Conti
February 27, 2022
•[ leak, insider, government ]
A Ukrainian cybersecurity researcher published the biggest leak ever of files and data from Conti following Conti's publicly supporting Russia's invasion of Ukraine. Conti is a syndicate of Russian and Eastern Europe cybercriminals wanted by the FBI for conducting attacks on hundreds of US organizations and causing millions of dollars in losses. The thousands of internal documents and communications leaked include evidence that appears to suggest Conti operatives have contacts within the Russian government, including the FSB intelligence service.
LaRue County High School students
January 6, 2021
•[ insider, leak, education ]
A former Kentucky prinicpal has been ordered to pay $3.6 million for confiscating students' phones, and downloading and trading their nude photos online.
Mobile users in China
December 7, 2020
•[ insider, malware, technology ]
A court in China finds a Gionee subsidiary guilty of intentionally installing malware on millions of smartphones. The company knowingly infected nearly 21.75 million devices with a Trojan and made $4.2 million in profit.
Sherman Independent School District
November 20, 2020
•[ insider, misconfiguration, education ]
The Sherman Independent School District is investigating a data breach after two Sherman High School students accessed private information.
Trillium Health
October 28, 2020
•[ insider, healthcare ]
A former technology employee at Trillium Health is accused of accessing the personal information of numerous co-workers and stealing nude photographs and videos of them
My Health Record
October 28, 2020
•[ insider, healthcare ]
In itsannual report, the Australian Digital Health Agency (ADHA), the agency responsible for oversigth of My Health Record has revealed two incidents that compromised the medical records system during FY 2020. The second incident involved unauthorized access to an individual's My Health Record by a member of the person's treatment team.
Amazon
October 28, 2020
•[ insider, leak, retail ]
Amazon fires an employee after they disclosed customer emails to an unauthorized third party.
Absa
October 27, 2020
•[ insider, finance ]
South African financial services group Absa has revelaed that one of its employees sold the personal information of 200,000 clients to third parties.
Century 21
October 24, 2020
•[ insider, misconfiguration, retail ]
Hector Navarro, a former Human Resources systems administrator at Century 21's Manhattan department store, has been indicted for breaching the company's network to steal and alter data after resigning in October 2019.
Hennepin HealthCare
October 13, 2020
•[ insider, misconfiguration, healthcare ]
Five employees at Hennepin HealthCare have been fired for improperly accessing George Floyd's medical information.
Kate Ainge
October 9, 2020
•[ insider, misconfiguration, government ]
A Crown Prosecution Service lawyer is on trial accused of unlawfully accessing information about his judge wife's new lover.
Unnamed individual
October 7, 2020
•[ insider, misconfiguration, government ]
A Welsh police officer plead guilty to misusing Dyfed-Powys Police computers to unlawfully access information about the ex-partner of a woman he was in a relationship with.
Hospital for Special Surgery
October 2, 2020
•[ insider, malware, healthcare ]
Richard Liriano was sentenced yesterday to 30 months in prison for engaging in a scheme to use malicious software programs, including a program known as a "keylogger," on dozens of his coworkers' computers at a New York City-area hospital, secretly obtaining user names and passwords to his victims' personal email and other accounts, and using that unauthorized access to steal private and confidential files.
Commonwealth Scientific and Industrial Research Organisation
September 21, 2020
•[ insider, malware, government ]
The Australian Federal Police (AFP) on Monday announced the sentencing of a 34-year old man from Sydney for using Commonwealth Scientific and Industrial Research Organisation (CSIRO) equipment to carry out cryptocurrency mining.
Geisinger Berwick
September 19, 2020
•[ insider, healthcare ]
Geisinger Berwick is notifying more than 700 patients whose patients' records were accessed without justification by a now-former employee.
Secure Data Technologies, Inc.
September 11, 2020
•[ hack, insider, leak ]
Secure Data Technologies, Inc. sued a former employee for hacking the company's emai system and removing confidential and proprietary information.
Tesla's Nevada Gigafactory
August 28, 2020
•[ ransomware, insider, leak ]
The FBI thwarted the plans of 27-year-old Russian national Egor Igorevich Kriuchkov to recruit an insider within Tesla's Nevada Gigafactory, persuade him to plant malware on the company's network, and then ransom Tesla under threat that he would leak data stolen from their systems.
Tennessee State Univesity
August 17, 2020
•[ financial, insider, education ]
A former admissions worker at Tennessee State University (TSU) was sentenced to more than 30 months in federal prison after pleading guilty to student loan, wire fraud and aggravated identity theft. He was arrested for managing an elaborate scheme to steal and divert $84,506 in student loans into a bank account set up using a false name and Social Security number.
Instacart
August 20, 2020
•[ insider, misconfiguration, retail ]
US-based grocery delivery and pick-up service Instacart has disclosed a security incident that involved unauthorized access of customer information by two support agents from a third-party vendor retained by the company.
Lousiana 2nd Circuit Court of Appeals
August 6, 2020
•[ insider, government ]
Attorney Trina Chu is charged with illegally copying sensitive court documents from the Louisiana 2nd Circuit Court of Appeals in 2018.
