-
Mono Next Public Company Limited
January 7, 2021
•
[ hack, technology ]
The Mono Next Public Company Limited, a Jasmine International PLC subsidiary, has been hacked by the ALTDOS hackers after negotiations following an attack on 3BB (another Jasmine subsidiary) failed.
-
Colorado Retina Associates
January 6, 2021
Colorado Retina Associates notifies 26,609 patients that an unauthorized party gained access to employee work email accounts.
-
Upper Grand District School Board
January 6, 2021
•
[ hack, phishing, education ]
The Upper Grand District School Board suffered a breach that resulted in inappropriate emails being sent to students.
-
LaRue County High School students
January 6, 2021
•
[ insider, leak, education ]
A former Kentucky prinicpal has been ordered to pay $3.6 million for confiscating students' phones, and downloading and trading their nude photos online.
-
WedMeGood
January 6, 2021
•
[ leak, misconfiguration, technology ]
In January 2021, the Indian wedding planning platform WedMeGood suffered a data breach that exposed 1.3 million customers. The breach exposed 41.5GB of data including email and physical addresses, names, genders, phone numbers and password hashes. The data was provided to HIBP by dehashed.com.
-
Mexico-based American Express credit cardholders
January 5, 2021
•
[ leak, finance ]
This week a threat actor leaks the data of 10,000 Mexico-based American Express credit cardholders on a forum.
-
Mexico-based Santander credit cardholders
January 5, 2021
•
[ leak, finance ]
The same threat actor leaks the data of several Santander credit cardholders.
-
Mendelson Kornblum Orthopedic and Spine Specialists
January 5, 2021
•
[ leak, healthcare ]
Mendelson Kornblum Orthopedic and Spine Specialists has notified 28,658 patients of a data security incident where an unauthorized party viewed limited health information.
-
Diponegoro University
January 5, 2021
•
[ hack, education ]
Diponegoro University revealed that hackers had attempted to breach its servers that contain student data.
-
Mexico-based Banamex credit cardholders
January 5, 2021
•
[ leak, finance ]
The same threat actor leaks the data of several Banamex credit cardholders.
-
Exclusive Networks
January 5, 2021
•
[ hack, technology ]
Exclusive Networks reveals it has been hit by a cyber breach, affecting the cyber security distributor's systems across five countries (UK, US, France, Singapore, and the UAE) with the breach resulting in unauthorized access to data.
-
South African Social Security Agency
January 4, 2021
•
[ leak, misconfiguration, government ]
The South African Social Security Agency is in talks to replace cards used for collecting social grants after a security breach compromised the master keys for the cards in 2019.
-
Saint Agnes Medical Center
January 4, 2021
•
[ social, phishing, healthcare ]
According to a media release from Saint Agnes, an employee of Oregon/Idaho-based Saint Alphonsus Health System had their email compromised by an unauthorized user. This individual used the employee's account to send phishing emails in an attempt to obtain login IDs and passwords from January 4-6.
-
DriveSure
January 4, 2021
•
[ hack, automotive ]
Personal data of 3 Million+ customers exposed in a hack of DriveSure, a car dealership service provider.
-
Devil-Torrents.pl
January 4, 2021
In early 2021, the Polish torrents website Devil-Torrents.pl suffered a data breach. A subset of the data including 63k unique email addresses and cracked passwords were subsequently socialised on a popular data breach sharing service.
-
Adecco
January 3, 2021
In March 2021, news broke of a massive data breach impacting millions of Adecco customers in South America which was subsequently sold on a popular hacking forum. The breach exposed over 4M unique email addresses as well as genders, dates of birth, marital statuses, phone numbers and passwords stored as bcrypt hashes.
-
California Health & Wellness
January 1, 2021
California Health & Wellness joins the list of the victims of the Accellion breach.
-
Saint Alphonsus
January 1, 2021
•
[ hack, phishing, healthcare ]
Saint Alphonsus patients' personal information may have been accessed via an email security breach, but cannot determine which emails were accessed.
-
Unknown Organization
January 1, 2021
•
[ leak, misconfiguration, government ]
The Durham Region joins the list of the victims of the Accellion breach.
-
News Corp
January 1, 2021
•
[ espionage, technology ]
American media conglomerate News Corp is the target of a persistent cyberattack believed to be associated with a foreign government.