Gas station in Detroit
July 9, 2018
•[ hack, misconfiguration, retail ]
Police in Detroit are looking into an apparent hack at a gas station that allowed people to steal more than 600 gallons of gas, valued at over $1,800. Authorities believe the thieves used some sort of remote device to take control of the pump.
Klook Travel
June 29, 2018
•[ hack, malware, technology ]
Klook Travel informs its users about a data breach incident it suffered. The attackers exploited a malicious JS code associated with SOCIAPlus, a third-party tool integrated on the site.
Algonquin College
June 29, 2018
•[ hack, education ]
The Algonquin College publishes a note indicating that the education community is still not sure how many current and former students and employees could be affected by a cyber attack that happened weeks earlier.
Cyanweb Solutions
June 27, 2018
•[ hack, technology ]
Digital marketing and web provider Cyanweb Solutions loses nearly all customer data and backups after a "criminal hacking incident" that compromises one of its servers.
Midwest City
June 24, 2018
•[ hack, misconfiguration, government ]
Midwest City, Oklahoma, reports that about 2,300 customers are potentially affected by a breach involving Superion's software Click2Gov.
Indian businessman
June 22, 2018
•[ hack, financial, finance ]
The email of a city-based businessman is hacked and INR12.5 lakh (USD 18,230) stolen and transferred to two bank accounts in China.
Major international airport
July 11, 2018
•[ hack, misconfiguration, technology ]
While researching underground hacker marketplaces, researchers from McAfee discover that access linked to security and building automation systems of a major international airport could be bought for only US$10.
BP
July 11, 2018
•[ hack, retail ]
BP emails about 60,000 people who applied for jobs in its retail stores since 2008 to notify them they could have had their personal information accessed by hackers. The company originally thought about 10,000 applicants' data had been breached.
MSK Group
July 5, 2018
•[ hack, healthcare ]
MSK Group notifies patients of a data security incident that they discovered on May 7, due to an unauthorized access to certain parts of the network at times over several month.
Humana
June 21, 2018
•[ hack, brute-force, healthcare ]
Health insurer Humana notifies an unspecified number of health plan members after detecting and blocking a credential stuffing attack against Humana.com and Go365.com. The attacks took place on June 3 and June 4 from overseas IP addresses.
Blizzard Entertainment
July 7, 2018
•[ hack, ddos, technology ]
Blizzard Entertainment is hit by a DDoS attack. Players of Overwatch, Heroes of the Storm, and World of Warcraft are affected.
Taiwan Democratic Progressive Party's (DPP)
July 3, 2018
•[ hack, misconfiguration, government ]
The Democratic Progressive Party's (DPP) official website is defaced by Chinese hackers and the website is replaced with pictures and words reading "Chinese netizens are supporting Tsai Ing-wen to run for re-election" in simplified Chinese characters.
South Eastern Regional College (SERC)
June 28, 2018
•[ hack, phishing, education ]
Personal information of hundreds of staff at the South Eastern Regional College is compromised after detecting suspicious email activity as the consequence of a hack.
Official website of Ernakulam Siva Temple
June 28, 2018
•[ hack ]
The official website of Ernakulam Siva Temple is defaced with anti-national slogans and offensive language besides a Pakistan flag.
GitHub account of the Gentoo Linux distribution
June 28, 2018
•[ hack, malware, technology ]
An unknown hacker temporarily takes control over the GitHub account of the Gentoo Linux organization and embed malicious code inside the operating system's distributions that would delete user files. The malicious code fails to trigger properly and users' remain safe.
PDQ
June 22, 2018
•[ hack, financial ]
PDQ, a fast-casual dining restaurant warns customers about a cyber attack on its computer systems in which hackers were able to access or acquire personal information from the chain's customers who paid with credit cards. The breach lasted nearly a year, from May 19, 2017 to April 20, 2018.
Chlorine distillation plant in Ukraine
July 11, 2018
•[ hack, malware, energy ]
The Ukrainian Secret Service (SBU) reveals it stopped a cyber-attack with the VPNFilter malware on a chlorine distillation plant in the village of Aulska, in the Dnipropetrovsk region. The SBU accuses Russia of operating the malware and launching the attack.
Cambodian People's Party
July 10, 2018
•[ espionage, hack, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is the ruling Cambodian People's Party.
Cambodian Ministry of Foreign Affairs and International Cooperation
July 10, 2018
•[ espionage, hack, government ]
A threat actor has compromised political parties, as well as organizations charged with overseeing the 2018 Cambodian elections, for espionage purposes. The threat actors, who are likely Chinese, have also targeted Cambodian government organizations. One of the targets is the Cambodian Ministry of Foreign Affairs and International Cooperation.
Macy's Inc.
July 9, 2018
•[ hack, phishing, retail ]
Macy's Inc. warns customers that hackers compromised the login information of some users of the retailer's websites. The suspicious activity took place from April 26 to June 12. A third party obtained valid usernames and passwords through websites not related to macys.com.
