-
Southeast Series Of Lockton Companies LLC
November 20, 2024
•
[ data leak ]
Insurance brokerage reported unauthorized access to files on an employee computer
-
Behavioral Health Resources
November 20, 2024
•
[ data breach, data leak ]
Unauthorized actor accessed Behavioral Health Resources network in Nov 2024, exfiltrating client PII and medical records; organization confirmed breach via Maine AG filing and began notifications in Apr 2025.
-
Converse University
November 20, 2024
•
[ data leak ]
Class action alleges delayed notice following a late-2024 data breach.
-
Multiple Romanian election sites, including bec.ro (Central Election Bureau), roaep.ro, and registrulelectoral.ro (voter registration)
November 19, 2024
A report from Romanias Intelligence Service (SRI) says that the countrys election infrastructure was targeted by more than 85,000 cyberattacks with threat actors also obtaining access credentials for election-related websites and leaked them on a Russian forum less than a week before the first presidential election round.
-
Undisclosed Hospital in France
November 19, 2024
A threat actor using the nickname 'nears' (previously near2tlg) claims to have attacked multiple healthcare facilities in France, alleging that they have access to the patient records of over 1,500,000 people. The hacker claims they breached MediBoard by Software Medical Group, a company offering Electronic Patient Record (EPR) solutions across Europe. The company confirms that hackers have compromised a MediBoard account. However, it noted that this was not the result of a software vulnerability or misconfiguration on their part, but rather through the use of stolen credentials used by the hospital.
-
Undisclosed Law Firm
November 19, 2024
•
[ leak, misconfiguration, government ]
A threat actor, who goes online with the name name Altam Beezley, gained access to a computer file shared in a secure link among lawyers whose clients have given damaging testimony related to Matt Gaetz, the former Florida congressman who is President-elect Donald J. Trumps choice to be attorney general.
-
Defense sector organization in Turkey
November 18, 2024
Researchers at Proofpoint discover a sophisticated phishing attack targeting a Turkish defense sector organization via the MiyaRAT, carried out by the threat actor TA397, a.k.a. Bitter, using a Madagascar lure, and delivering malware through advanced mechanisms involving NTFS Alternate Data Streams (ADS) and scheduled tasks.
-
35 organizations worldwide
November 18, 2024
•
[ ransomware, malware ]
The Akira ransomware-as-a-service gang publishes a record number (35) of new victims to its darknet leak site in a single day.
-
iLearningEngines
November 18, 2024
•
[ financial, hack, technology ]
iLearningEngines, an artificial intelligence company, says that a threat actor breached its network and stole a $250,000 wire payment.
-
American Associated Pharmacies
November 18, 2024
•
[ ransomware, malware, retail ]
Ransomware group Embargo threatens to publish nearly 1.5 terabytes of data allegedly stolen in an attack on American Associated Pharmacies, a collaborative of 2,000 independent pharmacies.
-
FlipaClip
November 18, 2024
•
[ leak, misconfiguration, technology ]
In November 2024, the animation app FlipaClip suffered a data breach that exposed almost 900k records due to an exposed Firebase server. The impacted data included name, email address, country and date of birth. FlipaClip advised the issue has since been rectified.
-
Southern Graphics
November 18, 2024
•
[ leak ]
Cybersecurity breach at SGS & Co. starting Nov 18, 2024, exposing PII/PHI of over 31,000 individuals. Enterprise-wide forensic review conducted; notifications in early September 2025; multiple law firms investigating possible claims.
-
Erickson Companies
November 18, 2024
•
[ data leak ]
Company notified individuals after data breach potentially exposing Social Security numbers.
-
Library of Congress
November 17, 2024
The Library of Congress says that threat actors broke into its communications systems and were able to read its email correspondence with congressional offices for most of this year.
-
International Game Technology
November 17, 2024
•
[ hack, technology ]
International Game Technology (IGT), one of the largest gambling companies in the U.S. says that a cyberattack caused massive disruptions to their operations, forcing them to take some systems offline.
-
Ford Motor Company
November 17, 2024
Ford is investigating allegations that it suffered a data breach after a threat actor claimed to leak 44,000 customer records on a hacking forum.
-
Laborers’ International Union of North America (LIUNA) Local 1184
November 17, 2024
•
[ ransomware ]
On March 31, 2025, Laborers International Union of North America Local 1184 (LiUNA) filed a notice of data breach with the Attorney General of California after discovering that the organization was the target of a November 2024 ransomware attack.
-
Laborers’ International Union of North America (LIUNA) Local 1184
November 17, 2024
•
[ ransomware, data breach ]
On March 31, 2025, Laborers International Union of North America Local 1184 (LiUNA) filed a notice of data breach with the Attorney General of California after discovering that the organization was the target of a November 2024 ransomware attack.
-
Manufacturing industry in Pakistan
November 16, 2024
•
[ espionage, malware, manufacturing ]
Researchers at Cyble discover a campaign linked to the known APT group DONOT, targeting the manufacturing industry that supports the countrys maritime and defense sectors.
-
Systematic Financial Management
November 16, 2024
•
[ data leak ]
Intrusion confirmed; files with PII may have been accessed; discovery Nov 16, 2024; PII confirmed Jan 10, 2025.
