Transactions Applications Group
July 26, 2023
•[ ransomware, malware, finance ]
Transactions Applications Group joins the list of the victims that the Russian ransomware crew Clop claims to have compromised via the MOVEit vulnerability.
LeetSwap
August 1, 2023
•[ hack, misconfiguration, finance ]
LeetSwap halts transactions, after an attacker exploits a smart contract function to inflate the price of $630,000 worth of ETH tokens on the platform before draining them
T. Rowe Price Retirement Plan Services
July 27, 2023
•[ hack, sqlinjection, finance ]
T. Rowe Price Retirement Plan Services files a notice of data breach after discovering that hackers accessed a MOVEit server belonging to Pension Benefit Information (PBI), one of TRP's third-party vendors.
Fidelity Life Association
July 27, 2023
•[ hack, finance ]
Fidelity Life Association files a notice of data breach after discovering that confidential consumer information that had been entrusted to the company was subject to unauthorized access.
Valley National Bank
July 25, 2023
•[ leak, finance ]
Valley National Bank files a notice of data breach after discovering that confidential data that had been provided to the bank was compromised.
Azimut Capital Management
July 24, 2023
•[ ransomware, malware, finance ]
Azimut Capital Management confirms to have suffered an ALPHV/BlackCat ransomware attack.
Conic Finance
July 21, 2023
•[ financial, finance ]
Attackers exploit two separate vulnerabilities in as many days to steal more than $3.2 million from Conic Finance.
Franklin Mint Federal Credit Union
July 20, 2023
•[ ransomware, malware, finance ]
Franklin Mint Federal Credit Union is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
Bluefin Payment Systems
July 18, 2023
•[ ransomware, malware, finance ]
Software firm Bluefin Payment Systems is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
Sound Community Bank
July 18, 2023
•[ hack, misconfiguration, finance ]
Sound Community Bank files a notice of potential data breach after discovering that one of the company's vendors used MOVEit to transfer Sound Community Bank customer information.
Willis Towers Watson
July 20, 2023
•[ leak, sqlinjection, finance ]
Pension Benefits Information (PBI) files a notice of data breach on behalf of Willis Towers Watson (WTW) after discovering that experienced a MOVEit-related breach at PBI affected confidential information that had been provided to WTW.
Pacific Premier Bank
July 20, 2023
•[ leak, sqlinjection, finance ]
Pacific Premier Bank files documents with the Securities and Exchange Commission describing a third-party data breach involving a vendor's use of MOVEit
Sun Life Assurance Company of Canada (Sun Life)
July 13, 2023
•[ hack, misconfiguration, finance ]
Sun Life Assurance Company of Canada (Sun Life) posts a notice on its website revealing to have been hit by the CVE-2023-34362 MOVEit vulnerability.
Rodeo Finance
July 11, 2023
•[ financial, finance ]
An attacker steals $1.53 million from Arbitrum-based Rodeo Finance, marking the second cyberattack against the decentralized finance protocol this month.
Guarantee Trust Life Insurance Company
July 12, 2023
•[ hack, phishing, finance ]
Guarantee Trust Life Insurance Company files a notice of data breach after determining that an unauthorized party accessed an employee's email account that contained confidential consumer information.
Crum & Forster
July 17, 2023
•[ ransomware, malware, finance ]
Crum & Forster is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
Multichain
July 11, 2023
•[ financial, finance ]
Multichain suffers an additional $103 million loss of crypto assets despite it is not clear if the loss is the result of a cyber attack or a rug pull.
American National Insurance Company
July 11, 2023
•[ leak, sqlinjection, finance ]
American National Insurance Company confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Sigrist, Cheek, Potter & Huyser
July 11, 2023
•[ hack, phishing, finance ]
Sigrist, Cheek, Potter & Huyser (SCP&H) files a notice of data breach after discovering that an unauthorized party gained access to the companys email system and cloud-based storage site.
Revolut
July 9, 2023
•[ financial, hack, finance ]
The Financial Time reveals that In early 2022, threat actors exploited a zero-day flaw in Revolut payment systems to steal more than $20 million.
