Full List

Search

Recent Breaches

• Military personnel in Ukraine December 18, 2024 • [ social, malware, government ] The Computer Emergency Response Team of Ukraine (CERT-UA) discloses that a threat actor tracked as UAC-0125 is leveraging Cloudflare Workers to trick military personnel in the country into downloading malware disguised as Army+, a mobile app that was introduced by the Ministry of Defence back in August 2024 in an effort to make the armed forces go paperless.
• "Tony" (undisclosed crypto investor) December 18, 2024 • [ social, phishing, finance ] A scammer impersonating Google manages to phish 45 bitcoins approximately $4,725,000 at todays value from Tony, a 42-year-old professional from northern California.
• Sturgis Hospital December 18, 2024 • [ hack, healthcare ] Sturgis Hospital reported that unauthorized access was detected in part of its network in December 2024. The hospital determined that files containing personal and medical data may have been viewed or copied. No encryption or operational disruption was reported.
• GemPad December 17, 2024 The Gem Pad token launchpad is exploited for an estimated loss of $2.2M in crypto assets.
• French Governmental and Critical Infrastructure December 16, 2024 • [ hack, ddos, government ] The hacktivist collective Holy League launches a DDoS campaign against French governmental and critical infrastructure.
• Undisclosed Targets in Germany December 16, 2024 • [ hack, ddos ] The hacktivist collective Holy League launches a DDoS campaign against undisclosed targets in Germany.
• Kaiser Permanente employees December 15, 2024 • [ social, malware, healthcare ] Researchers at Malwarebytes detect a malicious campaign targeting Kaiser Permanente employees via Google Search Ads.
• Concession Peugeot December 15, 2024 • [ ransomware, malware, retail ] Cicada3301 ransomware group claims responsibility for a data breach targeting Concession Peugeot (concessions.peugeot.fr), a prominent French automotive dealership linked to the Peugeot brand. The group claims to have stolen 35GB of sensitive data
• Two individuals in Serbia December 15, 2024 • [ hack, malware ] A Serbian journalist and an activist have their phones hacked by local authorities using a cellphone-unlocking device made by forensic tool maker Cellebrite.
• Microsoft/Google December 15, 2024 • [ hack, sqlinjection, technology ] The GhostRedirector group stealthily hijacked Windows servers using malwareRungan and Gamshento inject SEO content visible only to Googlebot, boosting gambling site rankings without user impact. Servers were targeted via SQL injection and privilege escalation exploits.
• Sunflower Medical Group December 15, 2024 • [ ransomware, data leak ] The Rhysida ransomware group attacked Sunflower Medical Group around 2024-12-15, exfiltrating approximately 3 TB of patient and administrative data and disrupting clinical systems. Suspicious activity was detected 2025-01-07 and public disclosure followed.
• Oral Roberts University December 15, 2024 • [ data leak ] Between December 15 and December 17, 2024, an unauthorized actor accessed ORU systems and took certain files. Investigation determined some files contained names and Social Security numbers. Notifications were mailed by February 19, 2025.
• BitView December 14, 2024 • [ insider, misconfiguration, technology ] In December 2024, the video sharing Community BitView suffered a data breach that exposed 63k customer records. Attributed to a backup taken by a previous administrator earlier in the year, the breach exposed email and IP addresses, bcrypt password hashes, usernames, bios, private messages, video comments and for some records, gender, date of birth and country of location.
• Undisclosed Organization December 13, 2024 Researchers at Trend Micro discover an incident where an attacker used social engineering via a Microsoft Teams call to impersonate a users client and gain remote access to their system via the DarkGate malware.
• RIBridges (Rhode Island's Integrated Eligibility System) December 13, 2024 • [ ransomware, malware, government ] Rhode Island is warning that its RIBridges system, managed by Deloitte, suffered a data breach exposing residents' personal information after the Brain Cipher ransomware gang hacked its systems.
• Thai Government Officials December 13, 2024 • [ espionage, malware, government ] Researchers at Netskope discover a campaign targeting Thai government officials through DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai.
• VectraRx Mail Pharmacy Services December 13, 2024 • [ data leak ] Unusual activity discovered Dec 13, 2024; review confirmed potential access/acquisition; notifications in Feb 2025.
• Integrated Oncology Network (multiple practices) December 13, 2024 • [ phishing, data leak ] Phishing incident Dec 1316, 2024 led to unauthorized access to a small number of email and SharePoint accounts; by late June 2025, notices mailed; HHS lists grew to 22 locations affecting 116,557 patients.
• Kelly & Associates Insurance Group, Inc. December 12, 2024 • [ data leak ] Kelly Benefits (Kelly & Associates Insurance Group, Inc.) disclosed that an unauthorized actor accessed its network between Dec 1217, 2024 and stole data affecting ~553,660 people. No encryption or operational disruption was reported; notifications began April 9, 2025.
• Telecom Namibia December 11, 2024 • [ ransomware, malware, technology ] Namibia Telecom is hit with a ransomware attack by the Hunters International gang.