Pitkin County
October 1, 2020
•[ leak, misconfiguration, government ]
Pitkin County has disclosed a data sercurity incident where a file was left accessible via the Internet and was subject to unauthorized access.
Wisepay
October 7, 2020
•[ financial, leak, hack ]
UK school payment service Wisepay has revealed that the card details of parents who made transactions on its site between October 2 and 5 have been compromised.
Unnamed e-commerece platform
October 13, 2020
•[ financial, hack, leak ]
Indian authorities are searching for a hacker who accessed the confidential data of an e-commerce company and advertised the sale of the information on the dark net. The hacker allegedly demanded money from the owner of the company to take down the list.
NATO
October 12, 2020
•[ government, leak ]
Researchers from Cyble discover a post shared by an unknown threat actor that goes online with the moniker Spectre123, where he has allegedly leaked the sensitive documents of NATO.
Havelsan
October 12, 2020
•[ leak, manufacturing ]
Researchers from the US-based firm Havelsan recently came across a post shared by an unknown threat actor that goes online with the moniker Spectre123, where he has allegedly leaked the sensitive documents Havelsan, a Turkish Military/defence manufacturer.
Hawaii Attorney General's office
October 11, 2020
•[ leak, government ]
The state of Hawaii is investigating a potential breach of data within one of their systems tied to the Attorney General's office. Nearly 150 individuals who applied for a travel exemption through the state Attorney General's website were notified Friday about the potential breach.
Intcomex
October 13, 2020
•[ ransomware, leak, malware ]
After a ransomware attack, Intcomex suffers a major data breach, with nearly 1 TB of its users' data leaked. The leaked data includes credit cards, passport and license scans, personal data, payroll, financial documents, customer databases, employee information and more.
Georgia Department of Human Services
October 10, 2020
•[ leak, government ]
The personal and health data of children and adults involved in Child Protective Services cases was exposed after a breach at the Georgia Department of Humans Services.
eSewa
October 9, 2020
•[ leak, finance ]
eSewa, a digital wallet in Nepal, suffers a massive data breach, exposing email addresses, phone numbers and passwords and other details of an undetermined number of its users.
Docsketch
October 9, 2020
•[ leak, misconfiguration, technology ]
The electronic document-signing service Docsketch says an unauthorized third-party accessed a three-week old copy of its database in early August.
Foxtons
October 2, 2020
•[ financial, leak, malware ]
Financial details belonging to customers of UK estate agency Foxtons are widely available on the dark web following a malware attack in October last year that affected parent company Foxtons Group.
Microsoft
September 25, 2020
•[ leak, technology ]
The source code for Windows XP SP1 and other versions of the operating system is leaked online.
RedDoorz
September 26, 2020
•[ leak, misconfiguration, technology ]
Singapore-based hospitality start-up RedDoorz acknowledged on Saturday (Sept 26) that one of its IT databases suffered a breach. In November, a threat actor began selling the stolen database.
University Hospital New Jersey
September 15, 2020
•[ ransomware, leak, malware ]
University Hospital New Jersey (UHNJ) has suffered a massive data leak with over 48,000 documents floating on the dark web after a ransomware attack.
Syracuse University
September 24, 2020
•[ hack, leak, phishing ]
The names and Social Security numbers of about 9,800 Syracuse University students, alumni and applicants have been exposed after someone gained unauthorized access to an employee's email account.
Belarusian police officers
September 19, 2020
•[ leak, government ]
A group of hackers has leaked the names and personal details of more than 1,000 high-ranking Belarusian police officers in response to violent police crackdowns against anti-government demonstrations.
Overseas Express Shipping Company
September 14, 2020
•[ ransomware, leak, malware ]
LockBit announces its entry into the ransomware "big leagues" by launching its own blog and publishing a database from Overseas Express Shipping Company.
Northwestern Memorial HealthCare
September 8, 2020
•[ leak, healthcare ]
Northwestern Memorial HealthCare has notified the U.S. Department of Health and Human Services about a data breach, which the provider says was initiated via one of its vendors, Blackbaud.
Fairfax County Public Schools
September 11, 2020
•[ ransomware, leak, malware ]
There was nothing on the homepage of Fairfax County Public Schools in Virginia that would indicate any cyberattack or problem, but the ransomware threat actors known as Maze had listed the FCPS on its leak site this week and provided some files as proof of access/acquisition.
Guthrie Clinic
September 9, 2020
•[ leak, healthcare ]
Guthrie Clinic is hit by the Blackbaud data breach and 92,064 patients are affected.
