-
Kreditplus
June 23, 2020
•
[ leak, finance ]
In June 2020, the Indonesian credit service Kreditplus suffered a data breach which exposed 896k records containing 769k unique email addresses. The breach exposed extensive personal information including names, family makeup, information on spouses, income and expenses, religions and employment information. The data was provided to HIBP by breachbase.pw.
-
Swvl
June 23, 2020
•
[ hack ]
In June 2020, the Egyptian bus operator Swvl suffered a data breach which impacted over 4 million members of the service. The exposed data included names, email addresses, phone numbers, profile photos, partial credit card data (type and last 4 digits) and passwords stored as bcrypt hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by breachbase.pw.
-
Encrochat
June 22, 2020
•
[ hack, technology ]
The encrypted chat Encrochat shuts down after a police hack.
-
Indiabulls Group
June 22, 2020
Indian conglomerate Indiabulls Group is allegedly hit with a cyberattack from the CLOP Ransomware operators who have leaked screenshots of stolen data.
-
Iowa State University
June 22, 2020
Iowa State University officials announce that nearly 4,900 Iowa State University-affiliated email accounts were the recipients of a racist cyberattack from an email sender claiming to be Equity Prime Mortgage.
-
Stalker Online
June 22, 2020
More than one million players of the video game Stalker Online are at risk after a database containing over 1.2 million user records is being sold on hacking forums. Separately, another database which is said to contain more than 136,000 records from the game's forums is also being offered for sale.
-
Coastal Preparatory Academy
June 22, 2020
According to a letter sent to parents by Coastal Preparatory Academy and a lawsuit filed in Superior Court, a former employee obtained extremely sensitive personal information about parents and students, including social security numbers, health and financial information, and employment records. The employee also allegedly locked Academy leadership out of the computer system by refusing to provide passwords.
-
Promo
June 22, 2020
In July 2020, the self-proclaimed "World's #1 Marketing Video Maker" Promo suffered a data breach which was then shared extensively on a hacking forum. The incident exposed 22 million records containing almost 15 million unique email addresses alongside IP addresses, genders, names and salted SHA-256 password hashes. The data was provided to HIBP by dehashed.com.
-
Appen
June 22, 2020
In June 2020, the AI training data company Appen suffered a data breach exposing the details of almost 5.9 million users which were subsequently sold online. Included in the breach were names, email addresses and passwords stored as bcrypt hashes. Some records also contained phone numbers, employers and IP addresses. The data was provided to HIBP by dehashed.com.
-
Scentbird
June 22, 2020
In June 2020, the online fragrance service Scentbird suffered a data breach that exposed the personal information of over 5.8 million customers. Personal information including names, email addresses, genders, dates of birth, passwords stored as bcrypt hashes and indicators of password strength were all exposed. The data was provided to HIBP by breachbase.pw.
-
yotepresto.com
June 22, 2020
In June 2020, the Mexican lending platform yotepresto.com suffered a data breach. Over 1.4 million customers were impacted by the breach which disclosed email and IP addresses, usernames and passwords stored as bcrypt hashes. The data was provided to HIBP by dehashed.com.
-
Vakinha
June 22, 2020
In June 2020, the Brazilian fund raising service Vakinha suffered a data breach which impacted almost 4.8 million members. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as bcrypt hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by dehashed.com.
-
Undisclosed bank in Europe
June 21, 2020
•
[ hack, ddos, finance ]
Akamai reveals that a bank in Europe was hit by a massive distributed denial-of-service (DDoS) attack that peaked at a record 809 million packets per second (PPS).
-
University of California, Davis
June 21, 2020
•
[ hack, phishing, education ]
A racist cyberattack email is delivered to thousands of University of California, Davis email accounts, prompting the university to block most of the emails, officials said Tuesday.
-
Not Acxiom
June 21, 2020
•
[ leak, misconfiguration, technology ]
In 2020, a corpus of data containing almost a quarter of a billion records spanning over 400 different fields was misattributed to database marketing company Acxiom and subsequently circulated within the hacking community. On review, Acxiom concluded that "the claims are indeed false and that the data, which has been readily available across multiple environments, does not come from Acxiom and is in no way the subject of an Acxiom breach". The data contained almost 52M unique email addresses.
-
Tallapoosa County Probate Office
June 20, 2020
•
[ ransomware, malware, government ]
Tallapoosa County Probate Office is hit with a ransomware attack.
-
SitePoint
June 20, 2020
•
[ hack, technology ]
In June 2020, the web development site SitePoint suffered a data breach that exposed over 1M customer records. Impacted data included email and IP addresses, names, usernames, bios and passwords stored as bcrypt hashes.
-
Florida Orthopedic Institute
June 19, 2020
•
[ leak, healthcare ]
The Florida Orthopedic Institute warns of a data breach that occured on or around April 9.
-
Crozer-Keystone Health System
June 19, 2020
•
[ ransomware, malware, healthcare ]
Crozer-Keystone Health System suffers a ransomware attack by the NetWalker ransomware gang. The gang auctions the stolen data through its darknet website.
-
Mid-Michigan College
June 19, 2020
•
[ hack, education ]
An attacker breaks into the Mid-Michigan College's email system, compromising the accounts of 10 employees and compromising personal data of potentially up to 16,000 people.