-
Cardiology of Virginia
October 11, 2024
Beckers lists three ASC/practice breaches; RansomHub claimed and later leaked data tied to Cardiology of Virginia; notice filed 28-01-2025.
-
Hot Topic
October 21, 2024
•
[ leak, retail, technology ]
An alleged data breach exposes the personal information of 56,904,909 accounts for Hot Topic, Box Lunch, and Torrid customers, but the threat actors claims to have stolen 350 million records.
-
Royal Thai Police
December 1, 2024
•
[ espionage, malware, government ]
Yokai backdoor deployed via LNK / PDF decoy and DLL side-loading to infiltrate Thai police systems for espionage.
-
Gazprombank
December 5, 2024
•
[ hack, finance, espionage ]
Russian users report difficulties accessing services at Gazprombank, one of the countrys largest privately owned banks, following an alleged cyberattack by Ukraines military intelligence agency.
-
Undisclosed foreign fentanyl-precursor brokers
January 1, 2025
After identifying foreign-based online cybercriminals brokering the purchase and sale of chemicals used to manufacture fentanyl, CSE collected intelligence and conducted authorized cyber operations that disrupted and diminished their ability to operate. The brokers, countries, technical methods, affected systems, and duration were not disclosed.
-
Undisclosed foreign violent extremist group
January 1, 2025
CSE collected signals intelligence on a foreign extremist group spreading violent ideology and recruiting in Western countries, including Canada, and analyzed its network, reach, and vulnerabilities. An authorized cyber operation successfully undermined the group's credibility and limited its ability to radicalize and recruit new members. The group, country, technical method, affected systems, and duration were not disclosed.
-
Undisclosed ransomware-as-a-service group
January 1, 2025
•
[ ransomware, healthcare, transportation ]
CSE identified an undisclosed ransomware-as-a-service group responsible for more than 25 incidents affecting Canadian transportation, healthcare, pharmaceutical, and business organizations. Working with Five Eyes partners and law enforcement, CSE rendered the group's infrastructure inoperable and deleted a large amount of stolen data advertised for sale. CSE separately reported disruptions against parts of the infrastructure of 10 ransomware groups but did not state whether this group was included among them.
-
South Portland Public Schools
January 2, 2025
•
[ hack, education ]
Jan. 6 South Portland Public Schools took down its internet network Sunday after a cyber breach threatened student data. The decision came after the school department's cyber security service detected a network break over the weekend. Director of technology Andy Wallace said in a letter to parents sent Monday morning that the decision was made to protect "student and other data." "We have been ...
-
Kering
January 4, 2025
Kering, the French luxury group and parent company of brands including Gucci, Balenciaga, and Alexander McQueen, confirmed it was the victim of an unauthorized access incident. Reporting indicates the intrusion occurred in April 2025, and Kering stated it identified the unauthorized access in June 2025, describing it as temporary access to its systems with limited customer data accessed from some of its Houses. Exposed customer data was described as non-financial and included contact and profile information such as names, addresses, phone numbers, email addresses, and customer spending/total sales amounts. Kering said no bank account numbers, payment card data, or government-issued identification numbers were involved. The ShinyHunters cybercriminal group publicly claimed responsibility and suggested the breach related to ransom negotiations, but Kering reportedly denied engaging in negotiations. Kering stated it secured its IT systems, notified relevant data protection authorities, and informed affected customers.
-
Excelsior Orthopaedics
January 7, 2025
•
[ ransomware, healthcare, financial ]
Excelsior Orthopaedics suffered a ransomware attack attributed to the Monti threat group, which disrupted operations across all seven of its facilities in Western New York. The attackers exfiltrated approximately 300GB of sensitive data, including medical and financial records, and rendered core systems nonfunctional for several weeks, forcing staff to rely on manual processes during recocery
-
France Travail
January 12, 2025
•
[ leak, government, phishing ]
France Travail and the Union nationale des missions locales stated that personal data for about 1.6 million young people supported by mission locales could have been exposed following an IT intrusion. The organizations said an agent account was compromised and the attacker created two new accounts that enabled consultation of files for supported youths (including users registered with France Travail or recommended training via the Ouiform tool). The joint statement listed the specific data fields potentially exposed and said that no passwords or bank details were extracted, while warning affected individuals to be vigilant for phishing and identity-theft attempts.
-
University of Oklahoma
January 15, 2025
•
[ ransomware, education ]
The University of Oklahoma says it is taking steps to address unusual cyber activity it discovered on its network. The Fog ransomware group claims responsibility for the attack.
-
Hewlett Packard Enterprise (HPE)
January 16, 2025
•
[ hack, technology ]
The threat actor IntelBroker claims to have targeted Hewlett-Packard Enterprise (HPE) again, having access to the companys internal infrastructure.
-
Terry J. Dubrow, MD, A Medical Corporation
January 16, 2025
•
[ leak, healthcare ]
An unauthorized actor accessed a portion of the practice's network beginning January 16, 2025 and acquired patient records. The practice confirmed the affected information on July 27, 2026 and later notified patients.
-
MassDevelopment
January 18, 2025
•
[ ransomware, finance, government ]
MassDevelopment, the Massachusetts state development finance agency in Boston, was listed by the BianLian ransomware group on its leak site on Jan 18, 2025, which claimed theft of 4 TB of data. The agency has not publicly confirmed the claim.
-
TalkTalk
January 22, 2025
UK telecommunications company TalkTalk investigates a third-party supplier data breach after a threat actor begins selling alleged customer data on a hacking forum. The data was allegedly stolen from the Ascendon SaaS platform.
-
New York Blood Center (NYBC)
January 26, 2025
•
[ hack, healthcare ]
New York Blood Center said it does not have a "specific timetable for system restoration" following the attack, which has led to canceled appointments and delays
-
NorthBay Healthcare Corporation
January 29, 2025
•
[ leak, healthcare ]
NorthBay Healthcare Corporation in California notifies 569,012 people of a breach that occurred between January 11 to April 1, 2024.
-
San Jose Police Department
February 1, 2025
An off-duty San Jose police officer used a personal device to make unauthorized searches of the department's Flock license-plate database and disclosed the complainant's vehicle location to his cousin, the domestic-violence suspect. Police discovered the misuse through audit records after the woman's February 2025 complaint. February 1 is a discovery-month placeholder, not the verified access date. The officer was dismissed in April 2026.
-
Telus
February 1, 2025
•
[ hack, technology ]
Canadian telecom Telus notified some consumer customers in Sep 2026 that an attacker used compromised credentials to access their accounts between Feb 2025 and Jun 2026, viewing personal and billing data. Telus reset credentials, notified police and offered ID protection.
