-
Presbyterian Healthcare Services
May 29, 2024
•
[ leak, healthcare ]
The information of over 300,000 Presbyterian Healthcare Services patients is compromised as a result of a data breach at law firm Thompson Coburn.
-
Seoul Facilities Corporation
June 28, 2024
•
[ hack, leak, ddos ]
Two teenagers hacked servers supporting Seoul Facilities Corporation's Ttareungyi public bike-sharing service between June 28 and June 29, 2024 after identifying a web vulnerability that permitted access to member information without normal authentication. Approximately 4.62 million member records were stolen. During the June 28-30 incident, a DDoS attack also caused Ttareungyi-related pages to be unavailable for about 80 minutes. One suspect later told police that curiosity and a desire to show off motivated his actions; police also investigated whether the data may have been intended for sale but found no evidence that it was distributed to third parties.
-
Scott County
July 11, 2024
Scott County reported unauthorized access to a health employee email account in July 2024.
-
Undisclosed individual
August 18, 2024
•
[ social, financial, phishing ]
A Washington, D.C. crypto investor lost over 4,100 bitcoin (over $240M) on Aug. 18, 2024 after callers posing as Google and Gemini support got access to his Google Drive and security codes. Ringleader Malone Lam faced a plea hearing; 18 people were charged.
-
Cardiology of Virginia
October 11, 2024
Beckers lists three ASC/practice breaches; RansomHub claimed and later leaked data tied to Cardiology of Virginia; notice filed 28-01-2025.
-
Hot Topic
October 21, 2024
•
[ leak, retail, technology ]
An alleged data breach exposes the personal information of 56,904,909 accounts for Hot Topic, Box Lunch, and Torrid customers, but the threat actors claims to have stolen 350 million records.
-
Royal Thai Police
December 1, 2024
•
[ espionage, malware, government ]
Yokai backdoor deployed via LNK / PDF decoy and DLL side-loading to infiltrate Thai police systems for espionage.
-
Gazprombank
December 5, 2024
•
[ hack, finance, espionage ]
Russian users report difficulties accessing services at Gazprombank, one of the countrys largest privately owned banks, following an alleged cyberattack by Ukraines military intelligence agency.
-
Undisclosed foreign fentanyl-precursor brokers
January 1, 2025
After identifying foreign-based online cybercriminals brokering the purchase and sale of chemicals used to manufacture fentanyl, CSE collected intelligence and conducted authorized cyber operations that disrupted and diminished their ability to operate. The brokers, countries, technical methods, affected systems, and duration were not disclosed.
-
Undisclosed foreign violent extremist group
January 1, 2025
CSE collected signals intelligence on a foreign extremist group spreading violent ideology and recruiting in Western countries, including Canada, and analyzed its network, reach, and vulnerabilities. An authorized cyber operation successfully undermined the group's credibility and limited its ability to radicalize and recruit new members. The group, country, technical method, affected systems, and duration were not disclosed.
-
Undisclosed ransomware-as-a-service group
January 1, 2025
•
[ ransomware, healthcare, transportation ]
CSE identified an undisclosed ransomware-as-a-service group responsible for more than 25 incidents affecting Canadian transportation, healthcare, pharmaceutical, and business organizations. Working with Five Eyes partners and law enforcement, CSE rendered the group's infrastructure inoperable and deleted a large amount of stolen data advertised for sale. CSE separately reported disruptions against parts of the infrastructure of 10 ransomware groups but did not state whether this group was included among them.
-
South Portland Public Schools
January 2, 2025
•
[ hack, education ]
Jan. 6 South Portland Public Schools took down its internet network Sunday after a cyber breach threatened student data. The decision came after the school department's cyber security service detected a network break over the weekend. Director of technology Andy Wallace said in a letter to parents sent Monday morning that the decision was made to protect "student and other data." "We have been ...
-
Kering
January 4, 2025
Kering, the French luxury group and parent company of brands including Gucci, Balenciaga, and Alexander McQueen, confirmed it was the victim of an unauthorized access incident. Reporting indicates the intrusion occurred in April 2025, and Kering stated it identified the unauthorized access in June 2025, describing it as temporary access to its systems with limited customer data accessed from some of its Houses. Exposed customer data was described as non-financial and included contact and profile information such as names, addresses, phone numbers, email addresses, and customer spending/total sales amounts. Kering said no bank account numbers, payment card data, or government-issued identification numbers were involved. The ShinyHunters cybercriminal group publicly claimed responsibility and suggested the breach related to ransom negotiations, but Kering reportedly denied engaging in negotiations. Kering stated it secured its IT systems, notified relevant data protection authorities, and informed affected customers.
-
Excelsior Orthopaedics
January 7, 2025
•
[ ransomware, healthcare, financial ]
Excelsior Orthopaedics suffered a ransomware attack attributed to the Monti threat group, which disrupted operations across all seven of its facilities in Western New York. The attackers exfiltrated approximately 300GB of sensitive data, including medical and financial records, and rendered core systems nonfunctional for several weeks, forcing staff to rely on manual processes during recocery
-
France Travail
January 12, 2025
•
[ leak, government, phishing ]
France Travail and the Union nationale des missions locales stated that personal data for about 1.6 million young people supported by mission locales could have been exposed following an IT intrusion. The organizations said an agent account was compromised and the attacker created two new accounts that enabled consultation of files for supported youths (including users registered with France Travail or recommended training via the Ouiform tool). The joint statement listed the specific data fields potentially exposed and said that no passwords or bank details were extracted, while warning affected individuals to be vigilant for phishing and identity-theft attempts.
-
University of Oklahoma
January 15, 2025
•
[ ransomware, education ]
The University of Oklahoma says it is taking steps to address unusual cyber activity it discovered on its network. The Fog ransomware group claims responsibility for the attack.
-
Hewlett Packard Enterprise (HPE)
January 16, 2025
•
[ hack, technology ]
The threat actor IntelBroker claims to have targeted Hewlett-Packard Enterprise (HPE) again, having access to the companys internal infrastructure.
-
Terry J. Dubrow, MD, A Medical Corporation
January 16, 2025
•
[ leak, healthcare ]
An unauthorized actor accessed a portion of the practice's network beginning January 16, 2025 and acquired patient records. The practice confirmed the affected information on July 27, 2026 and later notified patients.
-
MassDevelopment
January 18, 2025
•
[ ransomware, finance, government ]
MassDevelopment, the Massachusetts state development finance agency in Boston, was listed by the BianLian ransomware group on its leak site on Jan 18, 2025, which claimed theft of 4 TB of data. The agency has not publicly confirmed the claim.
-
TalkTalk
January 22, 2025
UK telecommunications company TalkTalk investigates a third-party supplier data breach after a threat actor begins selling alleged customer data on a hacking forum. The data was allegedly stolen from the Ascendon SaaS platform.
