Full List

Search

Recent Breaches

• Manhunt February 1, 2021 • [ hack, technology ] Manhunt, a gay dating app that claims to have 6 million male members, confirms it was hit by a data breach in February after a hacker gained access to the company's accounts database.
• Unidentified organization in China February 1, 2021 • [ espionage, malware ] Researchers at Trend Micro discover a previously unknown Chinese APT dubbed 'Earth Longzhi' targeting multiple organizations in East Asia, Southeast Asia, and Ukraine.
• Metromile February 1, 2021 • [ leak, misconfiguration, finance ] Car insurance startup Metromile says it has fixed a security flaw on its website that allowed a hacker to obtain driver license numbers.
• Fertility Centers of Illinois February 1, 2021 • [ hack, healthcare ] Fertility center notifies nearly 80,000 current and former patients that protected health information may have been accessed by an unauthroized individual.
• Home Hardware Stores February 1, 2021 • [ ransomware, malware, retail ] Home Hardware Stores acknowledges to have been hit by a ransomware attack in February.
• KomplettFritid February 1, 2021 • [ leak, misconfiguration, retail ] In January 2023, the online Norwegian store KomplettFritid was reported as having had a data breach dating back to February 2021. The incident exposed 140k customer records including physical, email and IP addresses, names, phone numbers and passwords. Most passwords were stored as bcrypt hashes with a small number appearing in plain text.
• Houilles January 31, 2021 • [ hack, malware, government ] The French municipality annouced on its social media that the City of Houilles is a victim of a cyberattacl. The attack stopped operations of the city's website and municipal IT and digital services. The malware has ben described as South Korean.
• Raychat January 31, 2021 Raychat, a popular Iranian business and social messenger, exposes its entire database (267M+ accounts w/ names, emails, passwords, metadata, encrypted chats etc.), which is then destroyed by a bot attack.
• Codecov January 31, 2021 Codecov online platform for hosted code testing reports and statistics announces that a threat actor had modified its Bash Uploader script, exposing sensitive information in customers
• myNewJersey January 31, 2021 The myNewJersey portal for state employees was victim to what's known as a credential stuffing attack, using compromised login credentials, according to the Office of Information Technology.
• Serco January 31, 2021 • [ ransomware, malware, healthcare ] Serco, one of the companies involved in the NHS Test and Trace operations, confirms it has been hit by a ransomware attack.
• Victor Central School District January 31, 2021 • [ hack, malware, education ] A malware attack struck Victor Central School District in New York, closing all in-person classes. All internet services and phones had stopped operating as a result of the attack.
• British Mensa January 31, 2021 • [ hack, misconfiguration ] British Mensa has had its website hacked after failing to properly secure the data of its 18,000 members.
• University of London School of Oriental and African Studies January 31, 2021 • [ espionage, phishing, education ] Iranian state aligned actor compromised an University of London webpage to host credential harvesting software and shared the page with particular targets including research experts and journalists focused on the Middle East.
• Victor Central School District January 31, 2021 • [ hack, malware, education ] The Victor Central School District is hit with a malware attack that has caused all internet services and phones in the district to stop operating.
• Raychat January 31, 2021 • [ hack, technology ] In January 2021, the now defunct Iranian social media platform Raychat suffered a data breach that exposed 939 thousand unique email addresses. The data included names, IP addresses, browser user agent strings and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
• Moncler January 30, 2021 • [ ransomware, malware, retail ] Italian luxury fashion giant is hit with ransomware, data is sold online.
• Undetermined January 30, 2021 • [ ransomware, finance ] A US farm suffers ransomware attack from a compromised login credential shutting down its operations.
• USCellular January 30, 2021 • [ hack, technology ] USCellular has suffered a data breach after hackers gained access to a computer in a retail store and its CRM network.
• perl January 29, 2021 • [ hack, malware, technology ] The perl.com domain has been taken over by hackers and pointed to an IP address associated with malware campaigns.