-
Center for Vein Restoration
October 6, 2024
•
[ hack, healthcare ]
Vein care provider Center for Vein Restoration notifies over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.
-
Access Sports Medicine & Orthopaedics
October 5, 2024
•
[ ransomware, malware, healthcare ]
Access Sports Medicine & Orthopaedics informs more than 88,000 individuals that their information was compromised as a result of a cyberattack. The Inc Ransom ransomware gang claims responsibility for the attack.
-
LEGO
October 5, 2024
•
[ hack, misconfiguration, manufacturing ]
Cryptocurrency scammers briefly hack the LEGO website to promote a fake Lego token that could be purchased with Ethereum.
-
Mystic Valley Elder Services
October 5, 2024
•
[ leak, healthcare ]
Mystic Valley Elder Services suffers a data breach impacting many individuals.
-
Drug and Alcohol Treatment Service (DATS)
October 5, 2024
•
[ data leak, network intrusion, negligence ]
22,215 patient and employee records containing names, addresses, dates of birth, Social Security numbers, and medical treatment information were accessed during a network intrusion discovered October 2024 at Drug and Alcohol Treatment Service (DATS) in Scranton, Pennsylvania; no ransom demand or actor identified; eight class-action lawsuits filed in May 2025 alleged negligent data protection.
-
Duc Giang General Hospital
October 5, 2024
•
[ ransomware ]
In October 2024 cybercriminals attacked Duc Giang General Hospitals IT infrastructure, encrypting nine servers and causing major data loss and operational paralysis; no evidence of data exfiltration was reported.
-
Young Consulting (now Connexure)
October 4, 2024
•
[ ransomware, malware, technology ]
Young Consulting sends data breach notifications to 954,177 people who had their information exposed in a BlackSuit ransomware attack on April 10, 2024.
-
EigenLayer
October 4, 2024
•
[ hack, phishing, finance ]
EigenLayer team says it is investigating an unapproved selling activity of about 1.6 million of EigenLayers EIGEN tokens, worth about $5.7 million. In a subsequent update the company reveals that the unapproved token-selling incident was due to a hack, after a malicious attacker compromised an email thread involving an investors token transfer into custody.
-
Pacific Pulmonary Medical Group
October 4, 2024
•
[ ransomware, malware, healthcare ]
The Pacific Pulmonary Medical Group (PPMG) is hit with an Everest Team ransomware attack.
-
IdeaLab
October 4, 2024
•
[ ransomware, data leak ]
IdeaLab confirmed data theft from an Oct 2024 ransomware breach claimed by Hunters International. 137,000 files (~262.8 GB) stolen and leaked impacting employees/contractors and dependents.
-
American Water
October 3, 2024
American Water, the largest publicly traded U.S. water and wastewater utility company, is forced to shut down some of its systems after a cyberattack.
-
Wayne County
October 3, 2024
•
[ ransomware, malware, government ]
Wayne County in Michigan is dealing with an alleged ransomware attack that has shut down all government websites and limited the operations of several offices.
-
Bloom Hearing Specialists
October 3, 2024
•
[ ransomware, malware, healthcare ]
Bloom Hearing Specialists warns thousands of customers about a ransomware attack stealing sensitive data.
-
Universal Music Group
October 3, 2024
•
[ leak ]
Universal Music Group informs hundreds of individuals about a recent data breach impacting their personal information.
-
Vocational Training Center, or Berufsbildungszentrum (BBZ)
October 3, 2024
The Vocational Training Center, or Berufsbildungszentrum (BBZ), in the canton of Schaffhausen is the victim of a ransomware attack.
-
ADT
October 2, 2024
Home and small business security company ADT discloses it suffered a breach after threat actors gained access to its systems using stolen credentials and exfiltrated employee account data.
-
Red Barrels
October 2, 2024
•
[ hack, technology ]
Canadian video game developer Red Barrels warns that the development of its Outlast games will likely be delayed after the company suffered a cyberattack impacting its internal IT systems and data.
-
Charleston Area Medical Center
October 2, 2024
•
[ phishing, data leak ]
Phishing attack on multiple email users; unauthorized access to one mailbox between Oct 23, 2024, possibly exposing personal and health information. No other systems impacted.
-
Methodist Homes of Alabama and Northwest Florida
October 2, 2024
•
[ unauthorized access, healthcare data breach, network incident ]
Methodist Homes of Alabama and Northwest Florida reported an incident involving unauthorized access to its network between October 2 and October 14, 2024. The organization notified HHS on January 30, 2025 that 908 patients were affected, and later notified the Maine Attorney Generals Office in October 2025 that the incident affected 25,579 individuals in total.
-
Governments and armed forces, think tanks, academic researchers, and Ukrainian entities
October 1, 2024
•
[ espionage, malware, government ]
Researchers at Trend Micro reveal the details of a campaign carried out by the Russia-linked APT29 threat actor, leveraging malicious Remote Desktop Protocol (RDP) configuration files.
