State of Maine
November 10, 2023
•[ leak, sqlinjection, government ]
The State of Maine announces that its systems were breached after threat actors exploited the vulnerability in the MOVEit file transfer tool and accessed personal information of about 1.3 million, which is close to the state's entire population.
Amber Hill Group
November 8, 2023
•[ ransomware, leak, malware ]
The LockBit 3.0 ransomware group adds Amber Hill Group the their leak site.
Pharmacy Group of Mississippi
November 7, 2023
•[ leak, healthcare ]
Pharmacy Group of Mississippi files a notice of data breach after discovering that information that had been entrusted to the company was subject to unauthorized access.
Robert W. Baird & Co. Incorporated
November 7, 2023
•[ leak, finance ]
Robert W. Baird & Co. Incorporated (Baird) files a notice of data breach after discovering that confidential information that consumers placed in the company's care was subject to unauthorized access.
Rosgosstrakh
November 4, 2023
•[ hack, leak, finance ]
A threat actor named Apathy hits Rosgosstrakh (Russian: ), Russia's second-largest insurance company, successfully stealing 400GB of data.
LinkedIn Scraped and Faked Data (2023)
November 4, 2023
•[ leak, misconfiguration, technology ]
In November 2023, a post to a popular hacking forum alleged that millions of LinkedIn records had been scraped and leaked. On investigation, the data turned out to be a combination of legitimate data scraped from LinkedIn and email addresses constructed from impacted individuals' names.
Summit Health
November 3, 2023
•[ ransomware, leak, malware ]
Summit Health is added in the LockBit 3.0 ransomware group leak site.
Clinique
November 1, 2023
•[ leak, manufacturing ]
The Spanish branch of Skincare products maker Clinique, a subsidiary of cosmetics giant Este Lauder, reportedly experiences a significant data breach, with the personal information of over 700,000 customers exposed by a threat actor with the moniker of Pwned.
St. Johns River Water Management District
November 1, 2023
•[ leak, government ]
St. Johns River Water Management District, a regulatory agency in Florida that oversees the long-term supply of drinking water, confirms that it responded to a cyberattack after the Cyber Av3ngers said it attacked the organization, providing samples of what it stole.
Western Washington Medical Group
October 26, 2023
•[ healthcare, leak ]
Western Washington Medical Group (WWMG) files a notice of data breach after discovering that an unauthorized party was able to access information that had been entrusted to the company.
Kearny Bank
October 25, 2023
•[ leak, sqlinjection, finance ]
Kearny Bank joins the list of the victims of the massive MOVEit attack.
Airbnb
October 25, 2023
•[ leak, technology ]
A threat actor going by the name 'Sheriff' on the darkweb puts on sale 1.2 million records allegedly stolen from Airbnb, including sensitive details such as names, email addresses, countries of residence, cities, and more.
Fredericksburg Foot & Ankle Center
October 25, 2023
•[ leak, healthcare ]
Fredericksburg Foot & Ankle Center reports a data breach that has affected up to 14,912 individuals.
Rao Hondo College
October 24, 2023
•[ ransomware, leak, malware ]
Rao Hondo College in Southern California is listed in the Lockbit ransomware leak site.
University of Tokyo
October 24, 2023
•[ leak, malware, education ]
A computer at the University of Tokyo is infected with malware, possibly leaking up to 4,341 files containing addresses and grades of students from the academic years of 2003 to 2022.
Dakota Eye Institute
October 23, 2023
•[ leak, healthcare ]
Dakota Eye Institute (DEI) files a notice of data breach after discovering that patients' personal information was compromised following a cyberattack.
Toumei
October 18, 2023
•[ leak ]
In October 2023, the Japanese consultancy firm Toumei suffered a data breach. The breach exposed over 100M lines and 10GB of data including 77k unique email addresses along with names, phone numbers and physical addresses.
Gillette Children's Specialty Healthcare
October 16, 2023
•[ leak, zero-day, healthcare ]
Gillette Children's Specialty Healthcare confirms that the protected health information of 542 patients was compromised as part of the mass exploitation of the zero day vulnerability in Progress Software's MOVEit Transfer application.
Cognisight
October 13, 2023
•[ leak, sqlinjection, healthcare ]
Cognisight files notice of data breach after discovering that the CVE-2023-34362 vulnerability within MOVEit resulted in the exposure of consumers' personal information.
Morrison Community Hospital
October 13, 2023
•[ ransomware, leak, malware ]
The ALPHV/BlackCat ransomware group adds the Morrison Community Hospital to its dark web leak site and claims to have stolen 5TB of patients' and employee's information.
