Full List

Search

Recent Breaches

• Concorde Investment Partners March 2, 2023 • [ hack, phishing, finance ] Concorde Investment Partners, parent company to Concorde Investment Services, Concorde Asset Management, and Concorde Insurance Agency (collectively "Concorde"), files a notice of data breach after discovering that an unauthorized party was able to access an employee's email account.
• Bettuzzi And Partners March 2, 2023 • [ ransomware, malware, finance ] Bettuzzi And Partners, an Italian accounting firm is hit with a RansomEXX ransomware attack.
• GunAuction March 2, 2023 • [ hack, leak, retail ] Hackers breach GunAuction.com, a website that allows people to buy and sell guns, exposing the identities of 550,000 users.
• Vertex March 2, 2023 • [ ransomware, malware, healthcare ] Ascension postes a notice describing a "security incident" after learning that a ransomware cyberattack at Vertex, one of the company's vendors resulted in leaked patient data.
• WH Smith March 2, 2023 • [ leak, retail ] British retailer WH Smith suffers a data breach that exposes information belonging to current and former employees.
• Codman Square Health Center March 1, 2023 • [ ransomware, malware, finance ] Codman Square Health Center files a notice of data breach after learning that a ransomware attack targeting the company's IT system compromised confidential patient information.
• Azienda Ospedaliero-Universitaria di Parma (Hospital of Parma) March 1, 2023 • [ hack, healthcare ] The Hospital of Parma suffers a cyber attack.
• Chippewa County March 1, 2023 • [ leak, government, healthcare ] The Chippewa County Human Resources Division notifies that the laptop computer of an employee was compromised and 25-35MB of data was stolen from the device, including information protected under HIPAA.
• Poland's tax service March 1, 2023 • [ hack, ddos, government ] Poland's tax service website is hit by a DDoS attack believed to have been carried out by Russian hackers.
• Group 1001 March 1, 2023 • [ ransomware, malware, finance ] The insurance company Group 1001 restores the operations after suffering a ransomware attack.
• Einhaus Group March 1, 2023 • [ ransomware, malware, finance ] The Royal ransomware group encrypted all systems of the Germany-based Einhaus Group in March 2023, resulting in total operational paralysis across its 5,000 retail points. Despite paying ~200K in Bitcoin ransom, the company went bankrupt. Several Royal group suspects were arrested and crypto assets seized, but operations were not restored.
• Hatch Bank February 28, 2023 Hatch Bank, a digital-first bank that provides infrastructure for fintech companies offering their own brand credit cards, confirms that attackers exploited the Fortra's GoAnywhere CVE-2023-0669 zero-day vulnerability in the company's internal file transfer software that allowed access to thousands of customer Social Security numbers.
• Veris Residential February 28, 2023 • [ leak ] Veris Residential files a notice of data breach following a cybersecurity incident that leaked confidential consumer information.
• Association of Southeast Asian Nations (ASEAN) February 28, 2023 • [ espionage, government ] Chinese state-sponsored threat actors managed to breach the mail servers operated by the Association of Southeast Asian Nations, stealing a trove of data that may have contained strategic information about the economy and politics of member countries.
• Ingenico February 28, 2023 • [ ransomware, malware, technology ] The Russian ransomware gang Snatch claims to have stolen data from Ingenico, a merchant services technology company based in France.
• Oregon City February 28, 2023 • [ ransomware, malware, government ] Oregon City discloses to have been hit by a sophisticated ransomware attack.
• Thermea Spa February 28, 2023 Customers who purchased gift certificates from Thermea spa between early November and late February are told in an email that their credit card information may have been compromised, alongside their full names, phone numbers and email and street addresses.
• Montgomery General Hospital February 28, 2023 • [ ransomware, malware, healthcare ] Montgomery General Hospital is forced to take its systems offline after it was breached and hit by a ransomware attack.
• Compass Behavioral Health February 28, 2023 • [ leak, healthcare ] Compass Behavioral Health discloses a data security incident that involved the protected health information (PHI) of 1,064 patients.
• Federacion de Aseguradores Colombianos (Fasecolda) February 28, 2023 • [ hack, finance ] The Federacion de Aseguradores Colombianos (Fasecolda), an association for Colombian insurers, suffers a cyber attack.