Open Exchange Rates
March 12, 2020
•[ leak, misconfiguration, finance ]
Open Exchange Rates announces a data breach that exposed the personal information and salted and hashed passwords for customers of its API service. The breach occurred between February 9th, 2020, and March 2nd, 2020.
Entercom
March 6, 2020
•[ leak, misconfiguration, technology ]
US radio giant Entercom reports a data breach that took place in August 2019 after an unauthorized party was able to access database backup files stored in a third-party cloud hosting service and containing Radio.com user credentials.
College of DuPage
March 16, 2020
•[ leak, education ]
College of DuPage offers nearly free credit monitoring to over 1,700 current and former employees following a data breach.
Trident Crypto Fund
March 6, 2020
•[ leak, finance ]
The usernames and passwords of more than a quarter of a million Trident Crypto Fund customers have been stolen and published online.
Aerial Direct
March 13, 2020
•[ leak, misconfiguration, technology ]
Aerial Direct reveals that an unauthorized third party had been able to access customer data on 26 February through an external backup database, which included personal information on both current and expired subscribers from the last six years.
Microsoft
March 2, 2020
•[ leak, technology ]
The Syrian Electronic Army publishes some invoices leaked from Microsoft indicating that the company charges the FBI to view customers' information.
GeoCloud
March 2, 2020
•[ leak, misconfiguration, technology ]
A threat actor posts another database, this time from technology company GeoCloud, leaked through a public Amazon server. The data contains users' names, email addresses, and passwords as well as the company's social media keys and company information.
Monroe County Hospital & Clinics
February 17, 2020
•[ leak, phishing, healthcare ]
More than 7,000 patients of Monroe County Hospital & Clinics are notified that their personal information may have been leaked in a phishing attack occurred on December 2019.
Vijay Sales
March 2, 2020
•[ leak, misconfiguration, retail ]
A threat actor posts a leaked Vijay Sales, a large electronics retail store chain in India, database on a popular dark web hacker forum. The threat actor claims the source was from an "exposed backup server" breached in February 2020.
Transmit Security
February 24, 2020
•[ leak, technology ]
Transmit Security is breached after a security researcher contacts some of its customers and reports unauthorized access to the data.
Rady's Children's Hospital
February 26, 2020
•[ leak, misconfiguration, healthcare ]
Rady's Children's Hospital notifies patients whose data were accessed via an "open port" on June 2019, and January 2020.
Defence Information Systems Agency (DISA)
February 20, 2020
•[ leak, government ]
The U.S. Defence Information Systems Agency reveals that Social Security numbers and other personal data in its network may have been compromised between May and July 2019.
Idaho Central Credit Union
February 6, 2020
•[ leak, finance ]
Idaho Central Credit Union informs some customers of two data breaches that impacted the financial institution.
FHN
February 12, 2020
•[ leak, healthcare ]
Illinois healthcare system FHN notifies its patients of a data breach that occurred in February.
Bear Creek High
February 15, 2020
•[ leak, education ]
School officials in Lodi are investigating after student data is breached at two different schools: Bear Creek High and Ronald E. McNair High.
Nedbank
February 13, 2020
•[ leak, finance ]
Nedbank discloses a security incident that impacts the personal details of 1.7 million users. The bank says the breach occurred at Computer Facilities (Pty) Ltd, a South African company the bank was using to send out marketing and promotional campaigns.
NEC
January 30, 2020
•[ leak, malware, manufacturing ]
NEC confirms to have been hit with a cyberattack since 2018 that resulted in unauthorized access to its internal network and the exposure of 28,000 files.
100 UPS Store Locations
January 21, 2020
•[ leak, phishing, retail ]
Sensitive personal and financial information of UPS Store customers is exposed in a phishing incident affecting roughly 100 local store locations between September 29, 2019, and January 13, 2020.
Mitsubishi Electric
January 20, 2020
•[ leak, manufacturing ]
Mitsubishi Electric discloses a security breach that might have caused the leak of personal and confidential corporate information. The breach was detected on June 28, 2019. It was later revealed that the breach may have resulted in the theft of data on a hypersonic missile.
An Ukrainian government job portal
January 21, 2020
•[ leak, misconfiguration, government ]
The https://career.gov.ua has leaked the personal data of an unidentified number of job applicants. It is unclear whether the leak was a result of cyberattack or human error.
