Mate1
February 29, 2016
•[ leak, misconfiguration, technology ]
A hacker on the dark web forum Hell claims to have sold the email addresses and plaintext passwords of over 27 million users of dating site Mate1.com.
Hi-Tec Sports
March 11, 2016
•[ hack, misconfiguration, retail ]
Hi-Tec Sports notifies customers about a compromise affecting its online ordering system and payment card data.
Kankakee Valley REMC
February 16, 2016
•[ hack, misconfiguration, energy ]
Kankakee Valley REMC falls victim to a possible breach, due to the access of a storage device on the cooperative's network from a foreign IP.
Republic of Uganda Ministry of Foreign Affairs
January 6, 2016
•[ hack, misconfiguration, government ]
A hacker going with the online handle of GeNiuS-JorDan defaces the official website of The Republic of Uganda, Ministry of Foreign Affairs, posting a message against the US Invasion of Iraq.
o2c
January 10, 2016
•[ hack, leak, misconfiguration ]
Fr0mShell hacks o2c.fr and dumps 4,160 accounts with clear text passwords.
Unnamed right-wing Christian group
January 3, 2016
•[ leak, misconfiguration ]
Another massive database leaked in the wild. Chris Vickery, a security researcher discovers a leak containing 56 million records belonging to a right-wing Christian group originating in the US.
Steam
December 25, 2015
•[ ddos, misconfiguration, technology ]
A DDoS attack against Steam causes the company to deploy a new caching configuration in production, which leads to the inadvertent exposure of 34,000 users.
Sanrio Digital
December 21, 2015
•[ leak, misconfiguration, technology ]
Chris Vickery, a security researcher discovers a leaked database of more than 3.3 million user accounts for Sanriotown.com and other Sanrio-owned websites like hellokitty.com and mymelody.com.
Comcast
November 11, 2015
•[ hack, misconfiguration, technology ]
Comcast resets 200k cleartext passwords, after a hacker known as Orion claims to have stolen the database and puts it on sale on the dark web. Nearly 590,000 users could have been compromised.
Emergence Health Network
October 26, 2015
•[ hack, misconfiguration, healthcare ]
Emergence Health Network(EHN) notifies 11,100 patients of an unauthorized access of a server containing protected health information.
https://www
October 25, 2015
•[ hack, misconfiguration, technology ]
An anonymous hacker hacks amzreviewtrader.com and dumps nearly 2500 usernames and clear text passwords.
Patreon
October 1, 2015
•[ hack, misconfiguration, finance ]
Patreon, the website that allows people to maintain regular donations to a website, an artist, or project, announces to have suffered a security breach. The site says some registered names, e-mail addresses, and mailing addresses were accessed after someone managed to access a debug version of the site.
EyeBuyDirect
October 21, 2015
•[ hack, financial, misconfiguration ]
An undisclosed number of individuals are notified that unauthorized access was gained to EyeBuyDirect's website and personal information, including payment card data, may have been compromised.
Penrith High School
September 11, 2015
•[ insider, misconfiguration, education ]
A small group of students from Penrith High School have allegedly used a teacher's login credentials to access a Department of Education computer system that contains students' assessment marks.
Ceph
September 18, 2015
•[ hack, misconfiguration, technology ]
Red Hat reveals to have suffered an intrusion on the sites of both the Ceph community project (ceph.com) and Inktank (download.inktank.com) that resulted in signed code being accessed.
http://itembay
August 6, 2015
•[ hack, misconfiguration, technology ]
l1kw1d hacks itembay.ca, an online game virtual currency provider and dumps 4,330 usernames with clear text passwords.
Western Governor's University
August 23, 2015
•[ leak, misconfiguration, education ]
JM511 dumps some data from the University of California at Los Angeles (UCLA) after allegedly warning the university twice. The attacker also warns other universities of possible vulnerabilities including: Western Governor's University in Utah, the University of Minnesota, DePaul University, and Northern Illinois University.
UNICEF India
August 19, 2015
•[ hack, misconfiguration, government ]
A group of Turkish hackers going with the online handles of RootDevilz, Jonturk75 and Bozkurt97 deface the official website of UNICEF India (unicef.in) and post a message against China, US, UN, EU and Israel.
Nepal Department of Transportation
August 17, 2015
•[ hack, misconfiguration, government ]
Avian and the Nepal Cyber Army hack the Nepal Department of Transportation (eproc.dor.gov.np) and dump 8,300 records with usernames and clear text passwords.
Unknown Organization
July 7, 2015
•[ hack, misconfiguration, retail ]
A group of Bangladeshi hackers going with the handle of DangerPro defaces the contact us page of the official website of Pizza Hut Israel (contact.pizzahut.co.il).
