Fidelity Investments
October 9, 2024
•[ hack, finance ]
Fidelity Investments, a Boston-based multinational financial services company, discloses that the personal information of over 77,000 customers was exposed after its systems were breached in August.
EigenLayer
October 4, 2024
•[ hack, phishing, finance ]
EigenLayer team says it is investigating an unapproved selling activity of about 1.6 million of EigenLayers EIGEN tokens, worth about $5.7 million. In a subsequent update the company reveals that the unapproved token-selling incident was due to a hack, after a malicious attacker compromised an email thread involving an investors token transfer into custody.
Mutua Madrileña
September 27, 2024
•[ hack, misconfiguration, finance ]
Mutua Madrilea suffers a cyber attack on its home customer base, through an external provider, which affects thousands of customers.
Bedrock
September 27, 2024
•[ financial, finance ]
Crypto liquid restaking protocol Bedrock loses roughly $2 million in a security exploit. In return, the attacker is offered the job of securing the very protocol it stole from.
Maestro Bot
September 19, 2024
•[ financial, finance ]
Reports emerge that even the users of the cryptocurrency trading bot Maestro are drained of $200,000 worth of digital assets.
Wright, Moore, DeHart, Dupuis & Hutchinson
September 19, 2024
•[ hack, finance ]
Public accounting firm Wright, Moore, DeHart, Dupuis & Hutchinson (WMDDH) notifies over 127,000 individuals that their personal information was stolen in a July 2023 data breach.
Truflation
September 25, 2024
•[ financial, malware, finance ]
Crypto project Truflation loses over $5 million from its treasury multisig and personal wallets in a malware attack
OpenAI's press account on X
September 23, 2024
•[ financial, social, finance ]
Crypto scammers hijack OpenAI Newsroom, OpenAI's press account on X, formerly Twitter, to advertise a nonexistent token $OPENAI.
Equiniti Trust Company, formerly known as American Stock Transfer & Trust Company
September 19, 2024
•[ financial, misconfiguration, finance ]
In a second breach, an unknown threat actor was able to create fake accounts with American Stock Transfer & Trust, by using stolen Social Security numbers of various American Stock Transfer accountholders, allowing them to liquidate securities held in the legitimate accounts and transfer approximately $1.9 million to external bank accounts.
Equiniti Trust Company, formerly known as American Stock Transfer & Trust Company
September 19, 2024
•[ financial, phishing, finance ]
Equiniti Trust Company agrees to pay $850K after an unknown threat actor, pretending to be an employee of a U.S.-based public issuer client of American Stock Transfer, instructed the Company to issue millions of new shares, liquidate those shares, and send the proceeds to an bank in Hong Kong, leading to a loss of roughly $4.78 million.
DeltaPrime
September 16, 2024
•[ financial, finance ]
DeltaPrime, a decentralized finance (DeFi) platform, announces that its Arbitrum-based protocol, DeltaPrime Blue, was exploited in a cyber attack that drained approximately $5.98 million.
MoneyGram
September 23, 2024
•[ hack, finance ]
Money transfer giant MoneyGram confirms it suffered a cyberattack after dealing with system outages and customer complaints about lack of service since Friday.
Shezmu
September 21, 2024
•[ hack, finance ]
Shezmu, a crypto landing platform, suffers a $4.9 million worth hack after a storage vault is compromised. However the platform is able to recover the stolen funds within hours of successfully negotiating with the threat actor.
Star Health and Allied Insurance
August 13, 2024
•[ leak, misconfiguration, finance ]
Stolen customer data including medical reports from India's biggest health insurer, Star Health, is publicly accessible via chatbots on Telegram
CreditRiskMonitor
August 7, 2024
•[ leak, finance ]
CreditRiskMonitor, a provider of intelligence and analytics for credit and supply chain professionals, discloses a data breach impacting employees and contractors.
Monobank
August 19, 2024
•[ hack, ddos, finance ]
Threat actors target Monobank, one of Ukraines most popular online banks with a massive distributed denial-of-service (DDoS) attack, primarily focusing on a service used by Ukrainians to raise donations for the military.
Patelco Credit Union
June 29, 2024
•[ ransomware, malware, finance ]
Patelco Credit Union discloses it experienced a ransomware attack that led to the proactive shutdown of several of its customer-facing banking systems to contain the incident's impact.
Undisclosed financial institution
July 1, 2024
•[ hack, ddos, finance ]
Researchers at Radware reveal that a financial institution in the Middle East suffered a DDoS attack lasting more than 100 hours in total, averaging 4.5 million requests per second.
Gemini
June 3, 2024
•[ hack, finance ]
Cryptocurrency exchange Gemini warns it suffered a data breach incident caused by a cyberattack at its Automated Clearing House (ACH) service provider, whose name was not disclosed.
Banco Santander
May 14, 2024
•[ leak, misconfiguration, finance ]
Banco Santander announces it suffered a data breach impacting customers after an unauthorized actor accessed a database hosted by one of its third-party service providers. ShinyHunters claims Santander breach, selling data for 30M customers
