Twitter
September 3, 2016
•[ hack, misconfiguration, technology ]
A group of hackers dubbed Spain Squad claims to have found a way to seize inactive and suspended Twitter accounts, and sells them on the social network.
Sage Software
August 17, 2016
•[ insider, misconfiguration, technology ]
A data breach at Sage Software may have compromised personal information for employees at 280 UK businesses. The breach was caused by "unauthorised access" by someone using an "internal" company computer login. The alleged author of the attack, a 32 year-old Sage employee was arrested at Heathrow airport.
Sam's Club
November 5, 2016
•[ leak, misconfiguration, retail ]
Wholesale retail giant Sam's Club has reset passwords for thousands of customers (14,600 email addresses and plain-text passwords) after their account details were posted online.
PageGroup
November 1, 2016
•[ hack, misconfiguration, technology ]
UK-based global recruitment firm PageGroup confirms that an alleged lone hacker broke into its network and illegally accessed job applicants' personal information. The data breach occurred when the hacker infiltrated a development server run by Capgemini.
Variety
September 3, 2016
•[ hack, misconfiguration, technology ]
Entertainment news site Variety is briefly taken over by the infamous hacker group OurMine. The hacking collective manages to break into Variety's content management system and defaces the site with a post of their own claiming responsibility for the attack.
LinkedIn
August 11, 2016
•[ hack, misconfiguration, technology ]
A new lawsuit reveals that data thieves used a massive botnet against LinkedIn to steal members' personal information via information scraping by fake profiles.
Quebec Liberal Party (PLQ)
June 19, 2016
•[ espionage, misconfiguration, government ]
The Quebec Liberal Party (PLQ) fixes a security issue in their video conferencing software that allowed an unknown hacker to spy on their meetings and even access the video camera.
Several Road Signs in the US
June 1, 2016
•[ hack, misconfiguration, government ]
A number of road signs in the US fall victim to a politically-motivated 'hack' attack after being altered to show messages relating to presidential candidates Donald Trump and Bernie Sanders.
Transport for NSW
May 29, 2016
•[ hack, misconfiguration, transportation ]
Transport for NSW says it is investigating a "compromise" of the TrainLink website's reservations system, which is since then shut down. The company states that no personal data or credit card has been compromised.
17 (an app particularly popular in Asia)
April 29, 2016
•[ hack, misconfiguration, technology ]
A hacker advertises a cache of 20,000 email addresses, poorly secured passwords, phone numbers, and other information from users of photo sharing and video streaming app '17', which is particularly popular in Asia.
Archdiocese of Denver
April 21, 2016
•[ hack, misconfiguration, education ]
Archdiocese of Denver notifies 18,000 individuals to have discovered a breach happened on November 2015 after an unauthorized person accessed an Archdiocese of Denver database maintained by a third-party.
Southeast Eye Institute
March 30, 2016
•[ hack, misconfiguration, healthcare ]
The Southeast Eye Institute reports a possible data breach after an unauthorized individual gained access to data of 87,000 patients via a third party affiliate.
Verizon Enterprise Solutions
March 24, 2016
•[ leak, misconfiguration, technology ]
The contact information on some 1.5 million customers of Verizon Enterprise is published on an underground forum. The company confirms to have recently discovered and remediated a security vulnerability on its enterprise client portal.
Unknown Organization
April 22, 2016
•[ hack, misconfiguration ]
United Cyber Caliphate defaces the website of the Lamont Christian Reformed Church in the city leaving a pro-Jihadi message.
ADP
April 19, 2016
•[ financial, misconfiguration, finance ]
Identity thieves steal tax and salary data from payroll giant ADP by registering accounts in the names of employees at more than a dozen customer firms. ADP says the incidents occurred because the victim companies all mistakenly published sensitive ADP account information online.
doTERRA
April 18, 2016
•[ leak, misconfiguration ]
doTERRA notifies several customers and distributors of a possible data breach involving a third-party providing them with hosting and software services.
hortinews.co.ke
May 1, 2016
•[ leak, misconfiguration, technology ]
42,000+ usernames and passwords appear in the dark web.
Coinroll Bitcoin Casino
April 17, 2016
•[ financial, misconfiguration, finance ]
Coinroll Bitcoin Casino admits that several users had the funds on their online accounts stolen. The breach could be related to an open MongoDB.
University of Massachusetts-Amherst
March 28, 2016
•[ hack, misconfiguration, education ]
Andrew "Weev" Auernheimer sends out a massive racist print job on the networks of several US universities, including Princeton University, University of California-Berkeley, University of Massachusetts-Amherst, Brown University, Smith College, and Mount Holyoke College.
Unnamed American Express third-party card processor
March 10, 2016
•[ leak, misconfiguration, finance ]
American Express warns some customers that their personal details may have been exposed due to a data breach of a third-party service provider.
