Recent Breaches
-
November 29, 2019 • Researchers from Anomali reveal a new campaign carried out by the Russia-linked Gamaredon cyberespionage group, targeting Ukrainian targets, including diplomats, government and military officials. One of the targets is the Ukrainian Ministry of Foreign Affairs.
-
November 29, 2019 • A data breach at Mixcloud, a U.K.-based audio streaming platform, leaves more than 20 million user accounts exposed after the data is put on sale on the dark web.
-
November 27, 2019 • The Loudoun Medical Group D/B/A Comprehensive Sleep Care Center notifies patients after an employee email account is compromised. The attack occurred between June 15 and June 19.
-
November 27, 2019 Adobe discloses a security breach that impacts users registered on the company's Magento Marketplace. The point of entry was a vulnerability in the Magento Marketplace website that allowed "an unauthorized third-party" to access account information for registered users.
-
November 26, 2019 • Ivy Rehab Physical Therapy reveals to have discovered that in May, some employee email accounts may have been compromised.
-
November 26, 2019 • Ohio officials reveal to have thwarted a cyber attack against its election infrastructure earlier this month (November 5). The attack was apparently linked to a Russian company in Panama.
-
November 26, 2019 • DiBella's Old Fashioned Submarines reveals that its stores in Connecticut, Indiana, Michigan, Ohio, New York and Pennsylvania may have had the information on as many as 305,000 payment cards compromised between March 22, 2018 and December 28, 2018.
-
November 26, 2019 • Youth Development, Inc. reveals to have been hit by a phishing attack.
-
November 26, 2019 • On the Border, a border-style Mexican food chain notifies a data breach in a payment-processing system serving restaurants in 28 states. Some customer credit card information could have been compromised on visits between April 10 and August 10, 2019.
-
November 25, 2019 • Great Plains Health medical center is hit by a ransomware and forces switching to pen and paper to maintain activity.
-
November 25, 2019 • Gamaredon, a Russian-speaking APT, targeted Ukrainian government entities, including the Ministry of Foreign Affairs, from September to November 2019.
-
November 24, 2019 • The New York Post reveals that the New York City Police Department's fingerprint database was hit with ransomware in October 2018.
-
November 24, 2019 • The Waterloo Catholic District School Board is hit by a ransomware attack.
-
November 24, 2019 • In November 2019, the Vietnamese education website TaiLieu allegedly suffered a data breach exposing 7.3M customer records. Impacted data included names and usernames, email addresses, dates of birth, genders and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by dehashed.com after being shared on a popular hacking forum. TaiLieu did not respond when contacted about the incident.
-
November 23, 2019 • Catch Hospitality Group discloses that PoS systems at Catch NYC, Catch Rooftop, and Catch Steak were infected with malware that allowed attackers to steal credit card information from customers.
-
November 23, 2019 • Belgium's trade mission to China suffers a "massive cyber-attack." China State Security is indicated as the possible culprit.
-
November 23, 2019 • Virtual Care Provider Inc., providing technology services to more than 100 nursing homes, is hold hostage of a ransomware after the company couldn't afford a $14 million ransom demand.
-
November 22, 2019 • Church's Chicken investigates a possible data breach involving credit and debit card information at some of its company owned locations in the U.S.
-
November 22, 2019 • OnePlus discloses a security breach that impacted users of its online store. The breach, caused by an undisclosed vulnerability, occurred last week and saw attackers gaining access to past customer orders.
-
November 22, 2019 • Livingston School District is hit by ransomware.