VectraRx Mail Pharmacy Services
December 13, 2024
•[ data leak ]
Unusual activity discovered Dec 13, 2024; review confirmed potential access/acquisition; notifications in Feb 2025.
Bybit
February 21, 2025
•[ data leak ]
Bybit disclosed major security breach; services restored and recovery efforts reported shortly after.
Telecom / ISP / cloud providers in Switzerland
January 20, 2025
•[ DDoS ]
Over 1,400 distributed denial-of-service attacks observed during WEF in Davos, targeting telcos and cloud providers using amplification and TCP floods, peaking at ~426 Gbps in reconnaissance, then ~24 Gbps during sessions.
Supreme Administrative Court of Bulgaria
February 20, 2025
•[ ransomware, data leak ]
RansomHouse used White Rabbit ransomware against Bulgarias Supreme Administrative Court on Jan 27, encrypting ~140 computers; group posted employee-related files as proof of data theft. Court remained operational via paper processes; investigation into data leakage ongoing.
U.S. Coast Guard
February 14, 2025
•[ data leak ]
Coast Guards Direct Access system was breached on 02/14/2025, exposing financial/PII and delaying pay for 1,135 members; system was taken offline while CG Cyber Command & CGIS investigated; offline payments processed and security measures pursued; no attribution yet.
Insight Partners
January 16, 2025
•[ ransomware, social engineering, data leak ]
On January 16, 2025, Insight Partners detected a cyberattack following a social engineering intrusion first traced to October 2024. Attackers exfiltrated sensitive files related to funds, management companies, portfolio companies, banking and tax records, and personally identifiable data of employees, partners, and investors. More than 12,000 individuals were affected. The incident escalated into a ransomware attack, with systems partially encrypted before containment. No named threat group has been identified, but the actor is criminal and financially motivated.
Spyx
March 25, 2025
•[ data leak, stalkerware ]
Stalkerware service reportedly leaked user data including iCloud credentials and device identifiers.
Bank Indonesia
March 19, 2025
•[ ddos ]
DDoS activity briefly disrupted the Smart Rupiah exchange booking system, officials said.
College Hospital Costa Mesa
March 27, 2025
•[ data leak ]
California hospital disclosed a cybersecurity incident exposing patient information.
United Domestic Workers Of America
January 17, 2025
•[ data leak ]
Union reported unauthorized access; breach letters mailed March 27 to affected members.
Capital
March 27, 2025
•[ data leak ]
Ukrainian outlet said site was attacked after articles about a public figure.
Baylor Scott & White Texas Spine & Joint Hospital
January 10, 2025
•[ Email Compromise, Data Leak, Unauthorized Access ]
Unauthorized access to O365 mailbox exposed patient demographic and treatment information.
Cardi’s Furniture And Mattress
March 10, 2025
•[ data leak ]
Retailer mailed breach letters following cybersecurity incident affecting customer information.
Juniper Networks Routers
March 12, 2025
•[ backdoor ]
Chinese group UNC3886 deployed custom backdoors on outdated Juniper MX routers.
Beppe Caccia
March 11, 2025
•[ spyware, targeted attack ]
Italian report described alleged surveillance using commercial spyware against a public figure.
Pam Golding Properties
March 20, 2025
•[ data leak ]
South African real-estate firm investigated data leak after reports of compromise.
Southeast Series Of Lockton Companies LLC
November 20, 2024
•[ data leak ]
Insurance brokerage reported unauthorized access to files on an employee computer
University Of Valladolid
January 1, 2025
•[ cyberattack, service disruption ]
Spanish university continued recovery efforts after January cyberattack impacting services.
Penn-Harris-Madison School Corporation
March 3, 2025
•[ ransomware ]
Indiana school district reported ransomware network breach and service interruptions.
Abracadabra Finance
March 25, 2025
•[ cryptocurrency theft, exploit, DeFi ]
Hackers exploited Abracadabra cauldrons leading to multimillion-dollar cryptocurrency theft.
