Recent Breaches
-
April 15, 2019 Indian IT outsourcing and consulting giant Wipro Ltd. investigates reports that its own IT systems have been hacked and are being used to launch attacks against some of the company's customers.
-
April 15, 2019 • In May 2019, news broke of a massive SMS spam operation known as "ApexSMS" which was discovered after a MongoDB instance of the same name was found exposed without a password. The incident leaked over 80M records with 23M unique email addresses alongside names, phone numbers and carriers, geographic locations (state and country), genders and IP addresses.
-
April 13, 2019 • The City of Stuart is hit by a Ryuk ransomware attack.
-
April 13, 2019 • Garfield County reveals it was the victim of a ransomware attack, crippling the work of city personnel for weeks before they were able to pay to get access to their own data.
-
April 13, 2019 • Imperial County is hit by a ransomware attack.
-
April 12, 2019 • Dakota County notifies 1000 individuals of an incident occurred on February 13, 2019, when an email account belonging to one of its employees was accessed without authorization.
-
April 12, 2019 • A hacker group breaches three sites associated with the FBI National Academy Associates and uploads their contents to the web, including dozens of files containing the personal information of thousands of federal agents and law enforcement officers.
-
April 12, 2019 • Blue Cross of Idaho Health Service notifies that, on March 21, 2019, an unauthorized user accessed Blue Cross of Idaho's online provider portal and was able to access provider remittance documents, which contained PHI.
-
April 12, 2019 • Questcare Medical Services announces to have discovered a security incident. On February 13, an unauthorized third party obtained access to an employee's email account.
-
April 12, 2019 • A 0-day vulnerability in the Yuzo WordPress plugin causes the Flashpoint website to briefly redirect the users to an external website with a pop-up leading to malware.
-
April 12, 2019 • Kyushu Railway Co. reveals that personal and credit information on up to 8,000 customers were stolen from the goods store website for its "Seven Stars in Kyushu" luxury cruise train.
-
April 12, 2019 • In 2019, the public records search service TruthFinder suffered a data breach that later came to light in early 2023. The data included over 8M unique customer email addresses, names, phone numbers and passwords stored as scrypt hashes.
-
April 12, 2019 • In 2019, the public records search service Instant Checkmate suffered a data breach that later came to light in early 2023. The data included almost 12M unique customer email addresses, names, phone numbers and passwords stored as scrypt hashes.
-
April 11, 2019 • The city of Greenville is hit by the RobbinHood ransomware. A new strain that claims to protect the victim's privacy.
-
April 11, 2019 • Uniden's website for commercial security products is hacked to host a Word document that delivers what appears to be a garden variety of the Emotet trojan, also known as Geodo and Heodo.
-
April 11, 2019 • The website of the free multimedia editor VSDC is breached again to distribute a banking trojan and an info stealer (Win32.Bolik.2 and KPOT stealer).
-
April 11, 2019 • Riverplace Counseling Center notifies 11,639 patients after a security incident due to a ransomware occurred on January 20, 2019.
-
April 11, 2019 • Father Bill's and MainSpring, a nonprofit homeless shelter, announces that it had been attacked by ransomware in April.
-
April 10, 2019 • An orchestrated disinformation campaign hits the Lithuanian Ministry of Defense.
-
April 10, 2019 • Matrix.org is the victim of a cyberattack which forces the organization to overhaul its entire production infrastructure and inform users of a widespread credentials leak.