IndiaMART
May 23, 2021
•[ leak, misconfiguration, retail ]
In August 2021, 38 million records from Indian e-commerce company IndiaMART were found being traded on a popular hacking forum. Dated several months earlier, the data included over 20 million unique email addresses alongside names, phone numbers and physical addresses. It's unclear whether IndiaMART intentionally exposed the data attributes as part of the intended design of the platform or whether the data was obtained by exploiting a vulnerability in the service.
Research Foundation for the State University of New York
May 22, 2021
•[ leak, education ]
the Research Foundation for the State University of New York suffers a data breach.
Eastern Hancock Schools
May 22, 2021
•[ ransomware, malware, education ]
Eastern Hancock Schools fall victim of a ransomware attack.
Pacific Market Research
May 22, 2021
•[ ransomware, malware ]
Pacific Market Research (PMR) is victim of a ransomware attack, information on over 16,000 employees may have been exposed.
Paragon Cheats
May 22, 2021
•[ hack, technology ]
In May 2021, the Grand Theft Auto Online cheats website Paragon Cheats suffered a data breach that lead to the shutdown of the service. The breach exposed 188k customer records including usernames, email and IP addresses. The data was provided to HIBP by a source who requested it be attributed to "VRAirhead and xFueY".
Desert Wells Family Medicine
May 21, 2021
•[ ransomware, malware, healthcare ]
Arizona medical center suffers a ransomware attack compromisng personal information of over 35,000 patients and making the data unrecoverable.
Grenoble-Alpes Mtropole
May 21, 2021
•[ hack, ddos, government ]
The Grenoble-Alpes Mtropole is hit by a DDoS attack.
Auto Parts Manufacturing Mississippi
May 21, 2021
•[ ransomware, malware, manufacturing ]
Another Toyota subsidiary, Auto Parts Manufacturing Mississippi, discloses a ransomware attack. Some financial and customer data was exfiltrated and exposed.
City of Grenoble
May 21, 2021
•[ hack, ddos, government ]
The City of Grenoble is hit by a DDoS attack.
CTARS
May 21, 2021
•[ leak, hack, misconfiguration ]
In May 2022, the client management system for the Australian government's NDIS (National Disability Insurance Scheme) suffered a data breach which was subsequently posted to an online hacking forum. The CTARS cloud platform is used by care providers to record information about NDIS participants and often contains sensitive medical information. Impacted data includes over 12k unique email addresses, physical addresses, names, dates of birth, phone numbers and data related to patient conditions and treatments.
Domain Group
May 20, 2021
•[ phishing, retail ]
Australian digital real estate business, Domain Group, confirms its platform was the victim of a phishing attack.
Sierra College
May 20, 2021
•[ ransomware, malware, education ]
The Sierra College is hit with a ransomware attack.
University of North Carolina School of Medicine and Hospitals
May 20, 2021
•[ social, phishing, healthcare ]
The email address of one faculty member at UNC Hospitals is compromised in a phising attack.
Navistar
May 20, 2021
•[ ransomware, malware, manufacturing ]
Navistar, a truck and military vehicle manufacturer, reports that data was stolen from company systems in an apparent ransomware attack.
Volunteer Service Abroad (VSA)
May 19, 2021
•[ ransomware, malware, healthcare ]
Volunteer Service Abroad (VSA) announces it had been the victim of a "sophisticated" ransomware attack.
OSF Healthcare
May 18, 2021
•[ ransomware, malware, healthcare ]
OSF Healthcare is targeted by Xing Team ransomware exfiltrating 112GB of data including patient personal information and medical records.
Rockland Public Schools
May 18, 2021
•[ ransomware, malware, education ]
The Rockland Public Schools district is hit with a ransomware attack.
Sports Club Nas
May 18, 2021
•[ leak, ransomware, entertainment ]
Sports Club Nas in Japan suffers a ransomware attack, customer and employee personal information is leaked online.
Waikato District Health Board
May 18, 2021
•[ ransomware, malware, government ]
Waikato District Health Board is hit with a Conti ransomware attack.
Visalia Unified School District
May 18, 2021
•[ ransomware, malware, education ]
Visalia Unified School District reveals to have been hit with a ransomware attack.
