PayTM Group
August 30, 2020
•[ hack, finance ]
PayTM Group suffers a breach after hackers from John Wick access its internal database.
Venmo
August 27, 2020
•[ financial, ddos, finance ]
Venmo is the victim of a Ddos attack. The attackers are demanding a Bitcoin payment to stop the attacks.
New Zealand's stock exchange
August 26, 2020
•[ hack, ddos, finance ]
New Zealand's stock exchange (NZX) has been impacted by a distributed denial-of-service (DDoS) attack during the last two days, forcing it to shut down trading until the connectivity issues were resolved.
Santander
August 19, 2020
•[ financial, misconfiguration, finance ]
Tens of suspects have been arrested for exploiting a glitch in the software of Santander ATMs to cash-out more money than was stored on cards.
Undetermined
August 4, 2020
•[ ransomware, malware, finance ]
The Maze operators have published stolen Xerox files after a failed extortion attempt.
Virtu Financial
August 10, 2020
•[ financial, phishing, finance ]
High-speed trading firm Virtu Financial says it lost $6.9 million in a business email compromise scam in May.
Interactive Data
August 6, 2020
•[ hack, financial, finance ]
Interactive Data, a data broker, is hacked and fuels fraudulent small business loans and unemployment insurance benefits from COVID-19 economic relief efforts
Momentum Metropolitan
August 13, 2020
•[ hack, finance ]
Financial services group Momentum Metropolitan warns that a third party unlawfully accessed a limited portion of data of a subsidiary of the group.
Micard Co., Ltd
August 5, 2020
•[ hack, finance ]
Isetan Mitsukoshi Co., Ltd and Mcard Co., Ltd announced, on 5 August 2020, that they had suffered a data breach affecting approximately 19,000 customers as a result of unauthorised access. The member name, expected billing amount, and current membership points held on the Micard homepage were accessed.
2gether
July 31, 2020
•[ hack, financial, finance ]
2gether reveals a cyberattack in which roughly 1.2 million in cryptocurrency has been stolen from cryptocurrency investment accounts.
The Bank of Ireland
July 28, 2020
•[ financial, social, finance ]
One of Ireland's largest banks, Bank of Ireland, has been fined almost 1.7 million after regulators discovered it had failed to inform financial regulators and the police after a fraudster tricked them into transferring funds from a client's account.
Dave
July 26, 2020
•[ leak, misconfiguration, finance ]
Loan app Dave.com has 7.5 million records leaked, blaming the breach to the OAuth tokens stolen by the attackers from Waydev.
Impact Guru
July 8, 2020
•[ leak, finance ]
Researchers from Cyble identify a threat actor claiming to be in possession of more than 500,000 confidential data records of Impact Guru, a crowdfunding platform.
Hapvida
July 6, 2020
•[ hack, finance, healthcare ]
Brazilian health insurer Hapvida reveals to have suffered a cyber attack potentially involving access to the personal information of its customers.
Bank users in Portugal
July 6, 2020
•[ financial, malware, finance ]
A new release of the Lampion trojan banker targets uses in Portugal.
Argenta
July 13, 2020
•[ financial, malware, finance ]
Antwerp-based savings bank Argenta shuts down 143 ATM machines after falling victim to what is believed to be Belgium's first jackpotting attacks.
Cashaa
July 11, 2020
•[ hack, finance ]
U.K.-based cryptocurrency exchange Cashaa reports that hackers stole more than 336 Bitcoin (BTC) and ceases all the crypto-related transactions.
eToro
July 6, 2020
•[ leak, finance ]
Using the alias "Sheriff," a threat actor advertises an auction for 62,000 accounts belonging to users of the eToro social trading platform.
Benefit Recovery Specialists
June 26, 2020
•[ ransomware, malware, finance ]
A Texas Medicaid subcontractor has been terminated after a data-privacy breach caused by a ransomware attack from Russia last year exposed the personal information of tens of thousands of low-income residents.
Ledger
June 25, 2020
•[ leak, misconfiguration, finance ]
Crypto-wallet firm Ledger reveals a major security breach of its e-commerce and marketing database, resulting in the compromise of one million customer email addresses and the personal details of thousands after the vulnerability was exploited on June 25, 2020.
