-
Jollibee Group
June 23, 2024
•
[ leak, retail ]
The Jollibee Group begins investigates a cybersecurity incident that may have compromised the records of millions of customers.
-
Bitcoin Depot
June 23, 2024
•
[ data leak ]
Bitcoin Depot reported a data breach that occured in June 2024 after completing an investigation on July 18, 2024. Customer data stolen affecting 27,000 individuals including personal information.
-
Town of Apex
June 23, 2024
•
[ ransomware, unauthorized access, data breach ]
The Town of Apex experienced a ransomware event in which unauthorized actors accessed town systems from June 23 to July 2, 2024, uploaded town data to a cloud storage provider, and potentially affected personal information of about 22,000 residents; Apex later recovered the data through court action.
-
BtcTurk
June 22, 2024
Turkeys biggest cryptocurrency market BtcTurk says that their exchange had been hacked, with the assets stolen possibly amounting to nearly 51 million euros.
-
Zacks (2024)
June 22, 2024
•
[ leak, finance ]
In June 2024, the investment research company Zacks was allegedly breached, and data was later published to a popular hacking forum. This comes after a separate Zacks data breach confirmed by the organisation in 2023 with the subsequent breach disclosing millions of additional records representing a superset of data from the first incident. The 2024 breach included 12M unique email addresses along with IP and physical addresses, names, usernames, phone numbers and unsalted SHA-256 password hashes. Zacks did not respond to multiple attempts to contact them about the incident.
-
Catholic Charities of Southern Nevada
June 22, 2024
•
[ data leak, PII/PHI exposure ]
Suspicious activity detected June 22, 2024; later notice confirms sensitive PII/PHI impacted.
-
Japan Aerospace Exploration Agency (JAXA)
June 21, 2024
•
[ hack, government ]
The Japanese space agency JAXA has been hit by a series of cyberattacks since it reported a cyber incident during November 2023.
-
Pinnacle Orthopaedics & Sports Medicine Specialists
June 21, 2024
•
[ ransomware, malware, healthcare ]
Pinnacle Orthopaedics & Sports Medicine Specialists is hit with an INC ransomware attack.
-
Acadian Ambulance
June 21, 2024
•
[ ransomware, malware, healthcare ]
Acadian Ambulance is hit with a Daixin ransomware attack. The threat actors claim to have stolen 10 million records.
-
Undisclosed third-party of Accenture
June 20, 2024
•
[ leak, misconfiguration, technology ]
A threat actor named '888' claims to have extracted contact details of 33,000 current and former employees of Accenture in a breach that involves a third-party firm.
-
Z-lib
June 20, 2024
•
[ leak, misconfiguration, technology ]
In June 2024, almost 10M user records from Z-lib were discovered exposed online. Now defunct, Z-lib was a malicious clone of Z-Library, a well-known shadow online platform for pirating books and academic papers. The exposed data included usernames, email addresses, countries of residence, Bitcoin and Monero cryptocurrency wallet addresses, purchases and bcrypt password hashes.
-
NewsBank
June 20, 2024
•
[ data leak, employee data, class action ]
Employee data breach at NewsBank discovered around July 1, 2024; investigation found unauthorized access June 20July 1, 2024 to systems holding employee PII (names, SSNs, DL, financial/credit-debit data; possible medical info). Class action reported Feb 20, 2025; no actor publicly identified.
-
Kraken
June 19, 2024
•
[ financial, misconfiguration, finance ]
The Kraken crypto exchange discloses that alleged security researchers exploited a zero-day website bug to steal $3 million in cryptocurrency and then refused to return the funds.
-
Apple
June 19, 2024
•
[ hack, manufacturing ]
The threat actor IntelBroker claims to have hacked Apple, allegedly gaining access to internal source code of three popular tools of Apple.com.
-
CDK Global
June 19, 2024
•
[ hack, retail ]
CDK Global suffers an additional breach as it was starting to restore systems shut down in an previous cyberattack.
-
Crown Equipment
June 19, 2024
•
[ hack, manufacturing ]
Forklift manufacturer Crown Equipment confirms that it suffered a cyberattack earlier this month that disrupted manufacturing at its plants.
-
Undisclosed T-Mobile vendor
June 19, 2024
T-Mobile denies it was breached or that source code was stolen after the threat actor IntelBroker claims to be selling stolen data from the telecommunications company. The data seems to have been stolen from a third-party vendor.
-
Amper
June 18, 2024
Spanish engineering and technology firm Amper Group falls victim to a cyberattack by the Black Basta group with the ransomware-as-a-service outfit stealing 650 gigabytes of sensitive data.
-
AMD
June 18, 2024
AMD is investigating whether it suffered a cyberattack after the threat actor IntelBroker put allegedly stolen data up for sale on a hacking forum, claiming it contains AMD employee information, financial documents, and confidential information.
-
Kansas City Police
June 18, 2024
The BlackSuit ransomware gang leaks Kansas City Police data in a failed ransom plot.
