People's Energy
December 16, 2020
•[ leak, energy ]
People's Energy, a UK energy supplier, has suffered a data breach that has affected its entire customer base.
People's Energy
December 16, 2020
•[ leak, energy ]
In December 2020, the UK power company People's Energy suffered a data breach. The breach exposed almost 7GB of files containing 359k unique email addresses along with names, phones numbers, physical addresses and dates of birth. The incident also included People's Energy staff email addresses and bcrypt password hashes (no customer passwords were exposed). The data was provided to HIBP by a source who requested it be attributed to pom@pompur.in.
Inchcape
December 14, 2020
•[ ransomware, leak, malware ]
Automotive services provider Inchcape Australia appears to have been compromised by the Windows Ransomexx ransomware, with the cyber criminals who hit the company leaking some data that they stole, on the dark web.
Chinese Communist Party
December 13, 2020
•[ leak, government ]
A major leak has exposed the information of almost two million Chinese Communist Party members.
Capital Economics
December 12, 2020
•[ leak, finance ]
In December 2020, the economic research company Capital Economics suffered a data breach that exposed 263k customer records. The exposed data included email and physical addresses, names, phone numbers, job titles and the employer of impacted customers.
Nintendo
December 11, 2020
•[ hack, leak, technology ]
Ryan Hernandez, a California man who admitted to hacking Nintendo and leaking proprietary data several times since 2016 has been sentenced to three years in prison.
7 million debit and credit cardholders in India
December 8, 2020
•[ leak, misconfiguration, finance ]
Sensitive details belonging to 7 million debit and credit cardholders in India are available on a public Google Drive document that has been circulating on the dark web.
TSYS
December 8, 2020
•[ ransomware, leak, malware ]
Payment card processing company TSYS has suffered a ransomware attack. The attackers also stole and publishe TSYS data.
Maxim Healthcare
December 3, 2020
•[ leak, healthcare ]
Healthcare provider and staffing agency discloses a past data breach compromising patient personal information.
Estonian Ministry of Economic Affairs and Communications
December 2, 2020
•[ leak, government ]
The Estonian Ministry of Economic Affairs and Communications suffered a data breach in November.
Estonian Ministry of Foreign Affairs
December 2, 2020
•[ leak, government ]
The Estonian Estonian Ministry of Foreign Affairs suffered a data breach in November.
Estonian Ministry of Social Affairs
December 2, 2020
•[ leak, government ]
The Estonian Ministry of Social Affairs suffered a data breach in November.
GamingMonk
December 2, 2020
•[ leak, technology ]
In December 2020, India's "largest esports community" GamingMonk (since acquired by and redirected to MPL Esports), suffered a data breach. The incident exposed 655k unique email addresses along with names, usernames, phone numbers, dates of birth and bcrypt password hashes.
MyFreeCams
December 1, 2020
•[ financial, hack, leak ]
A data broker who allegedly hacked adult chat and web-streaming website MyFreeCams.com has sold nearly 2 million user records on a dark web forum. The hacker exfiltrated records from the company's servers in December 2020 after an SQL injection.
Warren-Washington-Albany ARC
December 1, 2020
•[ leak, ransomware, malware ]
Warren-Washington-Albany ARC has some data leaked by the Conti ransomware gang.
Embraer
November 30, 2020
•[ ransomware, leak, malware ]
Brazilian aerospace and defence group Embraer is targeted by a RansomExx ransomware cyberattack. A few days later the attackers leak the stolen data.
St. Margaret's Hospice
November 25, 2020
•[ leak, healthcare ]
St. Margaret's Hospicce files appear on PYSA data leak wesbite, less than 500 files include patient information.
IIMJobs
November 23, 2020
•[ leak, hack, technology ]
The database of the Indian job board IIMJobs is leaked on a hacking forum after the website suffered a data breach. 1.4 million users are affected.
Lazada
November 21, 2020
•[ leak, retail ]
Online retail operator, Lazada, insisted it was not responsible for leaking any online shoppers' data following a report claiming that about 13 million records from Lazada Thailand were being offered for sale on an underground trading forum.
Mitsubishi Electric Corp.
November 20, 2020
•[ leak, manufacturing ]
Mitsubishi Electric Corp. has been hit by a massive cyberattack that may have resulted in the leaking of information related to its business partners.
