Activision
February 20, 2023
•[ social, phishing, technology ]
Activision confirms that it suffered a data breach in early December 2022 after hackers gained access to the company's internal systems by tricking an employee with an SMS phishing text. Few days later the threat actors leak some data allegedly stolen from the company.
Asian Health Services (AHS)
February 13, 2023
•[ hack, phishing, healthcare ]
Asian Health Services (AHS) files a notice of data breach after learning that an unauthorized actor was able to access confidential patient information following a compromised employee email account.
La Clinica de la Raza
February 8, 2023
•[ hack, phishing, healthcare ]
La Clinica de La Raza files a notice of data breach after learning that certain employee email accounts containing confidential patient information were accessed by an unauthorized party over the course of a two-week period.
Optima Dermatology
February 17, 2023
•[ hack, phishing, healthcare ]
The personal and health data of 59,872 Optima Dermatology patients is potentially accessed after the hack of an employee email account.
Gateway First Bank
February 1, 2023
•[ leak, phishing, finance ]
Gateway First Bank files a notice of data breach after confirming that unusual activity within multiple employee email accounts resulted in confidential customer information being leaked.
Ukrainian government agencies
February 6, 2023
•[ espionage, phishing, government ]
The Ukraine's computer emergency response team (CERT-UA) reveals that in a recent phishing campaign against Ukrainian government agencies, attackers attempted to install the Remcos surveillance software on victims' computers.
United Health Services
January 18, 2023
•[ leak, phishing, healthcare ]
United Health Services of Delaware (UHS of Delaware) files a notice of data breach after learning that a vendor experienced a phishing attack compromising UHS of Delaware patient information.
CRC Insurance Services
January 18, 2023
•[ hack, phishing, finance ]
CRC Insurance Services files a notice of data breach after discovering that an unauthorized party had accessed several employee email accounts.
Brookhaven Nuclear Laboratory (BNL)
January 6, 2023
•[ espionage, phishing, energy ]
The Russian group Cold River targeted the Brookhaven Nuclear Laboratory with a spear phishing campaign creating fake login pages.
Moldovan Govermental Institutions
January 2, 2023
•[ social, phishing, government ]
Moldova's government institutions are hit by a wave of phishing attacks after it pledged support for Ukraine in its defense against Russia.
Minuteman Senior Services
December 22, 2022
•[ hack, phishing, healthcare ]
Minuteman Senior Services confirms that an unauthorized individual gained access to the email account of an employee.
HawaiiUSA Federal Credit Union (HawaiiUSA)
December 12, 2022
•[ leak, phishing, finance ]
HawaiiUSA Federal Credit Union (HawaiiUSA) files a notice of data breach after a phishing incident leaks the personal information of more than 20,000 bank customers.
Highmark Health
December 15, 2022
•[ social, phishing, finance ]
Highmark Health files a notice of data breach after learning that an employee's email account had been compromised following a phishing attack.
Epic Management LLC
December 9, 2022
•[ hack, phishing, healthcare ]
The healthcare management company, Epic Management LLC, has recently announced that unauthorized individuals gained access to its digital environment and accessed files and data stored in its email system.
Ukrainian Government Entities
December 12, 2022
•[ espionage, phishing, government ]
Ukrainian government agencies and the state railway are the latest victims of a new wave of phishing attacks, Ukraine's Computer Emergency Response Team (CERT-UA) reported last week.
Legacy Hospice
November 30, 2022
•[ hack, phishing, healthcare ]
Legacy Hospice in Alabama notified 21,202 individuals of a breach that stemmed from unauthorized access to a limited number of employee email accounts.
The Kelberman Center
November 1, 2022
•[ hack, phishing, healthcare ]
The Kelberman Center, a provider of services to individuals with autism, notifies 3,501 patients about a breach of employee email accounts.
Three Rivers Provider Network (TRPN)
October 31, 2022
•[ hack, phishing, finance ]
Three Rivers Provider Network (TRPN) submits notice of a data breach after the company determined that an unauthorized party was able to access an employee's email account containing sensitive information belonging to certain individuals.
St. Luke's Health
October 30, 2022
•[ hack, phishing, healthcare ]
St. Luke's Health notifies 16,906 individuals of a third-party data breach that impacted Adelanto Healthcare Ventures (AHCV), a consulting services vendor, after two of its employee email accounts were compromised by a third party.
Bed Bath & Beyond
October 29, 2022
•[ social, phishing, retail ]
Bed Bath & Beyond reveals in an SEC filing that it recently suffered a data breach after an employee fell victim to a phishing attack.
