St. Clair County, Illinois
May 28, 2021
•[ ransomware, malware, government ]
St. Clair County is hit with a ransomware attack, it is alleged that 2.5GB of data was stolen including personal and customer information.
Vicksburg Warren School District
May 28, 2021
•[ ransomware, malware, education ]
Vicksburg Warren School District discloses a Grief ransomware incident.
Pronsticos Deportivos
May 27, 2021
•[ ransomware, ddos, government ]
Mexico's Pronsticos Deportivos suffers an Avaddon ransomware attack and blocks access to IP addresses outside of Mexico after the ransomware gang threatened to perform denial of service attacks. The group also threatened to release more documents if negotiations didn't begin within 10 days.
Clover Park School District
May 26, 2021
•[ ransomware, malware, education ]
Clover Park School District is hit with a ransomware attack, sensitive student and employee data is stolen and dumped online.
California City
May 26, 2021
•[ ransomware, malware, government ]
California City is hit with a ransomware attack leaving its computer systems down for many weeks.
Wisconsin Institute of Urology
May 26, 2021
•[ hack, phishing, healthcare ]
Employee email account at the Wisconsin Institute of Urology is compromised.
CEFCO Convenience Stores
May 25, 2021
Hackers post 42 gigabytes of data allegedly stolen from CEFCO Convenience Stores.
Saltzer Health
May 25, 2021
•[ phishing, healthcare ]
Idaho health system suffers a phishing attack compromising protected health information of over 15,000 patients.
WSSC Water
May 24, 2021
•[ ransomware, malware, government ]
WSSC Water, which provides water to 2 million customers, is hit with a ransomware attack on its non-essential business systems.
DNA Diagnostics Center
May 24, 2021
•[ hack, healthcare ]
Ohio based DNA testing center suffers data breach impacting over 2 million individuals.
Mobile County, Alabama
May 24, 2021
•[ ransomware, malware, government ]
The network of Mobile County, Alabama is hit with a PayorGrief ransomware attack, 95GB of data is reportedly compromised.
Plumsted Township
May 24, 2021
•[ social, phishing, government ]
New Jersey town suffers phising attack against employee email resulting in unauthorized access.
Coastal Family Health Center
May 24, 2021
•[ ransomware, malware, healthcare ]
Coastal Family Health Center is targeted by Xing Team ransomware exfiltrating a suspected 500GB of data including patient personal infromation and medical records.
Spine & Disc Medical Center
May 24, 2021
•[ ransomware, healthcare ]
Spine & Disc Medical Center is hit with an Avaddon ransomware attack. They leaked some of the data as proof, stating that more would be leaked if the ransom isn't paid.
ADATA
May 23, 2021
•[ ransomware, malware, technology ]
A leading computer memory and storage manufacturer, ADATA, suffers a ransomware attack in which 1.5TB of data is stolen; Ragnar Locker claims the attack.
IndiaMART
May 23, 2021
•[ leak, misconfiguration, retail ]
In August 2021, 38 million records from Indian e-commerce company IndiaMART were found being traded on a popular hacking forum. Dated several months earlier, the data included over 20 million unique email addresses alongside names, phone numbers and physical addresses. It's unclear whether IndiaMART intentionally exposed the data attributes as part of the intended design of the platform or whether the data was obtained by exploiting a vulnerability in the service.
Research Foundation for the State University of New York
May 22, 2021
•[ leak, education ]
the Research Foundation for the State University of New York suffers a data breach.
Eastern Hancock Schools
May 22, 2021
•[ ransomware, malware, education ]
Eastern Hancock Schools fall victim of a ransomware attack.
Pacific Market Research
May 22, 2021
•[ ransomware, malware ]
Pacific Market Research (PMR) is victim of a ransomware attack, information on over 16,000 employees may have been exposed.
Paragon Cheats
May 22, 2021
•[ hack, technology ]
In May 2021, the Grand Theft Auto Online cheats website Paragon Cheats suffered a data breach that lead to the shutdown of the service. The breach exposed 188k customer records including usernames, email and IP addresses. The data was provided to HIBP by a source who requested it be attributed to "VRAirhead and xFueY".