-
US Police
June 19, 2020
A leak-focused activist group known as Distributed Denial of Secrets publishes BlueLeaks, a 269-gigabyte collection of police data, allegedly received from the Anonymous collective, which includes emails, audio, video, and intelligence documents, with more than a million files in total.
-
Blaze Angel Roberts Instagram account
June 19, 2020
•
[ hack, technology ]
Popular Australian surfer Blaze Angel Roberts has her Instagram account hacked, posting sexually explicit images.
-
Dunzo
June 19, 2020
In approximately June 2019, the Indian delivery service Dunzo suffered a data breach. Exposing 3.5 million unique email addresses, the Dunzo breach also included names, phone numbers and IP addresses which were all broadly distributed online via a hacking forum. The data was provided to HIBP by dehashed.com.
-
LiveAuctioneers
June 19, 2020
•
[ leak, misconfiguration, retail ]
In June 2020, the online antiques marketplace LiveAuctioneers suffered a data breach which was subsequently sold online then extensively redistributed in the hacking community. The data contained 3.4 million records including names, email and IP addresses, physical addresses, phones numbers and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by breachbase.pw.
-
Lion
June 18, 2020
•
[ hack, manufacturing ]
Australian beverage giant Lion is hit by a second cyber attack.
-
RBX.Place
June 18, 2020
•
[ hack, technology ]
Hackers steal data from RBX.Place, a grey marketplace where players of the massively popular online game Roblox can sell in-game items for real money.
-
Wells Fargo customers
June 18, 2020
•
[ social, phishing, finance ]
Researchers from Abnormal Security discover a phishing campaign impersonating the Wells Fargo Security Team and luring potential victims to phishing pages with the help of calendar invites.
-
Bank of America customers
June 18, 2020
•
[ financial, phishing, finance ]
Researchers from Armorblox discover a phishing campaign against Bank of America customers that able to bypass security filters.
-
Club Fitness Holdings, Inc.
June 18, 2020
Club Fitness Holdings, Inc. was the victim of a data security event that prevented access to data and programs on its network. As a result of the attack an unknown actor also gained access to data on the network.
-
Acuity
June 18, 2020
•
[ leak ]
In mid-2020, a 437GB corpus of data attributed to an entity named "Acuity" was created and later extensively distributed. However, the source could not be confidently verified as any known companies named Acuity. The data totalled over 14M unique email addresses with each row containing extensive personal information across more than 400 columns of data including names, phone numbers, physical addresses, genders and dates of birth.
-
Unnamed web host
June 17, 2020
•
[ hack, ddos, technology ]
An unnamed webhost was hit with one of the largest DDoS attacks ever registered by Akamai (1.44 terabit-per-second).
-
City of Lexington
June 17, 2020
•
[ hack, misconfiguration, government ]
A Zoom meeting regarding issues surrounding police discipline is interrupted by callers shouting racist and homophobic remarks.
-
Cebu Normal University (CNU)
June 17, 2020
•
[ hack, education ]
Subdomains of the Cebu Normal University (CNU) website, particularly the Library and Journal for Higher Education (JHE), are hacked by unknown entities.
-
Far Eastern University (FEU)
June 17, 2020
•
[ leak, education ]
1,000 student accounts from the Far Eastern University (FEU) are made public, with details such as names, student numbers, and passwords exposed.
-
Light S.A.
June 17, 2020
•
[ ransomware, malware, energy ]
Sodinokibi ransomware (aka REvil) operators breach the Brazilian-based electrical energy company Light S.A. and demand a $14 million worth ransom.
-
MEDNAX Services, Inc.
June 17, 2020
•
[ hack, phishing, healthcare ]
MEDNAX Services, Inc. has revealed that an unauthorized third-party gained access to some MEDNAX business email accounts.
-
India
June 16, 2020
China launches DDOS attacks against Indian information websites and the country's financial payments system, amid growing tensions over border disputes in the Kashmir region.
-
Oswego Health
June 16, 2020
•
[ hack, healthcare ]
Oswego Health has reported an unauthorized access to an employee email account.
-
MaxLinear
June 15, 2020
•
[ ransomware, malware, technology ]
U.S. system-on-chip (SOC) maker company MaxLinear discloses that some of its computing systems were encrypted by Maze Ransomware operators. The attack was discovered on May 24.
-
Claire's
June 15, 2020
•
[ financial, malware, retail ]
Researchers from Sansec reveal that the websites for U.S. based jewelry and accessory giant Claire's, and its subsidiary Icing, were compromised in April via a Magecart attack.
