OCR
June 30, 2023
•[ leak, education ]
Cambridgeshire Police says they are also investigating a "data breach" involving exam boards OCR
Pace University
July 7, 2023
•[ leak, sqlinjection, education ]
The Pace University confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Undisclosed vendor
June 30, 2023
•[ leak, sqlinjection, finance ]
Clearwater Credit Union files a notice of data breach after discovering the personal information of 25,660 individuals was leaked as a result of the massive MOVEit vulnerability.
Madison College
July 7, 2023
•[ leak, sqlinjection, education ]
The Madison College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Chapman University
July 7, 2023
•[ leak, sqlinjection, education ]
The Chapman University confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
CreditTeam
June 26, 2023
•[ leak, finance ]
The criminal gang NoEscape claims responsibility for an attack to the Italian financial provider CreditTeam, and leaks 12.1 Gb of data.
Datasite
June 27, 2023
•[ leak, sqlinjection, technology ]
Datasite files a notice of data breach following a third-party data breach occurred exploiting the MOVEit CVE-2023-34362 Vulnerability.
Fassi Gru
June 26, 2023
•[ ransomware, leak, malware ]
The Rhysida ransomware gang adds Fassi Gru to their leak site and claims to be in possession of 490 Gb of data.
Delaware Health Net
June 29, 2023
•[ leak, healthcare ]
The Henrietta Johnson Medical Center postes notice that some patient data was involved in a breach at Delaware Health Network (DHN), a healthcare-controlled network provider and electronic health records management provider that provides services to Henrietta Johnson Medical Center (HJMC) and other entities.
City National Bank
June 29, 2023
•[ ransomware, leak, finance ]
City National Bank in Miami, Florida is added to the Clop ransomware leak site of the victims of the MOVEit breach.
Bristol Myers Squibb
June 29, 2023
•[ leak, sqlinjection, manufacturing ]
Bristol Myers Squibb files a notice regarding a data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
Cognizant
June 28, 2023
•[ leak, sqlinjection, technology ]
Cognizant is listed by the Cl0p gang among the victims of a data breach occurred exploiting the MOVEit vulnerability.
CareSource
June 27, 2023
•[ leak, misconfiguration, healthcare ]
CareSource notifies of a data breach involving the company's use of the MOVEit file transfer application.
Jackson National Life Insurance
June 26, 2023
•[ leak, sqlinjection, finance ]
Jackson National Life Insurance discloses that 700K-800K of its customers were exposed in a data breach stemming from the exploitation of the MOVEit vulnerability.
Vitality Group International
June 22, 2023
•[ leak, sqlinjection, technology ]
Vitality Group International files a notice of data breach after discovering that a vulnerability in a file transfer software used by the company allowed attackers to access certain confidential consumer information. The breach is believed to be related to the MOVEit CVE-2023-34362 Vulnerability.
Omaha Health Insurance Company
June 21, 2023
•[ leak, misconfiguration, healthcare ]
Omaha Health Insurance Company files a notice of data breach after discovering that an incident at a third-party vendor compromised consumers enrolled in the Medicare Part D Prescription Drug Plan.
Aurora National Life Assurance Company
June 25, 2023
•[ leak, misconfiguration, finance ]
Aurora National Life Assurance Company files a notice of data breach after discovering that an incident at a third-party vendor resulted in confidential consumer information being exposed to unauthorized access.
East Western Bank
June 16, 2023
•[ leak, malware, finance ]
East Western Bank joins the list of the victims of the data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
Datasite
June 15, 2023
•[ ransomware, leak, malware ]
Financial software provider Datasite is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
Undisclosed airport
June 23, 2023
•[ leak ]
The database of an undisclosed Italian airport with 7.8 million records is on sale in the dark web.
