Fassi Gru
June 26, 2023
•[ ransomware, leak, malware ]
The Rhysida ransomware gang adds Fassi Gru to their leak site and claims to be in possession of 490 Gb of data.
CreditTeam
June 26, 2023
•[ leak, finance ]
The criminal gang NoEscape claims responsibility for an attack to the Italian financial provider CreditTeam, and leaks 12.1 Gb of data.
Aurora National Life Assurance Company
June 25, 2023
•[ leak, misconfiguration, finance ]
Aurora National Life Assurance Company files a notice of data breach after discovering that an incident at a third-party vendor resulted in confidential consumer information being exposed to unauthorized access.
Undisclosed airport
June 23, 2023
•[ leak ]
The database of an undisclosed Italian airport with 7.8 million records is on sale in the dark web.
Indiana University Health (IU Health)
June 22, 2023
•[ leak, sqlinjection, healthcare ]
Indiana University Health (IU Health) posts a notice on its website announcing a data breach that occurred as a result of a third-party vendor's (TMG Health) use of the file transfer program MOVEit.
Vitality Group International
June 22, 2023
•[ leak, sqlinjection, technology ]
Vitality Group International files a notice of data breach after discovering that a vulnerability in a file transfer software used by the company allowed attackers to access certain confidential consumer information. The breach is believed to be related to the MOVEit CVE-2023-34362 Vulnerability.
Forevermoto
June 21, 2023
•[ leak, retail ]
Forevermoto, an Italian e-commerce site dedicated to motorbikes has its database leaked online.
UofL Health
June 21, 2023
•[ leak, healthcare ]
UofL Health confirms to have been affected by the data breach on popular file transfer tool MOVEit
Omaha Health Insurance Company
June 21, 2023
•[ leak, misconfiguration, healthcare ]
Omaha Health Insurance Company files a notice of data breach after discovering that an incident at a third-party vendor compromised consumers enrolled in the Medicare Part D Prescription Drug Plan.
Lamont Hanley & Associates
June 20, 2023
•[ leak, misconfiguration, healthcare ]
Almost 2,800 patients at Catholic Medical Center may have had their files containing personal and health information exposed in a third-party "data security incident" occurred to Lamont Hanley & Associates.
Dymocks
June 20, 2023
•[ leak, retail ]
In September 2023, the Australian book retailer Dymocks announced a data breach. The data dated back to June 2023 and contained 1.2M records with 836k unique email addresses. The breach also exposed names, dates of birth, genders, phone numbers and physical addresses.
BreachForums
June 19, 2023
•[ leak, technology ]
The reincarnated BreachForums site just has its user database stolen and published.
BreachForums Clone
June 17, 2023
•[ leak, misconfiguration, technology ]
In June 2023, a clone of the previously shuttered popular hacking forum "BreachForums" suffered a data breach that exposed over 4k records. The breach was due to an exposed backup of the MyBB database which included email and IP addresses, usernames and Argon2 password hashes.
Nuance
June 16, 2023
•[ leak, sqlinjection, technology ]
Software firm Nuance joins the list of the victims of the data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
MyShopCasa
June 16, 2023
•[ leak, retail ]
MyShopCasa, an Italian e-commerce site has its database leaked.
East Western Bank
June 16, 2023
•[ leak, malware, finance ]
East Western Bank joins the list of the victims of the data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
Corebridge Financial
June 15, 2023
•[ leak, sqlinjection, finance ]
Corebridge Financial files a notice regarding a data breach resulting from the CVE-2023-34362 vulnerability in MOVEit.
Datasite
June 15, 2023
•[ ransomware, leak, malware ]
Financial software provider Datasite is listed in the Clop ransomware gang leak site after the attackers exploited the MOVEit CVE-2023-34362 vulnerability.
subitodisponibile
June 13, 2023
•[ leak, retail ]
subitodisponibile.com, an Italian e-commerce portal, has 300,000 users leaked on the Exposed forum.
Paris High School
June 13, 2023
•[ ransomware, leak, malware ]
The Rhysida ransomware gang adds the Paris High School in Illinois to their leak site as an "auction" item.
