CircleCI
August 31, 2019
•[ leak, misconfiguration, technology ]
Software testing and delivery company CircleCI notifies a security incident involving the company and a third-party analytics vendor. An attacker was able to improperly access some user data in the vendor account.
Massachusetts General Hospital (MGH)
August 22, 2019
•[ leak, healthcare ]
Massachusetts General Hospital (MGH) exposed private data, including genetic information, on 9,900 people participating in research programs, after an "unauthorized third party" gained access to the data between June 10 and June 16.
Mastercard Priceless Specials loyalty program
August 23, 2019
•[ leak, finance ]
Mastercard discloses a data breach to the German and Belgian Data Protection Authorities involving customer data from the company's Priceless Specials loyalty program. Two files with the details of the loyalty program members are leaked on the Internet.
Argentine Naval Prefecture
August 12, 2019
•[ leak, hack, government ]
Hackers leak 700 GB of data obtained from the government of Argentina, including confidential documents, wiretaps and biometric information from the Argentine Federal Police, along with the personal data of police officers. The Twitter account of the Argentine Naval Prefecture was hacked as well and used to share the stolen information and post fake news stories.
Sure
July 29, 2019
•[ leak, phishing, technology ]
Sure is the victim of a phishing attack that steals around 400 suppliers', employees' and former employees' data.
Maryland Department of Labor
July 5, 2019
•[ leak, government ]
The Maryland Department of Labor (Maryland DoL) publishes a press release explaining that sensitive information of roughly 78,000 customers including names and social security numbers was accessed by an unauthorized party.
Presbyterian Healthcare Services
August 2, 2019
•[ leak, phishing, healthcare ]
Presbyterian Healthcare Services is the victim of a phishing attack impacting around 183,000 patients and health plan members.
Club Penguin Rewritten
July 26, 2019
•[ insider, hack, leak ]
A disgruntled administrator leaves a backdoor in Club Penguin Rewritten (a kids' gaming website) that enabled hackers to steal login data for a little over 4 million accounts.
Tennessee Higher Education Commission
July 23, 2019
•[ leak, misconfiguration, education ]
The Tennessee Higher Education Commission investigates a possible data breach of a 3rd party vendor, that potentially has exposed personal information of thousands of students.
Nemadji Research Corporation
July 11, 2019
•[ social, leak, phishing ]
The personal data of 14,591 L.A. County patients is exposed after an employee of Nemadji Research Corporation, a contractor that identifies and verifies patient eligibility for programs that reimburse care provided by DHS, is victim of a phishing attack.
Pearson PLC
July 31, 2019
•[ leak, education ]
Pearson PLC, the British maker of educational software, warns school districts that a 2018 data breach has exposed details on thousands of students, chiefly in the U.S.
Dominion National
June 21, 2019
•[ leak, healthcare ]
Dominion National discloses a breach occurred as early as August 25, 2010. The breach was discovered on April 24, 2019, so ten years later.
SocialEngineered
June 20, 2019
•[ social, hack, leak ]
SocialEngineered.net, a forum dedicated to social engineering announces to have been breached and data from tens of thousands of members leaked online.
Dave East
June 5, 2019
•[ leak ]
Rapper Dave East may have fallen victim to a nude leak after a series of explicit photos purportedly of the rapper emerge online.
U.S. Customs and Border Protection
June 11, 2019
•[ leak, government ]
The U.S. Customs and Border Protection says that a data breach exposed photos of the faces and license plates for more than 100,000 travelers. The breach is allegedly related to the one suffered by Perceptics earlier this year.
Italian Union of State Police
May 21, 2019
•[ leak, government ]
In name of #OpPulizia, Anonymous Italia release leaks of the Italian Union of State Police and four additional national organizations.
LibertyBus
May 18, 2019
•[ financial, phishing, leak ]
Passwords and log-in details for hundreds of LibertyBus customers are obtained by attackers, who used a spoof website to divert those wanting to top up their pre-paid cards.
Wyzant
May 6, 2019
•[ leak, education ]
Wyzant, an online marketplace that connects parents and students reveals a data breach which has led to the compromise of user data including Facebook profile information. The breach occurred on April 27.
Ministry of Intelligence and Security (MOIS) (APT 34 OilRig)
June 3, 2019
•[ leak, hack, malware ]
Jason, a tool for hijacking Microsoft Exchange email accounts allegedly used by the Iran-linked OilRig hacker group is leaked online.
Perceptics
May 23, 2019
•[ hack, leak, manufacturing ]
Perceptics, the maker of vehicle license plate readers used by the US government is hacked. Its internal files are leaked and offered for free on the dark web to download.
