Federal Security Service (FSB)
March 15, 2022
•[ hack, ddos, government ]
The Anonymous collective takes responsibility for taking down top Russian government websites in a series of DDoS attacks. The list of the targets include the official website of the Federal Security Service (FSB), the Stock Exchange, the Analytical Center for the Government of the Russian Federation, and the Ministry of Sport of the Russian Federation.
Heriot-Watt University
March 15, 2022
•[ education ]
Heriot-Watt University in Scotland is hit by a serious security incident.
Regional Ministry of Health
March 15, 2022
•[ hack, misconfiguration, government ]
A hacker dubbed Spielerkid89 remotely accesses a computer belonging to a regional Ministry of Health in Russia, exploiting a VNC Server without authentication
RiverKids Pediatric Home Health
March 15, 2022
•[ hack, phishing, healthcare ]
RiverKids Pediatric Home Health notifies 3,494 patients that some of their protected health information has potentially been viewed or stolen as a result of an email security incident.
Ask.FM?
March 14, 2022
•[ leak, technology ]
A seller called "Data," lists a database on a forum with the data of 350 million users allegedly obtained from Ask.FM.
Israel Government web sites
March 14, 2022
•[ hack, ddos, government ]
Israel's National Cyber Directorate reveals that the country suffered a cyber attack that briefly took down a number of government websites.
Newman Regional Health (NRH)
March 14, 2022
•[ hack, healthcare ]
Newman Regional Health (NRH) notifies 52,224 patients that unauthorized individuals have gained access to certain employee email accounts that contained protected health information.
Elevate Services
March 14, 2022
•[ ransomware, malware, technology ]
Elevate Services, Inc. experienced what appears to have been a ransomware attack that leaked confidential information belonging to certain consumers.
Undetermined
March 14, 2022
•[ hack, malware, finance ]
ESET researchers have uncovered yet another destructive data wiper that was used in attacks against a limited number of organizations in Ukraine. No code similarities to either HermeticWiper or IsaacWiper were identified. There's evidence to suggest that the threat actors behind CaddyWiper infiltrated the target's network before executing the wiper.
Law Enforcement Health Benefits Inc. (LEHB)
March 14, 2022
•[ ransomware, malware, healthcare ]
Law Enforcement Health Benefits Inc. (LEHB) notifies plan members of a September 2021 ransomware attack that impacted over 85,000 individuals.
Parker Hannifin
March 14, 2022
The Conti ransomware group leaks several gigabytes of files allegedly stolen from US industrial components giant Parker Hannifin.
Viva Air
March 14, 2022
•[ ransomware, leak, malware ]
The RansomEXX ransomware gand drops leaked data samples on their TOR site.
Viva Air
March 14, 2022
•[ ransomware, malware ]
In March 2022, the now defunct Colombian airline Viva Air suffered a data breach and subsequent ransomware attack. Among a trove of other ransomed data, the incident exposed a log of 2.6M transactions with 932k unique email addresses, physical and IP addresses, names, phone numbers and partial credit card data (last 4 digits).
Undetermined
March 13, 2022
•[ espionage, finance ]
A suspected Russian nation state actor stole data from a nuclear safety organization. "EnergeticBear" compromised this entity in December 2021 and stole data from it from December through mid-March.
East Tennessee Children's Hospital (ETCH)
March 13, 2022
•[ hack, healthcare ]
East Tennessee Children's Hospital is the victim of an information technology security issue
Rosneft Deutschland
March 12, 2022
•[ hack, malware, energy ]
The German Federal Office for Information Security (BSI) confirms that the local subsidiary of the Russian energy giant Rosneft has been hit by a cyberattack, after the Anonymous collective claims to have stolen 20 terabytes of data.
BC International Group
March 11, 2022
•[ leak, ransomware, malware ]
Documents Leaked on ransomware site.
Whitefish School District
March 11, 2022
•[ social, phishing, education ]
Whitefish School District reports a data breach after an investigation discovered that an employee's computer had been accessible to an attacker after the employee had fallen for a social engineering scam.
Wightlink
March 11, 2022
UK ferry operator Wightlink is hit by a "highly sophisticated" cyber-attack that may have compromised personal data belonging to "a small number of customers and staff".
Rostec
March 11, 2022
•[ hack, ddos, manufacturing ]
The website of a Russian aerospace and defense conglomerate was allegedly hit by a cyberattack that forced it offline for several hours. Earlier in the day, multipme domains had been assigned for targeting on the IT Army of Ukraine's website.