ToonDoo
August 21, 2019
•[ hack, technology ]
In August 2019, the comic strip creation website ToonDoo suffered a data breach. The data was subsequently redistributed on a popular hacking forum in November where the personal information of over 6M subscribers was shared. Impacted data included email and IP addresses, usernames, genders, the location of the individual and salted password hashes.
PokerTracker
August 20, 2019
•[ hack, malware, technology ]
The PokerTracker website is compromised and loaded with a Magecart script.
Embassy of Russia in the United Kingdom
August 19, 2019
•[ hack, ddos, government ]
The UK Russian Embassy is taken down by a DDoS attack and remains unreliable for nearly 20 hours.
Macon County Circuit Clerk
August 19, 2019
•[ hack, government ]
The Macon County Circuit Clerk's website is defaced.
European Central Bank
August 15, 2019
•[ hack, finance ]
The European Central Bank uncovers a data breach in its Bank newsletter. The attackers had access for months to the contact information of hundreds of financial industry subscribers to the Banks' Integrated Reporting Dictionary (BIRD) website.
San Dieguito Union High School District
August 15, 2019
•[ hack, malware, education ]
The San Dieguito Union High School District sends out an email alerting them of a malware attack on August 9.
Virginia Gay Hospital
August 15, 2019
•[ hack, phishing, healthcare ]
Virginia Gay Hospital notifies patients after discovering a compromised employee email account.
Bayview Dental
August 13, 2019
•[ hack, healthcare ]
Bayview Dental is hit by an unspecified cyber attack. The attack was discovered on July 4.
Choice Hotels
August 13, 2019
•[ hack, misconfiguration ]
Hackers claim to have stolen 700,000 guest records belonging to Choice Hotels, one of the largest hotel chains in the world. The data was left exposed in an unsecured MongoDB.
Cracked
August 13, 2019
•[ hack, technology ]
Hackers from Raidforums breach the site of rival hacking forum Cracked.to and spill data for more than 321,000 of its members. The breach occurred in July.
Indian Army
August 13, 2019
•[ hack, malware, government ]
The Indian Army detects a cybersecurity incident involving the computer of a senior office infected with malware.
Argentine Naval Prefecture
August 12, 2019
•[ leak, hack, government ]
Hackers leak 700 GB of data obtained from the government of Argentina, including confidential documents, wiretaps and biometric information from the Argentine Federal Police, along with the personal data of police officers. The Twitter account of the Argentine Naval Prefecture was hacked as well and used to share the stolen information and post fake news stories.
University of Florida
August 10, 2019
•[ hack, education ]
VandaTheGod defaces multiple sites associated with the University of Florida.
Transport for London (TfL)
August 8, 2019
•[ hack, brute-force, government ]
Transport for London (TfL) is forced to temporarily suspend the website for its Oyster system after an apparent credential stuffing attack on customers.
National Baseball Hall of Fame
August 7, 2019
•[ financial, hack, malware ]
The website for the National Baseball Hall of Fame is hacked to include a MageCart script that stole the payment information of customers who purchased items on the site. The infection occurred between November 15, 2018 and May 14, 2019.
State Farm
August 7, 2019
•[ hack, brute-force, finance ]
US banking and insurance giant State Farm says it suffered a credential stuffing attack in July, during which "a bad actor" was able to confirm valid usernames and passwords for State Farm online accounts.
Township of Maplewood
August 7, 2019
•[ hack, malware, government ]
The Township of Maplewood discovers a malware infection. The infection started on December 2018.
Murfreesboro Water Department
August 3, 2019
•[ hack, government ]
The online access portal for Murfreesboro Water Department bill payment is defaced.
SuperINN
August 2, 2019
•[ hack ]
SuperINN notifies its clients of a hack impacting more than 43,000 consumers.
Poshmark
August 1, 2019
•[ hack, retail ]
Poshmark, an online marketplace where North American users can buy and sell new or used clothes, shoes, and accessories, discloses a data breach: an unauthorized party gained access to its servers from where it stole personal information.