-
Mangatoon
May 13, 2022
In May 2022, the Hong Kong based Manga service Mangatoon suffered a data breach that exposed 23M subscriber records. The breach exposed names, email addresses, genders, social media account identities, auth tokens from social logins and passwords stored as salted MD5 hashes. Mangatoon did not respond to multiple attempts to make contact regarding the breach.
-
Arizona Health Advantage Inc.
May 12, 2022
•
[ leak, healthcare ]
Arizona Health Advantage, also known as Arizona Priority Care (APC) and AZPC Clinics notifies several health plans of a recent data breach that impacted nearly 11,000 individuals in total.
-
Mission School District
May 12, 2022
•
[ social, phishing, education ]
The Mission School District suffers a phishing attack, and teachers' emails are exploited to send out additional phishing messages.
-
Venus Protocol
May 12, 2022
Venus Protocol, a decentralized money market, announces that about $11 million has been lost due to people exploiting the historic collapse of the Luna cryptocurrency and its sister stablecoin UST.
-
Cameron County Elections Department
May 12, 2022
•
[ hack, government ]
The Cameron County Elections Department acknowledges a security breach in which someone gained access to files containing the personal identifying information of staff members and poll workers handled by Easy Vote, a company that provides poll worker management software.
-
Cardiovascular Associates (CVA)
May 12, 2022
•
[ hack, healthcare ]
Cardiovascular Associates (CVA) files a notice of data breach after the company learned that certain systems within its network were subject to unauthorized access.
-
Quantum Imaging & Therapeutic Associates (QITA)
May 12, 2022
•
[ leak, healthcare ]
Quantum Imaging & Therapeutic Associates (QITA) notifies patients of a data breach detected on October 7, 2021.
-
The Springs Living
May 12, 2022
•
[ hack, misconfiguration, healthcare ]
The Springs Living reports a data breach after an unauthorized party gained access to sensitive information on the company's computer network.
-
Ziedot
May 12, 2022
•
[ ddos, finance ]
A Latvian charity, which facilitates donations for Ukraine, was hit by a DDoS attack after it had started to collect donations for the demolition of Victory Park - a Soviet monument. On the same day, a list of around 100 Latvian organizations was posted across Russian websites calling for DDoS attacks.
-
Trans Technology Pte Ltd.
May 11, 2022
•
[ ransomware, leak, malware ]
Vice Society encrypts network and threatens to leak data on their dark web portal.
-
Russian Federal Research Institute
May 11, 2022
•
[ leak, government ]
Part of the Anonymous collective claims to have leaked 466 GB of emails from the branch of a Russian Federal Research Institute
-
Italian Institutional Websites
May 11, 2022
Using the Mirai malware to create a botnet, Killnet and Legion conducted a DDoS attack against several Italian institutional websites, including the Italian Senate, the Ministry of Defense, and the National Institute of Health. Their websites were taken offline and unreachable for a few hours.
-
Christus Health
May 11, 2022
•
[ ransomware, malware, healthcare ]
Christus Health is hit by a ransomware attack by Avos Locker. The gang publishes the leaked data on their website.
-
Omnicell
May 11, 2022
•
[ ransomware, malware, healthcare ]
Healthcare technology company Omnicell revealed in a filing with the United States Securities and Exchange Commission (SEC) that it recently fell victim to a ransomware attack.
-
Top Aces
May 11, 2022
•
[ ransomware, malware, manufacturing ]
Top Aces, a Canadian company that supplies fighter jets for airborne training exercises is hit with a LockBit ransomware attack.
-
Unnamed Jordanian diplomat
May 11, 2022
•
[ espionage, malware, government ]
Researchers from Fortinet discover a novel attack attributed to the Iranian hacking group known as APT34 group or Oilrig, targeting a Jordanian diplomat with custom-crafted tools.
-
AA Traveller
May 10, 2022
AA Traveller a website used for travel bookings, suffers a data breach when an authorized party accesses the internal information because of a vulnerability.
-
Gateway Ambulatory Surgery Center
May 10, 2022
•
[ leak, phishing, healthcare ]
Gateway Ambulatory Surgery Center reports a data breach after the company confirmed that patient data was leaked after a successful email phishing attack.
-
German companies in the automotive industry
May 10, 2022
Researchers from Checkpoint discover a years-long phishing campaign has targeted German companies in the automotive industry, attempting to infect their systems with password-stealing malware.
-
McKenzie Health System
May 10, 2022
McKenzie Health System informs 25,318 individuals regarding the theft of some of their protected health information (PHI) due to a recent security incident that interrupted the operations of a number of its systems.
