Full List

Search

Recent Breaches

• Morgan County February 25, 2021 • [ ransomware, malware, government ] Morgan County has some data leaked by the DoppelPaymer ransomware gang.
• SuperVPN & GeckoVPN February 25, 2021 In February 2021, a series of "free" VPN services were breached including SuperVPN and GeckoVPN, exposing over 20M records. The data appeared together in a single file with a small number of records also included from FlashVPN, suggesting that all three brands may share the same platform. Impacted data also included email addresses, the country logged in from and the date and time each login occurred alongside device information including the make and model, IMSI number and serial number. The data was provided to HIBP by a source who requested it be attributed to redredred@riseup.net.
• Covenant HealthCare February 24, 2021 • [ hack, phishing, healthcare ] Covenant HealthCare notifies 45,000 patients and employees about a data breach that occurred last May 4 when threat actor(s) accessed two employee email accounts.
• Fastway Couriers February 24, 2021 • [ leak ] The Irish Data Protection Commission says it's received a breach notification from Fastway Couriers. 446,143 are affected.
• Queen's University in Belfast (QUB) February 24, 2021 The Queen's University reveals to have been hit with a cyberattack. The University of the Highlands and Islands in Scotland and University of Central Lancashire are hit with similar attacks.
• Stadgenoot February 24, 2021 • [ hack, leak ] The website of the Amsterdam housing association Stadgenoot is hacked. Data of 30,000 people is stolen.
• Elara Caring February 24, 2021 • [ hack, healthcare ] Elara Caring notifies more than 100,000 patients after corporate email accounts hacked.
• Fisher-Titus Medical Center February 24, 2021 • [ hack, phishing, healthcare ] The personal information of patients at Fisher-Titus Medical Center was compromised after an unknown person gained access to an employee's email account.
• Kentucky Office of Unemployment Insurance February 24, 2021 • [ hack, ddos, government ] The Kentucky Office of Unemployment Insurance suffers a DDoS attack.
• Manutan Group February 24, 2021 • [ ransomware, malware, retail ] The Manutan Group is hit with a ransomware attack.
• System of Electronic Interaction of Executive Bodies February 24, 2021 • [ espionage, government ] The National Security and Defense Council of Ukraine (NSDC) has linked Russian-backed hackers to attempts to breach state agencies after compromising the government's document management system.
• Cobb County School District February 24, 2021 • [ hack, education ] The Cobb County School District investigates a malfunction of its emergency alert system, saying it was a "targeted, external attack" that placed all 112 of its schools on lockdown.
• iRise Florida Spine and Joint Institute February 24, 2021 Employee email account of a Florida medical center is accessed by an unauthorized user compromising protected health information of over 60,000 patients.
• State agencies in Ukraine February 24, 2021 The National Security and Defense Council of Ukraine (NSDC) links Russian-backed hackers to attempts to breach state agencies after compromising the System of Electronic Interaction of Executive Bodies (SEI EB) used by most public authorities to share documents.
• Angolan Ministry of Finance February 23, 2021 • [ hack, government ] The Angolan Ministry of Finance suffers a cyber attack.
• Bombardier February 23, 2021 • [ ransomware, malware, manufacturing ] Business jet maker Bombardier is the latest company to suffer a data breach by the Clop gang after attackers exploited the Accellion zero-day vulnerability to steal company data.
• Transport for New South Wales (TfNSW) February 23, 2021 • [ hack, malware, government ] Transport for New South Wales (TfNSW) confirms being impacted by a cyber attack on the Accellion file transfer system.
• Ben Franklin High School February 23, 2021 • [ hack, education ] A virtual trip of students at the Ben Franklin High School is hacked.
• LogicGate February 23, 2021 • [ leak, misconfiguration, technology ] Risk and compliance startup LogicGate confirms a data breach after an unauthorized third party obtains credentials to its Amazon Web Services-hosted cloud storage.
• Unnamed consulting firm in Japan February 23, 2021 • [ ransomware, leak, malware ] An unnamed consulting firm in Japan is hit by ransomware and the personal info of 350 households is leaked.