AspenPointe
September 12, 2020
•[ hack, leak, healthcare ]
AspenPointe, a Colorado provider of outpatient and inpatient crisis, mental health, substance abuse, and behavioral services suffered a data breach in September that involved the exfiltration of certain information including name, date of birth, Social Security number, driver's license number, and/or bank account information.
Secure Data Technologies, Inc.
September 11, 2020
•[ hack, insider, leak ]
Secure Data Technologies, Inc. sued a former employee for hacking the company's emai system and removing confidential and proprietary information.
Planned Parenthood of Metropolitan Washington, D.C
September 3, 2020
•[ leak, healthcare ]
Planned Parenthood of Metropolitan Washington, D.C., on Friday reveals it had a breach of patient information last fall.
Tesla's Nevada Gigafactory
August 28, 2020
•[ ransomware, insider, leak ]
The FBI thwarted the plans of 27-year-old Russian national Egor Igorevich Kriuchkov to recruit an insider within Tesla's Nevada Gigafactory, persuade him to plant malware on the company's network, and then ransom Tesla under threat that he would leak data stolen from their systems.
Staples
September 2, 2020
•[ leak, retail ]
Giant office retail company Staples informed some of its customers that data related to their orders has been accessed without authorization.
Clark County School District
August 28, 2020
•[ leak, education ]
Clark County schools in Las Vegas notify parents of a "data security incident" involving district computers.
Utah Gun Exchange
August 17, 2020
•[ leak, retail ]
Earlier this month, datasets containing over 240,000 records of the Utah Gun Exchange website were posted openly on a popular hacking forum.
New South Wales drivers
August 26, 2020
•[ leak, government ]
A data leak containing 54,000 scanned New South Wales (NSW) driver's licenses and various tolling notice statutory declarations was discovered by security researcher Bob Diachenko last week.
Kariyer
August 12, 2020
•[ leak, misconfiguration, technology ]
A file containing the information of 50,000 members of Kariyer.net is found on the web by LVKK, the Turkish data protection authority.
RailYatri
August 12, 2020
•[ leak, misconfiguration, technology ]
One of India's most popular travel booking hubs has suffered a significant data breach that led to the loss of over 43GB of data as a result of a Meow bot attack. Preceding the attack, the affected Elastic search server was left publicly exposed for several days.
UK trade minister Liam Fox
August 5, 2020
•[ hack, leak, government ]
The hack of Trade Minister Liam Fox's email account led to the leak of US-UK trade documents.
Valley Regional Hospital
August 4, 2020
•[ leak, healthcare ]
Valley Regional Hospital suffers from a data breach as result of a breach at Nova Scotia Health.
Aberdeen Hospital
August 4, 2020
•[ leak, healthcare ]
Aberdeen Hospital suffers from a data breach as result of a breach at Nova Scotia Health.
Scentbird
July 30, 2020
•[ leak ]
Scentbird discloses a security breach after ShinyHunters leak their database.
New York state's Metropolitan Transport Authority
July 28, 2020
•[ leak, misconfiguration, government ]
The New York Metropolitan Authority blames Google algorithm for adding porn titles to train station search results.
Promo
July 27, 2020
•[ leak, technology ]
Promo.com, an Israeli-based marketing video creation site, discloses a data breach after a database containing 22 million user records is leaked for free on a hacker forum.
Instacart
July 23, 2020
•[ leak, brute-force, retail ]
Online shopping service Instacart says reused passwords are to blame for a recent spate of account breaches, which saw personal data belonging to hundreds of thousands of Instacart customers stolen and put up for sale on the dark web.
Regis
August 3, 2020
•[ leak, healthcare ]
Aged care operator Regis has been hit by a cyber attack. The incident led to data loss, but does not seem to have disrupted its services.
Dave
July 26, 2020
•[ leak, misconfiguration, finance ]
Loan app Dave.com has 7.5 million records leaked, blaming the breach to the OAuth tokens stolen by the attackers from Waydev.
Alfanar
July 10, 2020
•[ leak, ransomware ]
Researchers from Cyble discover internal data from Alfanar leaked from the Netwalker ransomware operators.
