Monroe County
July 8, 2024
•[ ransomware, malware, government ]
Monroe County is hit with a BlackSuit ransomware attack.
Elite Fitness
July 5, 2024
•[ ransomware, leak, malware ]
The DragonForce ransomware group says on its leak site that it stole 5.31 gigabytes of data from Elite Fitness, New Zealand's leading fitness equipment retailer.
Florida Department of Health
July 3, 2024
•[ ransomware, malware, healthcare ]
The RansomHub ransomware group claims it breached the Florida Department of Health and gained access to a large amount of potentially sensitive data (100 GB) on Floridians.
Solano County
July 3, 2024
•[ ransomware, malware, government ]
Nearly three months after a ransomware attack disrupted phone lines, computer services and Wi-Fi across Solano County's public libraries, systems are still down.
Louisiana Special School District
July 3, 2024
•[ ransomware, malware, education ]
Louisiana Special School District suffers an Akira ransomware attack.
Alabama State Department of Education
July 3, 2024
•[ ransomware, malware, education ]
The Alabama State Department of Education says it stopped a ransomware attack last month but threat actors were still able to access some data and disrupt services.
Fairfield Memorial Hospital
July 2, 2024
•[ ransomware, leak, malware ]
The LockBit ransomware gang claims to have breached Fairfield Memorial Hospital in Illinois and adds it to their Tor leak site.
Wayne Memorial Hospital
July 1, 2024
•[ ransomware, malware, healthcare ]
The Monti ransomware gang claims to have breached Wayne Memorial Hospital in Pennsylvania and adds it to their Tor leak site.
EqualizeRCM
July 1, 2024
•[ ransomware, malware, education ]
SysInformation Healthcare Services, LLC ("SysInformation"), d/b/a EqualizeRCM discloses a ransomware attack.
Florida Community Health Centers
July 1, 2024
•[ ransomware, malware, healthcare ]
Florida Community Health Centers (FCHC) discloses to have suffered a ransomware attack affecting nearly 300,000 people.
Organizations in the manufacturing and logistics industries
July 1, 2024
•[ ransomware, malware, manufacturing ]
Researchers from Halcyon discover Volcano Demon, a new ransomware group targeting organizations in manufacturing and logistics via an encryptor dubbed LukaLocker.
Berman & Rabin
July 1, 2024
•[ ransomware, malware ]
Law firm Berman & Rabin notifies roughly 152,000 individuals that their personal information was compromised in a July 2024 ransomware attack.
Multiple U.S. defense contractors
July 1, 2024
•[ espionage, malware, government ]
Between July 2024 and July 2025, the Chinese state-linked group RedNovember, operating under the Ministry of State Security (MSS), conducted an espionage campaign exploiting internet-facing network devices and Outlook Web Access systems to infiltrate at least two U.S. defense contractors. Attackers deployed the Go-based backdoor Pantegana, Cobalt Strike, and SparkRAT for reconnaissance and persistence, exfiltrating sensitive defense-related data.
Patelco Credit Union
June 29, 2024
•[ ransomware, malware, finance ]
Patelco Credit Union discloses it experienced a ransomware attack that led to the proactive shutdown of several of its customer-facing banking systems to contain the incident's impact.
Kadokawa
June 28, 2024
•[ ransomware, leak, malware ]
Japanese media giant Kadokawa confirms that some of its data was leaked in a ransomware attack early June 2024. The BlackSuit ransomware gang claims responsibility for the attack.
Pediatric Urology Associates
June 28, 2024
•[ ransomware, malware, healthcare ]
Pediatric Urology Associates is allegedly hit with a dAn0n ransomware attack.
Shoe Zone
June 28, 2024
•[ hack, malware, retail ]
In June 2024, the UK footwear chain Shoe Zone disclosed a data breach that was subsequently posted for sale on a popular hacking forum. The data included over 100k orders containing names, addresses, partial credit card numbers (card type and last 4 digits), and 46k unique email addresses. The data was provided to HIBP by a source who requested it be attributed to "IntelBroker".
University Hospital Centre in Zagreb, a.k.a. KBC Zagreb
June 27, 2024
•[ ransomware, malware, healthcare ]
The LockBit ransomware gang claims responsibility for a cyberattack on Croatias largest hospital, which forces it to shut down IT systems for a day.
Palomar Health Medical Group
June 26, 2024
•[ ransomware, malware, healthcare ]
Palomar Health Medical Groups (PHMG) phones and computer systems are still down after suspicious activities nearly two months ago.
South Africa’s National Health Laboratory Service
June 25, 2024
•[ ransomware, malware, healthcare ]
South Africas National Health Laboratory Service (NHLS) confirms to be dealing with a ransomware attack.
