Spotify
December 2, 2020
A hacker calling himself "Daniel" hijacked the Spotify pages of several artists to pledge his love for Taylor Swift.
GamingMonk
December 2, 2020
•[ leak, technology ]
In December 2020, India's "largest esports community" GamingMonk (since acquired by and redirected to MPL Esports), suffered a data breach. The incident exposed 655k unique email addresses along with names, usernames, phone numbers, dates of birth and bcrypt password hashes.
MyFreeCams
December 1, 2020
•[ financial, hack, leak ]
A data broker who allegedly hacked adult chat and web-streaming website MyFreeCams.com has sold nearly 2 million user records on a dark web forum. The hacker exfiltrated records from the company's servers in December 2020 after an SQL injection.
University of Pittsburgh Medical Center
December 1, 2020
A cyberattack on a Pennsylvania law firm has potentially exposed the personal health information of more than 36,000 patients of Pittsburgh Medical Center.
Warren-Washington-Albany ARC
December 1, 2020
•[ leak, ransomware, malware ]
Warren-Washington-Albany ARC has some data leaked by the Conti ransomware gang.
TransLink
December 1, 2020
•[ ransomware, malware, government ]
A ransomware attack by the Egregor threat actors has crippled the operations of TransLink, the public transportation agency of Vancouver, Canada.
Commport Communications
December 1, 2020
•[ ransomware, malware, technology ]
Canada Post informs 44 of its large commercial customers that a ransomware attack on Commport Communications, a third-party service provider, exposed shipping information for their customers. The ransomware group called Lorenz has leaked information on their data leak site.
U.S. Agency for Global Media (USAGM)
December 1, 2020
•[ social, phishing, government ]
The U.S. Agency for Global Media (USAGM) discloses that they suffered a data breach after falling for a phishing attack in December 2020.
Embraer
November 30, 2020
•[ ransomware, leak, malware ]
Brazilian aerospace and defence group Embraer is targeted by a RansomExx ransomware cyberattack. A few days later the attackers leak the stolen data.
K12 Inc.
November 30, 2020
•[ ransomware, malware, education ]
Online education giant K12 Inc. reveals to have paid a ransom after their systems were hit by the Ryuk ransomware in the middle of November.
Shirbit
November 30, 2020
•[ ransomware, finance ]
A cybercrime group calling themselves 'BlackShadow' tweets that they hacked into the Israeli Shirbit insurance company and stole files during the attack. The threat actors extort the company by demanding almost $1 million in bitcoin to stop leaking the company's stolen data.
Huntsville City Schools district
November 30, 2020
•[ ransomware, malware, education ]
Ransomware operators attack the Huntsville City Schools district in Alabama, forcing them to shut down schools.
Delaware County, PA
November 29, 2020
•[ ransomware, malware, government ]
DoppelPaymer cybercriminals have attacked the network of Delaware County, PA government and are demanding $500,000 to free it up.
Foxconn
November 29, 2020
•[ ransomware, malware, manufacturing ]
Electronics giant Foxconn suffered a ransomware attack at a Mexican facility. The attackers have demanded a $34 million ransom.
Nama Khoi Municipality
November 29, 2020
•[ ransomware, malware, government ]
The Nama Khoi Municipality in the Northern Cape Province is struggling to restore IT systems that were hit by a Pysa ransomware attack last year. They started dumping data as proof without making a ransom demand first.
Overlake Obstetricians & Gynecologists
November 29, 2020
•[ ransomware, malware, healthcare ]
More than 3.8 Gb of Overlake OB/GYN files appear on PYSA data leak website, files include detailed medical history and personal data.
Stuller, Inc.
November 28, 2020
•[ hack, manufacturing ]
Stuller, Inc. is hit with a cyber attack that disrupts operations.
Banijay Group SAS
November 27, 2020
•[ ransomware, malware ]
French multinational production and distribution firm Banijay Group SAS has been hit by a DoppelPaymer ransomware attack and had sensitive information stolen by the operators.
TRF-1 (Tribunal Regional da Primeira Region)
November 27, 2020
•[ hack, government ]
The Brazilian Tribunal Regional da Primeira Region is hit with a cyber attack. The attackers claim to have accessed more than 40 court databases.
Unnamed British insurace company
November 27, 2020
•[ hack, finance ]
The personal information of over 21,000 British motorists is being sold on the dark web. The data was reportedly obtained after hackers breached a server owned by an insurance company.