-
Undisclosed Company
December 27, 2022
•
[ leak, government ]
A cybercrime forum listed for sale what a seller purports to be 30 million passenger records for users of India's railways, including names, email addresses, phone numbers and more.
-
Undisclosed company in financial services
December 26, 2022
•
[ ransomware, finance ]
The BlackCat ransomware gang publish the data of a compromised a company in financial services, and create a replica of the victim's site to publish stolen data on it.
-
Cott Systems
December 26, 2022
•
[ hack, technology ]
Cott Systems, a cloud-based solutions provider, informed its customers that an "organized cyberattack" had hit the company systems and resulted in "unusual activity" on its servers
-
Latvian Public Utilities Commission
December 26, 2022
•
[ hack, ddos, government ]
NoName057(16) claims to have conducted a DDoS attack against the website of a Latvian regulatory body.
-
RailYatri
December 26, 2022
•
[ leak, misconfiguration, technology ]
In December 2022, Indias government-approved online travel agency RailYatri suffered a data breach. The incident impacted over 31M customers and exposed 23M unique email addresses. Also impacted were names, genders, phone numbers and tickets purchased, including travel information and fares.
-
Port of Lisbon Administration (APL)
December 25, 2022
•
[ ransomware, malware, government ]
The Administration of the Port of Lisbon was hit by a ransomware attack leveraging financial reports, audits, budgets, contracts, cargo information, ship logs, crew details, customer PII (personally identifiable information), port documentation, email correspondence, and more.
-
Maybank
December 25, 2022
•
[ leak, finance ]
Communications and Digital minister Fahmi Fadzil said his ministry through the Personal Data Protection Department in collaboration with CyberSecurity Malaysia is seeking feedback from Maybank and Astro on the alleged data leaks to ensure the legitimacy of data ownership
-
-
Election Comission
December 25, 2022
•
[ leak, government ]
The Ministry of Communications and Digital (KKD) takes seriously the alleged data leak, via a website on December 25, that allegedly involves Maybank, Astro and the Election Commission (EC).
-
Polish Civil Aviation Authority
December 25, 2022
•
[ hack, ddos, government ]
NoName057(16) claims to have conducted DDoS attacks against the websites of eight Polish public institutions.
-
U.S. Branch of Toyota
December 25, 2022
•
[ leak, manufacturing ]
Toyota confirms that customer data was exposed in a third-party data breach after a threat actor leaked an archive of 240GB of stolen data on a hacking forum.
-
Polish Public Procurement Office
December 24, 2022
•
[ hack, ddos, government ]
NoName057(16) claims to have conducted DDoS attacks against the websites of seven Polish public institutions.
-
Bristol Community College
December 23, 2022
•
[ ransomware, malware, education ]
Bristol Community College is hit with a ransomware attack.
-
Twitter
December 23, 2022
•
[ hack, misconfiguration, technology ]
A threat actor claims to be selling public and private data of 400 million Twitter users scraped in 2021 using a now-fixed API vulnerability.
-
Ziedot
December 23, 2022
NoName057(16) claims to have conducted a DDoS attack against the website of a Latvian charity organization.
-
Albertsons Companies
December 23, 2022
•
[ hack, malware, retail ]
Albertsons Companies files a notice of data breach after learning that confidential information belonging to certain individuals was accessed by an unauthorized party following a malware attack.
-
Arnold Clark
December 23, 2022
The auto giants' computer system were wiped which resulted in the loss of thousands of customer details.
-
BAE Systems
December 23, 2022
•
[ hack, ddos, manufacturing ]
NoName057(16) claims to have conducted a DDoS attack against the website of a British munition manufacturer.
-
Minuteman Senior Services
December 22, 2022
•
[ hack, phishing, healthcare ]
Minuteman Senior Services confirms that an unauthorized individual gained access to the email account of an employee.
-
U.S. Healthcare Organizations
December 22, 2022
Pro-Russian threat actor group Killnet decided to advance their political goals by targeting American hospitals and healthcare organizations
