Recent Breaches
-
May 11, 2024 • Sumo said that the following customer information was compromised by the breach: names, addresses, dates of birth, phone numbers, credit scores, as well as either passport, Medicare, or drivers licence details.
-
May 11, 2024 • Radiology practice disclosed that attackers had network access Nov 511, 2024 and copied files with PHI/PII; 171k people impacted; ransomware attribution Undetermined.
-
May 10, 2024 • The University of Siena is hit with a LockBit ransomware attack.
-
May 10, 2024 • Between May 10 and May 30 2024, unauthorized actors accessed the network of the San Francisco-Marin Food Bank, exposing personal data including Social Security numbers, IDs, and financial or medical details for approximately 60,180 individuals. The breach was discovered May 31 2024 and disclosed publicly in February 2025. The organization engaged cybersecurity experts and notified affected individuals; no misuse has been confirmed.
-
May 9, 2024 • Polands computer emergency response team, CERT-PL, reveals that it had observed a large-scale malware campaign targeting Polish government institutions, likely carried out by the hacker group APT28, associated with Russias military intelligence agency, the GRU.
-
May 9, 2024 Russia-aligned threat actors hijack at least 15 TV channels owned by Starlight Media. to broadcast a Victory Day parade in Moscow, commemorating the defeat of Nazi Germany in World War II. The attack is carried out compromising the Astra communication satellites owned and operated by SES, a Luxembourg-based company
-
May 9, 2024 • Balticom, a Latvian television network, is also hijacked to air the Moscow parade
-
May 9, 2024 • A cyber-attack disrupts auction house Christies attempts to sell art and other high-value items worth an estimated $840m. The RansomHub ransomware group claims responsibility for the attack.
-
May 9, 2024 • GhostAction abused malicious GitHub Actions workflows to exfiltrate thousands of secrets (incl. PyPI tokens). PyPI found no evidence of malicious package publishes, revoked affected tokens, and issued guidance; campaign window early Sept 2025
-
May 8, 2024 • Ascension, one of the largest private healthcare systems in the United States, takes some of its systems offline to investigate what it describes as a "cyber security event" confirmed to be a Black Basta ransomware attack.
-
May 7, 2024 • Pro-Russia threat actors target Kosovo government websites, including the websites of the president and prime minister, with DDoS attacks. The attacks are a retaliation for Kosovos support of Ukraine with military equipment.
-
May 7, 2024 • Coradix-Magnescan, a French company that provides medical radiological imaging, warns patients it is currently dealing with a cyberattack that risks complicating their appointments.
-
May 7, 2024 • Mobile medical care firm DocGo confirms it suffered a cyberattack after threat actors breached its systems and stole patient health data.
-
May 7, 2024 The Pro-Russia Hacktivists of NoName057(16) take down several italian websites including the Ministry of Made in Italy, the Financial Police, and the Ministry of Infrastructure and Transport.
-
May 7, 2024 • Spanish multinational electrical utility Iberdrola says a cyber incident to a supplier in the beginning of May resulted in a data breach involving 850,000 Spanish customers.
-
May 6, 2024 • Adam Griffin, a crypto investor is robbed of nearly $500,000 in cryptocurrencies after a scammer called using a real Google phone number to warn his Gmail account was being hacked, sent email security alerts directly from google.com, and ultimately seized control over the account by convincing him to click yes to a Google prompt on his mobile device.
-
May 6, 2024 • The Richmond University Medical Center in New York is investigating a ransomware attack since May 2023 and it recently determined that the incident resulted in a data breach affecting more than 670,000 people.
-
May 4, 2024 • The Mlama I Ke Ola Health Center discloses to have suffered a cyberattack
-
May 3, 2024 • An individual loses around $71 million worth of bitcoin in what appears to be an address poisoning attack. A week later the author of the attack returns the stolen bounty.
-
May 3, 2024 • The City of Wichita, Kansas, discloses it was forced to shut down portions of its network after suffering a weekend ransomware attack. The LockBit ransomware operation claims responsibility for the attack.