China Energy Engineering Corporation
November 25, 2023
•[ ransomware, malware, energy ]
The Rhysida ransomware group claims to have hacked the Chinese state-owned energy conglomerate China Energy Engineering Corporation.
Standard Filter Corporation
November 24, 2023
•[ ransomware, leak ]
The MEOW ransomware gang adds Standard Filter Corporation to their leak site.
Undisclosed franchise partner
December 7, 2023
•[ ransomware, malware, retail ]
Billion-dollar shoe seller Aldo says that a recent claim by the notorious LockBit ransomware gang was related to one of the company's franchise partners.
Austal USA
December 6, 2023
•[ ransomware, leak, malware ]
Austal USA, a shipbuilding company and a contractor for the U.S. Department of Defense (DoD) and the Department of Homeland Security (DHS) confirms it suffered a cyberattack and is currently investigating the impact of the incident, after the Hunters International ransomware and data extortion group claimed to have breached Austal USA and leaked some information as proof of the intrusion.
Groveport Madison Schools
December 5, 2023
•[ ransomware, malware, education ]
The Groveport Madison Schools is hit with a BlackSuit ransomware attack.
Three organizations in South Korea and abroad
December 5, 2023
•[ ransomware, malware, energy ]
Separately, the Seoul Metropolitan Police investigators discover that the group extorted three ransomware victims in South Korea and abroad for about $357,000 worth of Bitcoin.
Hermon School Department
December 4, 2023
•[ ransomware, malware, education ]
The Hermon School Department suffers a ransomware attack after the threat actors exploit the CVE-2023-46604 Apache ActiveMQ vulnerability,
St. Landry Parish Schools
December 1, 2023
•[ ransomware, malware, education ]
The St. Landry Parish Schools district is hit with a ransomware attack.
Trellance
November 30, 2023
•[ ransomware, malware, technology ]
About 60 credit unions are dealing with outages due to a ransomware attack on Trellance, a widely-used technology provider.
Elston-Nationwide
November 28, 2023
•[ ransomware, leak ]
The Play ransomware gang adds Elston-Nationwide to their leak site.
North Texas Municipal Water District
November 28, 2023
•[ ransomware, malware, government ]
The North Texas Municipal Water District (NTMWD) is dealing with a cybersecurity incident that caused operational issues. The Daixin ransomware gang says it was behind the attack, adding NTMWD to its list of victims and claiming to have stolen more than 33,000 files containing customer information.
Yanfeng Automotive Interiors
November 28, 2023
•[ ransomware, malware, manufacturing ]
The Qilin ransomware group claims responsibility for a cyber attack on Yanfeng Automotive Interiors (Yanfeng), one of the world's largest automotive parts suppliers.
Crystal Lake Health Centers
November 25, 2023
•[ ransomware, leak, malware ]
The Hunters International ransomware gang adds Crystal Lake Health Centers to their leak site claiming to have exfiltrated 120 GB of data in total including patient information such as contact details, SSNs, and insurance data.
Holding Slovenske Elektrarne
November 25, 2023
•[ ransomware, malware, energy ]
Slovenian power company Holding Slovenske Elektrarne (HSE) suffers a ransomware attack that compromised its systems and encrypted files, yet the company says the incident did not disrupt electric power production. Finger is pointed to the Rhysida ransomware gang.
Ethyrial: Echoes of Yore
November 24, 2023
•[ ransomware, malware, technology ]
A ransomware attack on the "Ethyrial: Echoes of Yore" MMORPG published by the Gellyberry Studios, destroys 17,000 player accounts, deleting their in-game items and progress in the game.
Ardent Health Services
November 24, 2023
•[ ransomware, malware, healthcare ]
Ardent Health Services, a healthcare provider operating 30 hospitals across six U.S. states, discloses that its systems were hit by a ransomware attack. The breach also affects Lovelace Health System, BSA Health System, Hillcrest HealthCare System, Hackensack Meridian Health, and University of Kansas Health System St. Francis Campus.
Equaldex
November 24, 2023
•[ ransomware, malware, technology ]
The MEOW ransomware gang adds Backroads to their leak site.
Wema Bank
November 24, 2023
•[ ransomware, malware, finance ]
The MEOW ransomware gang adds Wema Bank to their leak site.
Giti Tire
November 24, 2023
•[ ransomware, malware, manufacturing ]
The MEOW ransomware gang adds Giti Tire to their leak site.
CTS
November 24, 2023
•[ ransomware, CitrixBleed, technology ]
CTS, a U.K.-based provider of managed IT services for law firms and the professional services industry, experiences a cybersecurity incident that is causing ongoing widespread disruption across the legal sector. Fingers are pointed to the Clop ransomware gang exploiting the CVE-2023-4966 CitrixBleed vulnerability.