Ashley County Medical Center
August 10, 2020
•[ insider, misconfiguration, healthcare ]
Ashley County Medical Center is investigating a former employee who they claim inappropriately accessed medical records. It appears that the information was viewed out of curiosity and has not been shared with a third-party.
Stradis Healthcare
July 1, 2020
•[ insider, misconfiguration, healthcare ]
A former vice president of a company in Georgia has been sent behind bars for sabotaging systems and causing delays in the shipment of Personal Protective Equipment (PPE).
Unnamed medical device packaging company
March 29, 2020
•[ hack, insider, manufacturing ]
Christopher Dobbins has been sentenced to federal prison for hacking his former employer and sabotaging their electronic shipping records, causing more than $200,000 in damage and delaying the shipment of personal protective equipment.
Club Penguin Rewritten
July 26, 2019
•[ insider, hack, leak ]
A disgruntled administrator leaves a backdoor in Club Penguin Rewritten (a kids' gaming website) that enabled hackers to steal login data for a little over 4 million accounts.
Post Rock Rural Water District
March 27, 2019
•[ insider, misconfiguration, government ]
Kansas WWS is hacked by former employee able to use creditentials to remotely tamper with facility processes and threaten safety of drinking water.
Bithumb
March 30, 2019
•[ hack, insider, financial ]
Bithumb is hacked for the second time in less than a year as attackers (probably an insider job) manage to steal $21 million worth (3 million EOS coins and 20 million XRP).
UK Labour Party
February 21, 2019
•[ insider, misconfiguration, government ]
The UK's Labour Party locks down access to membership databases and campaign tools after a number of attempts to access personal data on its systems by "individuals who are not, or are no longer, authorized to do so".
Healthcare
November 1, 2018
•[ insider, healthcare ]
Colbi Trent Defiore, an employee at a Virginia tech company, has been sent to prison for stealing PII from Healthcare.gov customers. Defiore improperly accessed the Healthcare.gov database several times in November 2018 and used the stolen information to commit fraud.
Bloomfield Hills High School
May 19, 2018
•[ hack, insider, education ]
Two students from Bloomfield Hills High School are the main suspects of a recent hack discovered at the school. The two broke into the school's MISTAR Student Information System portal where they changed grades, attendance records, and attempted to refund lunch purchases.
Inogen
April 13, 2018
•[ insider, manufacturing ]
Inogen, a California-based medical device manufacturer, reports that 30,000 former and current customers may have had their personal information exposed when a company employee's email account was compromised sometime between Jan. 2, 2018, and Mar. 14, 2018.
Svitzer
March 15, 2018
•[ insider, misconfiguration ]
The shipping company Svitzer suffers a significant data breach affecting almost half its Australian employees when three employees have had emails auto-forwarded in the past 11 months.
Tenafly High School
December 1, 2017
•[ insider, misconfiguration, education ]
Tenafly High School informs parents that a student has gained access to its internal IT systems, changed grades to improve his GPA, and sent out college applications immediately after.
Jeffree Star
December 10, 2017
•[ hack, leak, insider ]
Jeffree Star is the victim of a data hack, after a member of staff at cosmetics store Sephora allegedly hacks into her account and leaks sensitive information about his spending habits.
Gordon Ramsay
June 7, 2017
•[ financial, hack, insider ]
The father-in-law of celebrity chef Gordon Ramsay is jailed for six months after pleading guilty to attempting to hack into his computer to steal financial information and 'dirty' secrets on the star for the hacking plot to crack into Ramsay's private email.
KCG Holdings
April 23, 2017
•[ insider, espionage, malware ]
The FBI arrests Zhengquan Zhang, a 31-year-old IT engineer, accused of installing malware on his employer's servers to steal proprietary source.
Sage Software
August 17, 2016
•[ insider, misconfiguration, technology ]
A data breach at Sage Software may have compromised personal information for employees at 280 UK businesses. The breach was caused by "unauthorised access" by someone using an "internal" company computer login. The alleged author of the attack, a 32 year-old Sage employee was arrested at Heathrow airport.
Multi-Color Corporation
June 15, 2016
•[ insider, manufacturing ]
Multi-Color, a label solutions firm, reports that a break-in at a third party affiliate resulted in the compromise of Multi-Color employee personally identifiable information.
Union League Club
May 3, 2016
•[ financial, insider, malware ]
Union League Club says it is working with the FBI to investigate a security breach involving guests' credit card information. An employee accused to have installed malicious software is fired.
Penrith High School
September 11, 2015
•[ insider, misconfiguration, education ]
A small group of students from Penrith High School have allegedly used a teacher's login credentials to access a Department of Education computer system that contains students' assessment marks.
Bodmin College
August 4, 2015
•[ hack, insider, education ]
A disgruntled former student is thought to be responsible for hacking Bodmin College's website and defacing it with a series of obscenities.
