-
South African Department of Justice and Constitutional Development
May 1, 2024
•
[ hack, financial, government ]
The South African Department of Justice and Constitutional Development (DJ&CD) suffers a cyber security incident affecting child maintenance payments.
-
At least three Wyndham hotels
May 1, 2024
•
[ espionage, malware, hospitality ]
pcTattletale, a consumer-grade spyware app is found running on the check-in systems of at least three Wyndham hotels across the United States.
-
AddComm
May 1, 2024
Dutch bank ABN Amro says client data may have been compromised in a ransomware attack at third-party services provider AddComm.
-
Brosix and Chatox
May 1, 2024
•
[ hack, misconfiguration, technology ]
Brosix and Chatox promised secure messaging, but threat actors accessed unprotected backups containing highly sensitive pharmacy and patient communications
-
First Contact Health
May 1, 2024
•
[ phishing, unauthorized access, health data ]
Guernseys Office of the Data Protection Authority (ODPA) sanctioned First Contact Health after cyber criminals successfully targeted an employee email account in a phishing attack, gaining unauthorized access to confidential health data. The practice reported the breach to the ODPA in May 2024, and the unauthorized access was believed to have occurred at least five months earlier. The enforcement action cited failures in key security controls intended to prevent phishing-based account compromise.
-
Undisclosed contractor
April 30, 2024
The infamous IntelBroker threat actor claims to have breached a third-party contractor and stolen sensitive data belonging to two prominent banks in the United Kingdom: HSBC and Barclays.
-
Regional Cancer Center
April 30, 2024
•
[ ransomware, malware, healthcare ]
Details of at least 2 million patients with the Regional Cancer Center (RCC) are compromised, affecting 11 out of 14 servers and causing disruptions in many divisions, including the Radiation Department. The attackers demand a ransom.
-
El Centro Del Barrio (CentroMed)
April 30, 2024
•
[ hack, healthcare ]
San Antonio-based healthcare provider El Centro Del Barrio (which operates as CentroMed) is informing 400,000 patients that their personal and protected health information was compromised in a recent cyberattack.
-
City of Helsinki
April 30, 2024
•
[ leak, education ]
The City of Helsinki discloses it is investigating a data breach in its education division, which it discovered in late April 2024, impacting tens of thousands of students, guardians, and personnel.
-
Atrium Health
April 29, 2024
•
[ social, phishing, healthcare ]
Atrium Health sends notifications to patients who may have been impacted by a malicious email sent to employees in April, through which an unauthorized third party gained access to a group of employees emails.
-
Equinox
April 29, 2024
•
[ ransomware, malware, government ]
Equinox notifies clients and staff members about a data security incident on April 29 due to a LockBit 3.0 ransomware attack.
-
London Drugs
April 28, 2024
•
[ ransomware, malware, retail ]
Canadian pharmacy chain London Drugs closes all its retail stores to contain what it described as a "cybersecurity incident." One month later the LockBit ransomware operation claims responsibility for the attack.
-
Pueblo County School District 70
April 27, 2024
•
[ ransomware, malware, education ]
Pueblo County School District 70 is the victim of a ransomware attack.
-
Pike Finance
April 26, 2024
•
[ financial, finance ]
Pike Finance suffers its second exploit in three days, resulting in the loss of $1.68 million worth of digital assets.
-
Pacific Guardian Life Insurance
April 25, 2024
•
[ financial, hack, finance ]
Pacific Guardian Life Insurance says that 165,000 people had their financial info stolen in 2023 attack.
-
Kansas City Scout Traffic Management System
April 25, 2024
•
[ hack, government ]
The Kansas City Scout System is taken down by a cyberattack.for 3 months
-
Multiple Airlines
April 25, 2024
•
[ espionage, ddos, technology ]
State officials from Lithuania and Estonia blame Russia for GPS jamming of commercial flights.
-
European Parliament
April 25, 2024
The European Parliament discloses that an external recruitment application, dubbed PEOPLE, was breached in early 2024.
-
Keuka College
April 25, 2024
•
[ ransomware, malware, education ]
Keuka College discloses a ransomware attack, allegedly carried out by the LockBit ransomware operation.
-
Illinois Department Of Human Services
April 25, 2024
•
[ social, phishing, government ]
The Illinois Department Of Human Services reveals that a phishing attack affected more than 1.1M public assistance clients.
