Full List

Search

Recent Breaches

• Cape Cod Community College December 7, 2018 The Cape Cod Community College notifies its employees that Hackers stole more than $800,000 when they infiltrated the school's bank accounts.
• City of Topeka December 7, 2018 • [ hack, misconfiguration, government ] Another possible Click2Gov breach: Topeka's third-party payment vendor is breached possibly exposing the personal information of about 10,000 residents.
• Bombuj.eu December 7, 2018 • [ leak, misconfiguration, technology ] In December 2018, the Slovak website for watching movies online for free Bombuj.eu suffered a data breach. The incident exposed over 575k unique email addresses and passwords stored as unsalted MD5 hashes. No response was received from Bombuj.eu when contacted about the incident.
• Redwood Eye Center December 6, 2018 • [ ransomware, malware, healthcare ] The Redwood Eye Center notifies 16,000 California residents their personal information may have been compromised when a company subcontractor (IT Lighthouse) suffered a ransomware attack on September 19.
• Vertcoin December 5, 2018 The blockchain of Vertcoin is under a 51% attack. The attack could have resulted in a theft of over $100,000.
• BeatStars December 4, 2018 • [ hack, technology ] BeatStars, a marketplace for selling music production beats, is mass-defaced.
• San Francisco State University December 4, 2018 • [ hack, phishing, education ] Dozens of San Francisco State University student accounts are hacked in a phishing attack.
• Humble Bundle December 4, 2018 • [ leak, technology ] The gaming subscription site Humble Bundle informs its customers of a data breach that may have exposed a person's subscription status.
• National Republican Congressional Committee (NRCC) December 4, 2018 • [ hack, government ] Politico reveals that the emails of top NRCC officials were hacked in a major 2018 attack that occurred in April.
• Prime Staff Inc. December 4, 2018 • [ hack ] Prime Staff Inc. joins the list of the companies hacked by TheDarkOverlord. Thousands of employees' files are stolen.
• Caribbean Island Properties December 4, 2018 • [ hack ] Caribbean Island Properties is hacked by TheDarkOverlord.
• Ukraine Telecommunications Network December 4, 2018 • [ espionage, hack, technology ] The Security Service of Ukraine (SBU) reveals to have stopped a "massive" cyberattack against the country's telecommunications network, and blames the Kremlin for the attempted hack.
• Czech Ministry of Defense December 3, 2018 • [ espionage, hack, government ] The Czech Security Intelligence Service (BIS) says that two Russian-linked cyber-espionage groups have hacked into the Czech Republic's government networks during 2016 and 2017.
• OppoSuits December 3, 2018 • [ financial, hack, leak ] Customers of Dutch clothing company OppoSuits are warned to monitor their credit card accounts after the firm discovers the Magecart malware planted on its website could have stolen the details of 7,000 customers.
• Cancer Treatment Centers of America December 3, 2018 • [ social, phishing, healthcare ] Cancer Treatment Centers of America notifies almost 42,000 patients of possible access to their protected health information after a phishing attack occurred on May 2 and discovered on September 26.
• Quora December 3, 2018 Quora announces that one of their systems was hacked on November 30, and has led to the exposure of approximately 100 million user's data to an unauthorized third-party.
• Window to the World Communications December 1, 2018 • [ hack, education ] Investigations by a law firm and forensic accounting firm determined that emails and personal information of approximately 40 staffers were hacked between December 2018 and August 2020.
• Chinese citizens December 1, 2018 • [ ransomware, malware, technology ] Over 100,000 computers in China are infected in just a few days by the 'WeChat Ransom' ransomware.
• Palermo Calcio December 1, 2018 • [ leak ] The Italian Football Team Palermo Calcio reveals to have suffered an intrusion with the consequent leak of fake news about the imminent sale of the team.
• Dubsmash December 1, 2018 • [ leak, misconfiguration, technology ] In December 2018, the video messaging service Dubsmash suffered a data breach. The incident exposed 162 million unique email addresses alongside usernames and PBKDF2 password hashes. In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly. The data was provided to HIBP by a source who requested it to be attributed to "BenjaminBlue@exploit.im".