Impact Guru
July 8, 2020
•[ leak, finance ]
Researchers from Cyble identify a threat actor claiming to be in possession of more than 500,000 confidential data records of Impact Guru, a crowdfunding platform.
Citrix third-party
July 15, 2020
•[ leak, misconfiguration, technology ]
An actor sells what they claim to be a database with information on 2,000,000 Citrix customers on the dark web. An official statement by the company reveals that the database has been obtained from a third-party.
Bcycle
July 6, 2020
•[ financial, leak, malware ]
BCycle, a bicycle sharing service, suffered a malware attack in April and launched an investigation, according to a company letter. The stolen information may have included names, credit card numbers and addresses.
Sheffield Hallam University
July 16, 2020
•[ leak, misconfiguration, education ]
The Sheffield Hallam University confirms that it is dealing with a data breach linked to the software provider Blackbaud.
Wattpad
July 14, 2020
•[ leak, technology ]
An allegedly stolen Wattpad database containing 270 million records is being sold in private sales for over $100,000 and offered for free on hacker forums.
eToro
July 6, 2020
•[ leak, finance ]
Using the alias "Sheriff," a threat actor advertises an auction for 62,000 accounts belonging to users of the eToro social trading platform.
PEI-Genesis, Inc.
July 3, 2020
•[ leak ]
PEI-Genesis, Inc. ("PEI-Genesis") recently announced an event that may have impacted the privacy of personal information relating to certain individuals and businesses.
Brazilian government officials including president Jair Bolsonaro
June 26, 2020
•[ leak, government ]
The Brazilian federal police are investigating the leak of personal details of senior government officials including president Jair Bolsonaro.
Ledger
June 25, 2020
•[ leak, misconfiguration, finance ]
Crypto-wallet firm Ledger reveals a major security breach of its e-commerce and marketing database, resulting in the compromise of one million customer email addresses and the personal details of thousands after the vulnerability was exploited on June 25, 2020.
Frost & Sullivan
June 24, 2020
•[ leak, misconfiguration, technology ]
U.S. business consulting firm Frost & Sullivan is breached after data from an unsecured backup folder exposed on the Internet is sold on a hacker forum.
Delhi State Health Mission website
June 27, 2020
•[ leak, government ]
The Kerala Cyber Hackers claim they have accessed the personal data of 80,000 COVID-19 patients in New Delhi, in protest at the treatment of healthcare workers.
Far Eastern University (FEU)
June 17, 2020
•[ leak, education ]
1,000 student accounts from the Far Eastern University (FEU) are made public, with details such as names, student numbers, and passwords exposed.
Bharat Earth Movers Limited (BEML)
June 9, 2020
•[ leak, government ]
Researchers from Cyble report that a threat actor is offering documents of the Indian defence contractor Bharat Earth Movers Limited (BEML) on a dark web black-market.
Preen.Me
June 8, 2020
•[ leak, technology ]
Researchers from Risk Based Security reveal that personal data of an estimated 350,000 social media influencers and users has been accessed and partially leaked following a breach at social media marketing firm Preen.Me.
puebla
June 12, 2020
•[ hack, ransomware, leak ]
A Russian hacker named m1x breaches a Mexican government web portal (puebla.gob.mx) and three days later once the government refused to pay a ransom, publicly-releases some 14,000 Mexican taxpayer ID numbers.
Florida Orthopedic Institute
June 19, 2020
•[ leak, healthcare ]
The Florida Orthopedic Institute warns of a data breach that occured on or around April 9.
www
June 12, 2020
•[ leak, healthcare ]
A data leak that contains sensitive information of 12,472 Indian blood donors is posted on two forums.
ST Engineering
June 5, 2020
•[ ransomware, leak, malware ]
The threat actors behind the Maze ransomware steal and leak the data of ST Engineering.
Airlink International UAE
May 30, 2020
•[ leak, automotive ]
Cybersecurity researchers from Cyble have found a threat actor sharing leaked data of Airlink International UAE for free on two platforms on the dark web.
LiveJournal
May 27, 2020
•[ leak, hack, technology ]
Blogging platform LiveJournal appears to have suffered a security breach in 2014, and multiple hackers are selling the company's user database on the dark web and on hacking forums (26 million users).
