-
Lightspeed
September 2, 2016
•
[ hack, technology ]
Point of sales vendor Lightspeed is breached with password, customer data, and API keys possibly exposed, and notifies customers in an email saying that the information was contained in a compromised database.
-
Armenian National Security Service
September 2, 2016
•
[ hack, leak, government ]
Azerbaijani hacktivists from Anti-Armenia Team leak the passport details of foreign visitors to Armenia and more after breaking into Armenian government servers.
-
Linode
September 2, 2016
•
[ hack, ddos, technology ]
Linode reports the first of a series of DoS attacks on September 2nd, September 4th and September 5th. Another round will strike the company on Saturday, September 10th. Some of the attacks lasted up to eight hours.
-
2 Hong Kong government agencies
September 1, 2016
•
[ espionage, government ]
Security company FireEye reveals that two Hong Kong government agencies have come under attack from cyberspies originating in China in the month leading up to Sunday's legislative elections.
-
arg.gov.af
September 1, 2016
•
[ hack, government ]
Hacktivist group Ghost Squad Hackers (GSH) defaced 12 websites belonging to the Afghan government.
-
Last
September 1, 2016
•
[ hack, technology ]
More than 43 million of user records from UK-based music streaming service Last.fm surfaced from a hack that occurred in 2012. Each record reportedly contains a username, email address, hashed password and profile data.
-
Transmission BitTorrent Client
September 1, 2016
•
[ hack, malware, technology ]
Developers of the Transmission BitTorrent client admitted that hackers replaced downloads of its file-sharing software with trojanized code. The hack, detected within hours, was designed to spread a Mac OS X backdoor, Kidnap, which steals user credentials.
-
exilemod
September 1, 2016
A group of hackers going by the online handle of "Expl.oit" or "Exploit" hack the official website of Exile Mod gaming forum and leak the personal details of 11,902 registered users.
-
University of New Mexico
September 1, 2016
Over 1,000 former students and employees of UNM have their identity stolen from a University database. After a month of silence, UNM establishes a call center to assist victims of the incident.
-
NetProspex
September 1, 2016
•
[ leak, misconfiguration, technology ]
In 2016, a list of over 33 million individuals in corporate America sourced from Dun & Bradstreet's NetProspex service was leaked online. D&B believe the targeted marketing data was lost by a customer who purchased it from them. It contained extensive personal and corporate information including names, email addresses, job titles and general information about the employer.
-
Unknown Organization
August 31, 2016
•
[ leak, healthcare ]
The Al Zahra Private Medical Centre is hacked by an individual calling himself websites-hunter, who dumps the database online.
-
MDPI
August 30, 2016
•
[ leak, misconfiguration, education ]
In August 2016, the Swiss scholarly open access publisher known as MDPI had 17.5GB of data obtained from an unprotected Mongo DB instance. The data contained email exchanges between MDPI and their authors and reviewers which included 845k unique email addresses. MDPI have confirmed that the system has since been protected and that no data of a sensitive nature was impacted. As such, they concluded that notification to their subscribers was not necessary due to the fact that all their authors and reviewers are available online on their website.
-
manaliveinc
August 24, 2016
•
[ hack, healthcare ]
The non-profit organization Man Alive is hacked, and a patient database with sensitive personal and treatment information is put up for sale on the dark web.
-
Baystate Health
August 22, 2016
•
[ social, phishing, healthcare ]
Baystate Health reveals that about 13,000 patients may have had some of their personal information compromised, due to a "phishing" e-mail that was received by some staff members.
-
National Institute of Health
August 21, 2016
In name of #OpSafePharma, the Italian hacktivists hack four healthcare organizations and leak data from two. The hackers attacked the MEDUSA public portal of the National Institute of Health, the Azienda Ospedaliera Santa Maria clinic, the clinic of the University of Naples Federico II, and the ASL TO2 state clinic in Torino.
-
PPCGeeks
August 19, 2016
•
[ hack, sqlinjection, technology ]
In August 2016, the pocket PC fan site forum PPCGeeks suffered a data breach that exposed over 490k records. The breach of the vBulletin forum exposed email and IP addresses, usernames, dates of birth and passwords stored as salted MD5 hashes. The data was provided to HIBP by a source who requested it be attributed to "fall1984@protonmail.com".
-
Sage Software
August 17, 2016
•
[ insider, misconfiguration, technology ]
A data breach at Sage Software may have compromised personal information for employees at 280 UK businesses. The breach was caused by "unauthorised access" by someone using an "internal" company computer login. The alleged author of the attack, a 32 year-old Sage employee was arrested at Heathrow airport.
-
The Equation Group
August 16, 2016
•
[ leak, government ]
An anonymous group calling itself Shadow Brokers publishes what it claims are sophisticated software tools belonging to an elite team of hackers tied to the US National Security Agency known as "The Equation Group".
-
HEI Hotels & Resorts
August 15, 2016
•
[ financial, malware ]
HEI Hotels & Resorts, the chain that owns Starwood, Marriott, Hyatt, and Intercontinental hotels, reveals that the payment systems for 20 of its locations has been infected with malware that may have been able to steal tens of thousands of credit card numbers.
-
GeekedIn
August 15, 2016
•
[ leak, misconfiguration, technology ]
In August 2016, the technology recruitment site GeekedIn left a MongoDB database exposed and over 8M records were extracted by an unknown third party. The breached data was originally scraped from GitHub in violation of their terms of use and contained information exposed in public profiles, including over 1 million members' email addresses. Full details on the incident (including how impacted members can see their leaked data) are covered in the blog post on 8 million GitHub profiles were leaked from GeekedIn's MongoDB - here's how to see yours.
