-
UK Labour Party
February 21, 2019
•
[ insider, misconfiguration, government ]
The UK's Labour Party locks down access to membership databases and campaign tools after a number of attempts to access personal data on its systems by "individuals who are not, or are no longer, authorized to do so".
-
Alan Smith
February 20, 2019
Alan Smith, leader of Allerdale Borough Council, blames hackers for posting a link of a golliwog on his Facebook page.
-
-
CafePress
February 20, 2019
In February 2019, the custom merchandise retailer CafePress suffered a data breach. The exposed data included 23 million unique email addresses with some records also containing names, physical addresses, phone numbers and passwords stored as SHA-1 hashes. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".
-
Demon Forums
February 20, 2019
•
[ hack, technology ]
In February 2019, the hacking forum Demon Forums suffered a data breach. The compromise of the vBulletin forum exposed 52k unique email addresses alongside usernames and passwords stored as salted MD5 hashes.
-
Chester County
February 18, 2019
•
[ hack, malware, government ]
Chester County is hit by a malware attack.
-
Columbia Surgical Specialists of Spokane
February 18, 2019
•
[ ransomware, malware, healthcare ]
Columbia Surgical Specialists of Spokane is the victim of a ransomware attack affecting 400,000 patients.
-
https://kpsports
February 16, 2019
•
[ hack, government ]
Just days after the attack on CRPF convoy in Pulwama, more than 200 Pakistani websites, including the Ministry of Foreign Affairs, are reportedly defaced by an Indian hacker group - 'Team I Crew', as a sign of protest.
-
AZ Plastic Surgery Center
February 15, 2019
•
[ hack, healthcare ]
AZ Plastic Surgery Center reveals to have been hacked by TheDarkOverlord as early as December 10, 2018.
-
Memorial Hospital
February 15, 2019
•
[ leak, phishing, healthcare ]
Memorial Hospital at Gulfport reveals a phishing incident that exposed 30,000 patients' information.
-
AdventHealth Medical Group's Pulmonary & Sleep Medicine
February 15, 2019
•
[ hack, healthcare ]
AdventHealth Medical Group's Pulmonary & Sleep Medicine discovers that hackers gained access to its systems and compromised the information of up to 42,161 patients. The breach started on August 2017 and was discovered on December 2018.
-
AltaMed Health Services Corporation
February 15, 2019
•
[ hack, healthcare ]
AltaMed Health Services Corporation notifies 5,767 California residents of a data security incident at Sharecare Health Data Services, a business affiliate. SHDS detected an unauthorized third-party access as early as May 21, 2018
-
Hampton Roads Community Health Center
February 15, 2019
•
[ hack, misconfiguration, healthcare ]
Hampton Roads Community Health Center reveals that a server hosting unencrypted patient data was compromised back in December 2018.
-
North Country Business Products
February 15, 2019
North Country Business Products point-of-sale and security solutions provider discloses a data breach which led to the exposure of payment information for clients who used their credit and debit cards at 137 restaurants.
-
CHI Health
February 15, 2019
•
[ hack, malware, healthcare ]
CHI Health officials reveal that a device brought in by a third-party vendor introduced a malware into the health system's network.
-
YouNow
February 15, 2019
•
[ hack, technology ]
In February 2019, data from the live broadcasting service YouNow appeared for sale on a dark web marketplace. Whilst it's not clear what date the actual breach occurred on, the impacted data included 18M unique email addresses, IP addresses, names, usernames and links to social media profiles. As authentication is performed via social providers, no passwords were exposed in the breach. Many records didn't have associated email addresses thus the unique number is lower than the reported total number of accounts. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".
-
Reserve Bank of India
February 14, 2019
Reserve Bank of India warns banks and payment system operators about a mobile application called 'AnyDesk' used by fraudsters to access data on mobile devices.
-
LBB
February 14, 2019
•
[ leak, misconfiguration, retail ]
In August 2022, customer data of the Indian shopping site "LBB" (Little Black Book) was posted to a popular hacking forum. The data contained over 3M records with 39k unique email addresses alongside IP and physical addresses, names and device information with the most recent data dating back to early 2019. LBB advised they believe the data was exposed by a third party service and whilst it contained information they retain on their customers, it had also been enriched with additional data attributes.
-
British Army's "influence and outreach" Twitter account (@77th_Brigade).
February 13, 2019
•
[ hack, social, government ]
An attacker takes control of the British Army's "influence and outreach" Twitter account (@77th_Brigade).
-
Image-I-Nation Technologies, Inc,
February 13, 2019
Image-I-Nation Technologies, Inc, a technology partner of the three big credit reporting agencies, is the victim of a supply-chain attack. The incident was discovered on December 20, and occurred between November 1-15, 2018.
