FixedFloat
February 19, 2024
•[ hack, malware, finance ]
FixedFloat, a decentralized crypto exchange, is hacked via a crypto drainer, for at least $26 million worth of Bitcoin and Ethereum.
Financial Business and Consumer Solutions (FBCS)
February 14, 2024
•[ hack, finance ]
Financial Business and Consumer Solutions (FBCS) warns initially 1,955,385 impacted individuals in the United States that the company suffered a data breach after discovering unauthorized access to specific systems in its network. One month later the company says over 3.2 million people have been impacted.
MSH International Canada
February 9, 2024
•[ hack, finance ]
MSH International Canada, the insurance provider for members of the Public Service Health Care Plan who are posted abroad or travelling, says it recently detected a cybersecurity incident.
PlayDapp
February 8, 2024
•[ hack, finance ]
Threat actors are believed to have used a stolen private key to mint and steal over 1.79 billion PLA tokens, a cryptocurrency used within the PlayDapp ecosystem.
State Street
February 4, 2024
•[ leak, finance ]
State Street files a notice of data breach after discovering that an unauthorized party was able to access confidential information in the companys possession.
Prudential Financial
February 4, 2024
•[ ransomware, malware, finance ]
Prudential Financial discloses that its network was breached, with the attackers stealing employee and contractor data before being blocked from compromised systems. Few days later the ALPHV/BlackCat ransomware gang claims responsibility for the attack.
Crypto Users
February 1, 2024
•[ financial, malware, finance ]
The threat actors behind the 2022 LastPass breach were able to steal an estimated $5.36 million in crypto assets from over 40 wallet addresses. The wave of attacks is said to have originated from the 2022 incident in the password manager service LastPass.
Encore Bank
January 31, 2024
•[ hack, phishing, finance ]
Encore Bank files a notice of data breach after discovering that an unauthorized party was able to gain access to an employees email account.
Willis Lease Finance Corporation
January 31, 2024
•[ ransomware, malware, finance ]
Aircraft parts dealer Willis Lease Finance Corporation (WLFC) informs the US Securities and Exchange Commission that it fell victim to a cyberattack. The Black Basta ransomware gang claims responsibility for the attack.
Bankers Life and Casualty Company
January 30, 2024
•[ leak, finance ]
Bankers Life and Casualty Company files a notice of data breach after discovering that an unauthorized party was able to access personal information that had been entrusted to the company.
Somesing
January 27, 2024
•[ financial, exploit, finance ]
Somesing, a blockchain-based social karaoke platform in South Korea, suffers an exploit and loses 730 million of its native token SSX, which amounts to $11.58 million
EquiLend
January 23, 2024
•[ ransomware, malware, finance ]
New York-based global financial technology firm EquiLend says its operations have been disrupted after some systems were taken offline in a cyberattack. The LockBit ransomware gang claims responsibility for the attack.
AerCap
January 23, 2024
•[ ransomware, malware, finance ]
Aircraft leasing giant AerCap confirms falling victim to ransomware after 'Slug', an emerging cybercrime gang claimed responsibility for the attack.
Stock trading platform in Thailand
January 22, 2024
•[ leak, finance ]
A threat actor named Ghostr leaks about 186GB of data with 5.3 million records from a stock trading platform.
Monobank
January 20, 2024
•[ hack, ddos, finance ]
Monobank, Ukraines largest mobile-only bank, is hit with a DDoS attack.
Ashford
January 19, 2024
•[ hack, misconfiguration, finance ]
Ashford files a notice of data breach after discovering that an unauthorized actor was able to access and acquire information stored on the companys IT network.
First Financial Security
January 19, 2024
•[ ransomware, malware, finance ]
First Financial Security (FFS) files a notice of data breach after discovering that the company was recently targeted in a ransomware attack.
Designed Receivable Solutions (DRS)
January 18, 2024
•[ leak, finance ]
Designed Receivable Solutions (DRS), confirms the details of a data breach affecting 585,204 individuals.
Socket
January 16, 2024
•[ financial, finance ]
Blockchain protocol Socket pauses some operations after a threat actor steals $3.3 million.
Government Employees Insurance Company (GEICO)
January 15, 2024
•[ leak, finance ]
A threat actor identified as wangfei19860902055 advertises the sale of a database related to Government Employees Insurance Company (GEICO) on a popular dark web forum.