-
Johnson Financial Group
September 22, 2023
•
[ financial, misconfiguration, finance ]
Johnson Financial Group files a notice of data breach after discovering that the vulnerability in the file-transfer application MOVEit allowed attackers to access the personal information of more than 750,000 people.
-
T-Mobile authorized retailer
September 22, 2023
T-Mobile denies suffering another data breach following reports that a threat actor dubbed 'emo' leaked a large database (89 GB ZIP archive) allegedly containing T-Mobile employees' data, pointing the finger to an authorized retailer.
-
Hong Kong Consumer Council
September 22, 2023
•
[ ransomware, malware, government ]
The Hong Kong Consumer Council is hit with a ransomware attack. 25,000 individuals are affected.
-
Patelco Credit Union
September 22, 2023
•
[ leak, sqlinjection, finance ]
Sovos Compliance files another notice of data breach on behalf of Patelco Credit Union affected by a data breach at Sovos involving the MOVEit file transfer application.
-
Auckland University of Technology
September 21, 2023
•
[ ransomware, malware, education ]
The Auckland University of Technology is hit with a Monti ransomware attack.
-
City of Fort Lauderdale
September 21, 2023
•
[ financial, phishing, government ]
The Fort Lauderdale Police Department investigates a financial fraud incident involving the City of Fort Lauderdale, which lost $1.2 million dollars in a phishing scam.
-
Frax Outsourcing
September 21, 2023
•
[ hack, technology ]
Frax Outsourcing files a notice of data breach after determining that it was the recent victim of a cyberattack.
-
Progressive Leasing
September 21, 2023
•
[ ransomware, malware, finance ]
Progressive Leasing discloses a ransomware attack. The ALPHV ransomware gang claims responsibility for the attack.
-
Government of Bermuda
September 21, 2023
•
[ hack, government ]
The Government of British overseas territory Bermuda has linked a cyberattack affecting all its departments' IT systems since Thursday to hackers based out of Russia.
-
BMO Bank
September 20, 2023
BMO Bank files a notice of data breach after discovering that information entrusted to the company was accessible to an unauthorized party.
-
Balancer
September 20, 2023
•
[ financial, social, finance ]
Balancer, an ethereum-based automated market maker, on suffers a security breach that resulted in a loss of $238,000, attributing the compromise to a social engineering attack on the domain registrar EuroDNS.
-
Air Canada
September 20, 2023
•
[ hack ]
Air Canada discloses a cyber security incident in which hackers "briefly" obtained limited access to its internal systems.
-
Israeli Railways
September 20, 2023
The pro-Iranian Cyber Avengers hacktivist group claims to have hit the Israeli Railways, supposedly revealing information about the electrical infrastructure of the country's railroad network.
-
Lakeland Community College
September 20, 2023
•
[ ransomware, financial, malware ]
Lakeland Community College notifies 290,000 people of a data breach that may have compromised their personal, financial and health information. The Vice Society ransomware group claimed responsibility for the attack.
-
Donald Trump Jr.'s Twitter (X) account
September 20, 2023
The social media account of the former US President's son is apparently hacked and publishes some offensive posts, including that his dad had passed away.
-
Federal Labor Relations Authority
September 20, 2023
•
[ ransomware, malware, government ]
The INC ransomware gang adds the Federal Labor Relations Authority to their leak site.
-
Huawei
September 20, 2023
•
[ espionage, malware, technology ]
China's Ministry of State Security (MSS) accuses the U.S. of breaking into Huawei's servers, stealing critical data, and implanting backdoors since 2009.
-
Naz.API
September 20, 2023
In September 2023, over 100GB of stealer logs and credential stuffing lists titled "Naz.API" was posted to a popular hacking forum. The incident contained a combination of email address and plain text password pairs alongside the service they were entered into, and standalone credential pairs obtained from unnamed sources. In total, the corpus of data included 71M unique email addresses and 100M unique passwords.
-
Jerusalem Mental Health Center
September 19, 2023
•
[ hack, healthcare ]
The Kfar Shaul Mental Health Center and the Eitanim psychiatric hospital, both part of Jerusalem Mental Health Center, are hit with a cyber attack.
-
St. Luke's Health System
September 19, 2023
St. Luke's Health System issues a notice saying that it had been notified by Nuance of the MOVEit breach, affecting 4,679 of their patients.