Saskatchewan's eHealth
January 4, 2020
•[ ransomware, malware, healthcare ]
Hackers make through the first level of security for Saskatchewan's eHealth records system, locking the government out of some systems and asking for a ransom.
U.S. Federal Depository Library Program
January 4, 2020
•[ hack, misconfiguration, government ]
The homepage for the U.S. Federal Depository Library Program is briefly altered to show a pro-Iranian message and an image of bloodied Donald Trump being punched in the face.
Unknown Organization
January 4, 2020
•[ hack, finance ]
For the same reason, a group of Iranian hackers dubbed "Shield Iran" defaces the Sierra Leone Commercial Bank.
Pampling
January 4, 2020
•[ hack, misconfiguration, retail ]
In January 2020, the online clothing retailer Pampling suffered a data breach that exposed 383k unique customer email addresses. The data was later shared on a popular hacking forum and also included names, usernames and unsalted MD5 password hashes.
HTC Mania
January 4, 2020
•[ hack, leak, technology ]
In January 2020, the Spanish mobile phone forum HTC Mania suffered a data breach of the vBulletin based site. The incident exposed 1.5M member email addresses, usernames, IP addresses, dates of birth and salted MD5 password hashes and password histories. Data from the breach was subsequently redistributed on popular hacking websites.
Alomere Health
January 3, 2020
•[ leak, healthcare ]
The personal and medical information of 49,351 patients is exposed following a security incident involving two employees' email accounts.
Office of Mark McGowan
January 3, 2020
•[ espionage, malware, government ]
Using a new exploit named Aria-body, APT 30 attempted to compromise networks belonging to governments and state-owned companies in Australia and Southeast Asia. One of the group's targets is the office of Mark McGowan, Western Australia's premier. The hackers compromised a computer at the Indonesian embassy in Canberra and sent a malicious document to a staff member at McGowan's office from that machine.
Contra Costa County Library System
January 3, 2020
•[ ransomware, malware, government ]
The Contra Costa County Library System is hit by ransomware
Native American Rehabilitation Association
January 3, 2020
•[ hack, malware, healthcare ]
Native American Rehabilitation Association announces that it experienced an Emotet attack on November 4-5, 2019.
Klamath County Veterans Service Office
January 2, 2020
•[ social, phishing, government ]
Klamath County Veterans Service Office notifies a phishing attack occurred on September 19, 2019
Adam Sandler's Twitter account
January 2, 2020
•[ hack, technology ]
Adam Sandler's Twitter account is hacked and used to post offensive messages against Mariah Carey, President Obama, and President Trump.
Filmai.in
January 1, 2020
•[ leak, misconfiguration, technology ]
In approximately 2019 or 2020, the Lithuanian movie streaming service Filmai.in suffered a data breach exposing 645k email addresses, usernames and plain text passwords.
Nameless Malware
January 1, 2020
•[ hack, malware, technology ]
In January 2021, NordLocker provided HIBP 1.1 million email addresses collected by nameless malware. The malware campaign ran between 2018 and 2020 and infected 3.25 million computers, stealing files, credentials and taking screenshots and photos using the computer's webcam. Read more in NordLocker's writeup about the Nameless malware that stole 1.2 TB of private data.
Unknown
January 1, 2020
Poor security
National Health Information Center (NCZI) of Slovakia
January 1, 2020
•[ leak, misconfiguration, healthcare ]
poor security
Service NSW
January 1, 2020
•[ hack, government ]
hacked