Recent Breaches
-
April 20, 2023 • Researchers from Mandiant reveal that the 3CX supply chain attack was caused by another supply chain compromise where suspected North Korean attackers breached the site of stock trading automation company Trading Technologies to push trojanized software builds.
-
April 20, 2023 • Even the Europa.eu website is observed serving Fortnite spam within the same campaign.
-
April 19, 2023 Rubino & Company files a notice of data breach after learning that confidential consumer information stored on the company's IT network was subject to unauthorized access.
-
April 19, 2023 • Europe's air-traffic control agency EUROCONTROL announces to be under attack from the Killnet pro-Russian attackers.
-
April 19, 2023 • IMA Financial Group files a notice of data breach after experiencing a data security incident resulting in confidential consumer data being made accessible to an unauthorized party.
-
April 19, 2023 • Coldiretti, the Italian organization of agricultural entrepreneurs, suffers a Play ransomware attack.
-
April 19, 2023 • New Horizons Medical files a notice of data breach after learning that a recent data security incident compromised the personal information of 12,317 New Horizons patients.
-
April 19, 2023 • Print management software developer PaperCut warns customers to update their software immediately, as hackers are actively exploiting two flaws, ZDI-CAN-18987 / PO-1216 and ZDI-CAN-19226 / PO-1219, to gain access to vulnerable servers. Later the attacks are attributed to the Cl0p ransomware gang.
-
April 18, 2023 • Collins Electrical Construction Company discloses a data breach stemming from an unauthorized access to the network.
-
April 18, 2023 The pro-Russian hacktivist group KillNet starts its campaign agan Italy and takes down multiple websites including the Italian Labour Ministry, Carabinieri, the Italian High Council of the Judiciary (Consiglio Superiore Della Magistratura), Azienda Trasporti Milanesi (ATM), multiple airports, several banks, the Ministry of Infrastructure and Transport.
-
April 18, 2023 • The UK National Cyber Security Centre (NCSC), US Cybersecurity and Infrastructure Security Agency (CISA), NSA, FBI, and Cisco warn of Russian state-sponsored APT28 hackers deploying a custom malware named 'Jaguar Tooth' on Cisco IOS routers, exploiting CVE-2017-6742, allowing unauthenticated access to the device.
-
April 18, 2023 • Huntington Ingalls Industries (HII) files a notice of data breach after learning that confidential consumer information stored on the company's computer network was accessed by an unauthorized party.
-
April 18, 2023 • The Ukraine's computer emergency response team, CERT-UA, identifies a cyber-espionage campaign carried on by an unidentified threat actor named UAC-0063, targeting an undisclosed government agency in Ukraine.
-
April 18, 2023 • The Royal ransomware gang adds Lake Dallas Independent School District in Texas to its leak site.
-
April 18, 2023 • The WebTPA Employer Services (WebTPA) suffers a data breach impacting close to 2.5 million individuals.
-
April 17, 2023 • Pineland Schools is added to the LockBit ransomware site with some files as proof of claim. The attackers claim to have 64GB of data.
-
April 17, 2023 • Uniondale Union Free School District (UUFSD) in New York is added to Medusa's leak site with some files leaked.
-
April 17, 2023 • Point32Health, a New England health insurance firm serving more than two million people, is dealing with a ransomware attack impacting several of its systems.
-
April 17, 2023 • The Chattanooga Heart Institute notifies more than 170,000 patients and others that hackers may have stolen their sensitive personal and medical information in a cyberattack detected in April. The Karakurt ransomware group claimed credit for the hack a month later.
-
April 17, 2023 • MAC Pizza Management files a notice of data breach after learning that confidential information belonging to thousands of people was compromised following a ransomware attack.