Windemuller
January 12, 2021
Lorenz executed exfiltration of data and ransomeware in targeted network. Data presented on dark web "leak site"
Eneco
January 12, 2021
•[ hack, leak, energy ]
Energy supplier Eneco is warning former customers of a possible data breach. The company has established that cyber criminals have managed to gain access to the accounts of 1,700 customers and that personal information may have been stolen.
Battelle for Kids
January 12, 2021
•[ ransomware, malware, education ]
The Chicago Public Schools suffers a massive data breach that exposes the data of almost 500,000 students and 60,000 employee after their vendor, Battelle for Kids, suffered a ransomware attack in December 2021
Institute of Bankers
January 12, 2021
•[ ransomware, malware, education ]
A data leak affects more than 13,000 members and about 100,000 non-members of the Institute of Bankers following a ransomware incident.
Mimecast
January 12, 2021
•[ espionage, malware, technology ]
Email security provider Mimecast said that hackers hijacked its products in order to spy on its customers. It is believed that Mimecast is another victim of the SolarWinds hack.
Ultrapar
January 12, 2021
•[ ransomware, malware, energy ]
Brazilian fuel distribution company Ultrapar is the victim of a ransomware attack.
Bourse des Vols
January 12, 2021
•[ leak, sqlinjection, retail ]
In January 2021, the French travel company Bourse des Vols suffered a data breach that exposed 1.46M unique email addresses across more than 1.2k .sql files and over 9GB of data. The impacted data exposed personal information and travel histories including names, phone numbers, IP and physical addresses, dates of birth along with flights taken and purchases.
Guns.com
January 12, 2021
•[ hack, retail ]
In January 2021, the firearms website guns.com suffered a data breach. The breach exposed 376k unique email addresses along with names, phone numbers, physical addresses, gun purchases, partial credit card data, dates of birth and passwords stored as bcrypt hashes.
Date Hot Brunettes
January 12, 2021
•[ leak, technology ]
In January 2021, the now defunct website Date Hot Brunettes which provided a service to "Date Neglected Women Who Can Keep a Secret", suffered a data breach. The incident exposed 1.5M unique email addresses along with IP addresses, usernames, user-entered bios and MD5 password hashes.
US Department of State
January 11, 2021
The biographies of outgoing US President Donald Trump and his Vice President Mike Pence were changed on the official US State Department website by a disgruntled employee.
3BB
January 11, 2021
•[ hack, technology ]
3BB, a subsidiary of Jasmine International PLC, has been hacked by the ALTDOS hackers.
Ubiquiti
January 11, 2021
•[ hack, misconfiguration, technology ]
Ubiquiti informed customers of unauthorized access to certain information technology systems hosted by a third party cloud provider. Ubiquiti states that they are not aware of any customer databases that were illegally accessed but cannot be sure that the attack did not expose customers' data.
Delta Dental Plans Association
January 11, 2021
•[ ransomware, malware, healthcare ]
Delta Dental Plans Association has its data dumped by the Egregor ransomware group.
Esha Deol
January 11, 2021
•[ hack, phishing, technology ]
Bollywood actress Esha Deol has her Instagram account hacked and warns her followers not to click on links from her direct messages (DMs) due to the hack.
Unconfirmed Australian dental surgery practice
January 11, 2021
•[ ransomware, malware, healthcare ]
An unconfirmed Australian dental surgery practice has its data dumped by the Egregor ransomware group. However, the victim is not listed on Egregor's leak site.
Behavioral Health Partners of Metrowest (BHPMW)
January 10, 2021
•[ hack, healthcare ]
Behavioral Health Partners of Metrowest (BHPMW) informs 11,288 patients that their data was "copied from its digital environment" by a hacker.
Multifeeder
January 10, 2021
•[ ransomware, leak, malware ]
Lorenz executed exfiltration of data and ransomeware in targeted network. Data presented on dark web "leak site"
Clearfield County
January 10, 2021
•[ hack, malware, government ]
15 percent of Clearfield County's computers were affected by malware activity on the county computer network.
AKVA
January 10, 2021
•[ ransomware, malware, manufacturing ]
On Monday morning, it was announced that the aquaculture equipment manufacturer on Sunday was hit by a ransomware attack. Those who attacked AKVA obtained the company's production data.
Communauto
January 9, 2021
•[ ransomware, malware, automotive ]
Montreal car-sharing service Communauto was the target of a cyber attack resulting in a number of locked servers and encrypted data.