Lifebear
February 28, 2019
•[ hack, technology ]
In early 2019, the Japanese schedule app Lifebear appeared for sale on a dark web marketplace amongst a raft of other hacked websites. The breach exposed almost 3.7M unique email addresses, usernames and passwords stored as salted MD5 hashes. The data was provided to HIBP by a source who requested it be attributed to "nano@databases.pw".
Pasquotank-Camden Emergency Medical Service
February 27, 2019
•[ hack, healthcare ]
Pasquotank-Camden Emergency Medical Service notifies 40,000 individuals after an unauthorized intrusion from outside the U.S. occurred in late December 2018.
Zillow
February 27, 2019
•[ hack, misconfiguration, technology ]
Zillow is sued for $60 million after a hacker manages to gain access to a property's Zillow listing page, and update its information.
Embassy Bangladesh in Egypt
February 27, 2019
•[ hack, malware, government ]
Researchers from Trustwave reveal that the web site for the Bangladeshi Embassy in Cairo has been compromised so that it distributes malicious Word documents, which install malware downloaders onto an infected computer.
GameSalad
February 24, 2019
•[ hack, education ]
In February 2019, the education and game creation website Game Salad suffered a data breach. The incident impacted 1.5M accounts and exposed email addresses, usernames, IP addresses and passwords stored as SHA-256 hashes. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".
EOS Cryptocurrency
February 23, 2019
•[ hack, misconfiguration, finance ]
A hacker steals $7.7 million worth of EOS cryptocurrency after one of the 21 maintainers of an EOS blacklist fails to update it. The maintainer is identified in eos.games.
ATM (Azienda Trasporti Milanese)
February 22, 2019
•[ hack, government ]
Unknown attackers break into the systems of ATM (the public company responsible for public transportation in Milan).
Embassy of Russia in Austria
February 22, 2019
•[ hack, ddos, government ]
After receiving complaints for the impossibility to book appointments, the Russian embassy in Austria discovers to be the victim of a DDoS attack via automated requests made by IP addresses from Iraq, Thailand, Indonesia and other countries.
UConn Health
February 22, 2019
•[ hack, phishing, healthcare ]
UConn Health discloses that an unauthorized third party had accessed employee email accounts, potentially breaching the privacy of 326,000 patients and others.
Twitter account of Tampa Mayor Bob Buckhorn
February 21, 2019
•[ hack, social, government ]
A hacker takes over the Twitter account of Tampa Mayor Bob Buckhorn and sends out a fake ballistic missile warning and a bomb threat.
Chhattisgarh BJP
February 21, 2019
•[ hack, government ]
The official website of BJP Chhattisgarh is defaced by a Pakistani hacker.
Italian Ministry of Environment
February 21, 2019
•[ hack, government ]
In name of Operation Green Rights (#OpGreenRights) LulzSecITA hack and deface several domains belonging to the Italian Ministry of Environment.
Demon Forums
February 20, 2019
•[ hack, technology ]
In February 2019, the hacking forum Demon Forums suffered a data breach. The compromise of the vBulletin forum exposed 52k unique email addresses alongside usernames and passwords stored as salted MD5 hashes.
Chester County
February 18, 2019
•[ hack, malware, government ]
Chester County is hit by a malware attack.
https://kpsports
February 16, 2019
•[ hack, government ]
Just days after the attack on CRPF convoy in Pulwama, more than 200 Pakistani websites, including the Ministry of Foreign Affairs, are reportedly defaced by an Indian hacker group - 'Team I Crew', as a sign of protest.
AZ Plastic Surgery Center
February 15, 2019
•[ hack, healthcare ]
AZ Plastic Surgery Center reveals to have been hacked by TheDarkOverlord as early as December 10, 2018.
AdventHealth Medical Group's Pulmonary & Sleep Medicine
February 15, 2019
•[ hack, healthcare ]
AdventHealth Medical Group's Pulmonary & Sleep Medicine discovers that hackers gained access to its systems and compromised the information of up to 42,161 patients. The breach started on August 2017 and was discovered on December 2018.
AltaMed Health Services Corporation
February 15, 2019
•[ hack, healthcare ]
AltaMed Health Services Corporation notifies 5,767 California residents of a data security incident at Sharecare Health Data Services, a business affiliate. SHDS detected an unauthorized third-party access as early as May 21, 2018
Hampton Roads Community Health Center
February 15, 2019
•[ hack, misconfiguration, healthcare ]
Hampton Roads Community Health Center reveals that a server hosting unencrypted patient data was compromised back in December 2018.
CHI Health
February 15, 2019
•[ hack, malware, healthcare ]
CHI Health officials reveal that a device brought in by a third-party vendor introduced a malware into the health system's network.
