Full List

Search

Recent Breaches

• Conduent January 22, 2025 • [ hack, government ] American business services and government contractor Conduent confirms that a recent outage resulted from what it described as a "cyber security incident."
• Embassies, lawyers, government-backed banks, and think tanks in Kyrgyzstan January 21, 2025 • [ espionage, government ] Researchers at Seqrite discover a previously undocumented threat actor dubbed Silent Lynx, linked to cyber attacks targeting various entities in Kyrgyzstan and Turkmenistan.
• Heart Centre January 16, 2025 • [ ransomware, malware, healthcare ] Heart Centre in Australia is hit with a DragonForce ransomware attack.
• New York Blood Center (NYBC) January 26, 2025 • [ ransomware, malware, healthcare ] The New York Blood Center (NYBC), one of the world's largest independent blood collection and distribution organizations, says a Sunday ransomware attack forced it to reschedule some appointments.
• CenterPoint Energy January 28, 2025 • [ leak, energy ] CenterPoint Energy, a large Texas energy company confirms it is investigating reports of stolen customer data that has been published on a cybercriminal forum after it was allegedly taken during the 2023 MOVEit breach.
• Hospital El Cruce January 24, 2025 • [ ransomware, malware, healthcare ] The Hospital El Cruce is hit with a Medusa ransomware attack.
• HCF Management January 24, 2025 • [ ransomware, malware, healthcare ] HCF Management healthcare facilities confirm a ransomware attack from the RansomHun group, with more than 70,000 patients affected.
• Matagorda County January 24, 2025 • [ hack, malware, government ] Matagorda County discloses a cyber attack involving a virus that has affected several internal systems.
• Apex Custom Software January 16, 2025 • [ ransomware, malware, technology ] Apex Custom Software is hit with a ransomware attack.
• Mizuno USA January 30, 2025 • [ ransomware, manufacturing ] Mizuno USA, a subsidiary of Mizuno Corporation, one of the world's largest sporting goods manufacturers, confirms in data breach notification letters that unknown attackers stole files from its network between August and October 2024. The BianLian claims responsibility for the attack.
• Smiths Group January 28, 2025 • [ hack, technology ] London-based engineering giant Smiths Group discloses a security breach after unknown attackers gained access to the company's systems.
• More than 570 computers linked to Mexico's government January 27, 2025 • [ hack, malware, government ] Threat actors infect more than 570 computers linked to Mexico's government domain gob.mx with infostealer malware, exposing sensitive data and login credentials.
• DeepSeek January 27, 2025 • [ hack, ddos, technology ] Chinese AI platform DeepSeek disables registrations on its DeepSeek-V3 chat platform due to an ongoing "large-scale" cyberattack targeting its services.
• Phemex January 23, 2025 • [ financial, hack, finance ] Singapore-based cryptocurrency platform Phemex is forced to pause some of its operations after a suspected cyberattack led to the theft of more than $85 million in digital coins.
• Marposs January 26, 2025 • [ ransomware, malware, manufacturing ] Marposs is hit with a ransomware attack
• Town of Ulster January 16, 2025 • [ ransomware, malware, government ] The Town of Ulster discloses a ransomware attack.
• Mortgage Investors Group December 11, 2024 • [ ransomware, malware, finance ] Mortgage Investors Group (MIG), one of the largest mortgage lenders in the Southeast U.S. says it suffered a cybersecurity incident last month that exposed troves of customer information. The Black Basta ransomware group claims responsibility for the attack.
• Avery Products Corporation January 13, 2025 • [ financial, hack, retail ] Avery Products Corporation warns it suffered a data breach after its website was hacked to steal customers' credit cards and personal information.
• Multiple Organizations January 13, 2025 • [ ransomware, misconfiguration, technology ] Researchers at Halcyon identify a new ransomware campaign targeting Amazon S3 buckets, and leveraging AWS' Server-Side Encryption with Customer Provided Keys (SSE-C) to encrypt data, demanding ransom payments for the symmetric AES-256 keys required to decrypt it.
• Roseltorg January 13, 2025 • [ hack, government ] Roseltorg, Russia's main electronic trading platform for government and corporate procurement confirms that it had been targeted by a cyberattack. Pro-Ukraine hacker group Yellow Drift claims responsibility.