank January 1, 2025 • [ financial, hack, ddos ] Mizuho Bank, Japan's third largest financial company, suffers a denial-of-service attack that disrupts online banking services for three hours.
• Resona Bank January 1, 2025 • [ hack, ddos, finance ] Osaka-based Resona Bank says a DDoS attack resulted in a network malfunction and impacted the functioning of its customer-facing My Gate application. The parent company Resona Holdings confirms the incident temporarily disrupted services at other company-owned banks, including Minato Bank, Kansai Mirai Bank and Saitama Resona Bank.
• Bank of America January 10, 2025 • [ leak, finance ] Bank of America notifies 414 individuals that their names, addresses, phone numbers, passport numbers, Social Security numbers, and their mortgage load numbers might have been compromised in a data breach at an unnamed third-party provider.
• NTT Docomo January 2, 2025 • [ hack, technology ] Japan's largest mobile carrier, NTT Docomo, reports that it is working to restore services after a cyberattack temporarily disrupted operations.