British Mensa
January 31, 2021
•[ hack, misconfiguration ]
British Mensa has had its website hacked after failing to properly secure the data of its 18,000 members.
University of London School of Oriental and African Studies
January 31, 2021
•[ espionage, phishing, education ]
Iranian state aligned actor compromised an University of London webpage to host credential harvesting software and shared the page with particular targets including research experts and journalists focused on the Middle East.
Victor Central School District
January 31, 2021
•[ hack, malware, education ]
The Victor Central School District is hit with a malware attack that has caused all internet services and phones in the district to stop operating.
Raychat
January 31, 2021
•[ hack, technology ]
In January 2021, the now defunct Iranian social media platform Raychat suffered a data breach that exposed 939 thousand unique email addresses. The data included names, IP addresses, browser user agent strings and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
Moncler
January 30, 2021
•[ ransomware, malware, retail ]
Italian luxury fashion giant is hit with ransomware, data is sold online.
Undetermined
January 30, 2021
•[ ransomware, finance ]
A US farm suffers ransomware attack from a compromised login credential shutting down its operations.
USCellular
January 30, 2021
•[ hack, technology ]
USCellular has suffered a data breach after hackers gained access to a computer in a retail store and its CRM network.
perl
January 29, 2021
•[ hack, malware, technology ]
The perl.com domain has been taken over by hackers and pointed to an IP address associated with malware campaigns.
UK Research and Innovation
January 29, 2021
•[ ransomware, malware, government ]
The UK Research and Innovation has sustained a cyber attack that has adversely affected several of its web assets and has resulted in data being encrypted by a third party.
Baldwin Wallace University
January 29, 2021
•[ hack, education ]
A cyberattack affected Baldwin Wallace University, cancelling classes and closing their offices.
Bihar Police Subordinate Services Commission (BPSSC)
January 29, 2021
•[ leak, government ]
Researchers from CloudSEK discover a post on a well-known database sharing forum advertising the PII of 500,000 Indian citizens. An analysis of the data shows that the victims are candidates who took a preliminary exam conducted by the Bihar Police Subordinate Commission.
Crisp Regional Health Services
January 29, 2021
•[ ransomware, malware, healthcare ]
Crisp Regional Health Services is the victim of a ransomware attack.
Miss England
January 29, 2021
•[ ransomware, malware ]
Malicious hackers targeted the organizers of Miss England, an English beauty pageant, with ransomware.
Premier Tech
January 29, 2021
•[ ransomware, malware ]
Premier Tech is the victim of an apparent ransomware attack, but declines to provide details of the incident.
Ducks Unlimited
January 29, 2021
•[ leak, misconfiguration ]
In mid-2021, Risk Based Security reported on a database sourced from Ducks Unlimited being traded online. The data dated back to January 2021 and contained 1.3M unique email addresses across both a membership list and a list of website users. Impacted data included names, phones numbers, physical addresses, dates of birth and passwords stored as unsalted MD5 hashes.
American Armed Forces Mutual Aid Association
January 28, 2021
•[ hack, finance ]
The American Armed Forces Mutual Aid Association, a non-profit organization in Virginia that provides insurance and benefits services to the military community, is notifying 161,621 individuals of a hacking incident.
Etisalat
January 28, 2021
Lebanese Cedar, a Hezbollah-affiliated threat actor, has been linked to a hacking campaign that affected telecoms and ISPs in the US, the UK, and the Middle East. One of the victims is Etisalat.
Frontier Communications
January 28, 2021
•[ hack, technology ]
Lebanese Cedar, a Hezbollah-affiliated threat actor, has been linked to a hacking campaign that affected telecoms and ISPs in the US, the UK, and the Middle East. One of the victims is Frontier Communications.
Hadara
January 28, 2021
Lebanese Cedar, a Hezbollah-affiliated threat actor, has been linked to a hacking campaign that affected telecoms and ISPs in the US, the UK, and the Middle East. One of the victims is Hadara.
La Clinica de la Raza
January 28, 2021
•[ hack, malware, healthcare ]
La Clinica de la Raza is hit with a malware attack.