WebSAMS
December 6, 2019
•[ hack, leak, education ]
Hackers break into WebSAMS (web-based school administrative and management system), a government system used by most of Hong Kong's schools, as a consequence eight schools are breached, with three of them reporting data leaks.
Fort Worth Water Department
December 5, 2019
•[ financial, malware, government ]
The Fort Worth Water Department notifies about 3,000 customers that their payment information may have been exposed during a data breach. This is another occurrence of the Click2Gov breach.
Dnipro Control System
November 29, 2019
•[ espionage, government ]
Researchers from Anomali reveal a new campaign carried out by the Russia-linked Gamaredon cyberespionage group, targeting Ukrainian targets, including diplomats, government and military officials. One of the targets is the Dnipro Control System, which is used by the Ukrainian Armed Forces.
Ministry of Foreign Affairs of Ukraine
November 29, 2019
•[ espionage, malware, government ]
Researchers from Anomali reveal a new campaign carried out by the Russia-linked Gamaredon cyberespionage group, targeting Ukrainian targets, including diplomats, government and military officials. One of the targets is the Ukrainian Ministry of Foreign Affairs.
Ohio election infrastructure
November 26, 2019
•[ hack, government ]
Ohio officials reveal to have thwarted a cyber attack against its election infrastructure earlier this month (November 5). The attack was apparently linked to a Russian company in Panama.
Ukrainian Ministry of Foreign Affairs
November 25, 2019
•[ espionage, government ]
Gamaredon, a Russian-speaking APT, targeted Ukrainian government entities, including the Ministry of Foreign Affairs, from September to November 2019.
New York City Police Department
November 24, 2019
•[ ransomware, malware, government ]
The New York Post reveals that the New York City Police Department's fingerprint database was hit with ransomware in October 2018.
Belgium's trade mission to China
November 23, 2019
•[ espionage, government ]
Belgium's trade mission to China suffers a "massive cyber-attack." China State Security is indicated as the possible culprit.
Twitter account of Arron Banks, the founder of the pro-Brexit campaign Leave.EU
November 19, 2019
•[ hack, leak, government ]
The Twitter account of Arron Banks, the founder of the pro-Brexit campaign Leave.EU, is hacked. The attackers leak thousands of his private messages.
UK Labour Party
November 12, 2019
•[ hack, ddos, government ]
The UK Labour Party is hit by two DDoS attack in the same day. The Lizard Squad group takes responsibility for the attack.
UK Conservative Party
November 12, 2019
•[ hack, ddos, government ]
The UK Conservative Party is hit by a DDoS attack in the same day.
Union County, NJ
November 12, 2019
•[ ransomware, malware, government ]
Union County, NJ is the victim of an apparent ransomware attack, with the threat actors disrupting employee email access.
Dover, NJ
November 9, 2019
•[ ransomware, malware, government ]
The town of Dover's municipal computers are hit by the Ryuk ransomware. The attack was repelled swiftly and no ransom demand was made.
Indian Space Research Organisation (ISRO)
November 7, 2019
•[ espionage, government ]
It is believed that North Korean hackers from the Lazarus group targeted the Indian Space Research Organisation during the Chandrayaan-2 moon mission in September.
Government of Nunavut
November 2, 2019
•[ ransomware, malware, government ]
A ransomware attack cripples essential electronic communications within the Government of Nunavut.
U.S. Virgin Islands Water and Power Authority (WAPA)
November 1, 2019
•[ hack, misconfiguration, government ]
The U.S. Virgin Islands Water and Power Authority is the latest victim of a new Click2Gov Breach.
Eltuz
October 31, 2019
•[ espionage, malware, government ]
Unit 02616 of Uzbekistan's National Security Service used FinFisher, a German spyware, to attack dissidents. Among the targets is Eltuz a regional news outlet that reports on the Uzbek government.
City of Ocala
October 28, 2019
•[ financial, social, phishing ]
The City of Ocala in Florida falls victim to a business email compromise scam (BEC) that ends with redirecting over $742,000 to a bank account controlled by the fraudster(s).
Website of the President of Georgia
October 28, 2019
•[ hack, government ]
The websites of several Georgian government agencies, media outlets, and NGOs are hit by cyberattattacks. Among the victims are the websites of President Salome Zourabichvili and the Goergian courts. Russia is blamed for the attacks.
Indian Railways
October 28, 2019
•[ leak, misconfiguration, government ]
In November 2019, the website for Indian Rail left more than 2M records exposed on an unprotected Firebase database instance. The exposed data included 583k unique email addresses alongside usernames and passwords stored in plain text.