Dun & Bradstreet
March 15, 2017
•[ leak, misconfiguration, technology ]
A Dun & Bradstreet 52GB database containing about 33.6 million records with very specific details about each of the people involved from job title to email address is exposed.
Roberts Hawaii
February 26, 2017
•[ hack, misconfiguration, retail ]
The tour company Roberts Hawaii warns its customers about a security breach that may have affected people who purchased tours and other services on its website between July 2015 and December 2016.
North Mundham Primary in Chichester
April 23, 2017
•[ hack, misconfiguration, education ]
Police are investigating after "malicious" messages are left on a school website by Turkish nationalists in an apparent hacking attempt.
St. Mary's Catholic Academy
February 26, 2017
•[ hack, misconfiguration, education ]
Hackers break into CCTV systems of at least four British schools and stream footage of pupils live on the internet. St. Mary's Catholic Academy and Christ The King Academy Primary School are two fo the victims.
Zcoin
February 17, 2017
•[ hack, misconfiguration, finance ]
A simple one-digit typo within the source code of a cryptocurrency called Zcoin has allowed a hacker to make a profit of over $400,000 worth of cryptocurrency.
Yahoo!
February 15, 2017
•[ espionage, misconfiguration, technology ]
Yahoo sends out another round of notifications to users, warning some that their accounts may have been breached as recently as last year. The accounts were affected by a flaw in Yahoo's mail service that allowed an attacker, most likely a "state actor", according to Yahoo, to use a forged cookie created by software stolen from within Yahoo's internal systems to gain access accounts without a password.
FileSilo
February 8, 2017
•[ hack, misconfiguration, technology ]
UK magazine publisher Future's FileSilo website (FileSilo.co.uk) is raided by hackers, who make off with, among other information, unencrypted user account passwords.
AlphaBay
January 26, 2017
•[ leak, misconfiguration, technology ]
About 218,000 unencrypted private messages posted to the AlphaBay dark web marketplace are accessed and released to the public.
Sunny 107.9 WFBS-LPFM
January 31, 2017
•[ hack, misconfiguration, technology ]
Another station is hijacked to play the "F*** Donald Trump" song.
google
January 4, 2017
•[ hack, misconfiguration, technology ]
Kuroi'SH hjacks the DNS record of google.com.br and redirects the users to a defaced page.
Princeton University
January 7, 2017
•[ hack, misconfiguration, education ]
Princeton University is one of the 27,000 victims that have their data wiped by attackers leveraging a vulnerable MongoDB.
Road signs in Chicago
October 17, 2016
•[ hack, misconfiguration, government ]
A number of people at the Chicago's Grand Avenue and Central Avenue intersection witness an unusual message on a construction signboard against the mayor Rahm Emanuel.
i-dressup
September 26, 2016
•[ hack, misconfiguration, technology ]
Un unknown hacker downloads more than 2.2 million of improperly stored account credentials from i-dressup.com, a social hangout website for teenage girls.
Unknown Organization
November 17, 2016
•[ hack, misconfiguration, government ]
The Canadian army's public recruitment website (forces.ca) is hacked and briefly redirects visitors to the official website of the Chinese government.
Pont3
October 6, 2016
•[ leak, misconfiguration, retail ]
Pont3, an Australian event organizer, reveals that an unauthorized party had gained access to its mailing list account and downloaded data about individuals that subscribed to various events organized by the company in the past.
Alexa Losey Twitter Account
August 6, 2016
•[ hack, misconfiguration, technology ]
The OurMine collective hacks the Twitter account of popular Youtuber Alexa Losey.
Quest Diagnostics
November 26, 2016
•[ hack, misconfiguration, healthcare ]
Quest Diagnostics says it is investigating a recent hack that exposed the personal health information of about 34,000 people. An "unauthorized third party" gained access to names, dates of birth, lab results and, in some cases, telephone numbers on Nov. 26 through a mobile health app that gives patients access to lab results and other information.
24luv
November 12, 2016
•[ hack, misconfiguration, technology ]
The hacktivist known as ElSurveillance is back with its operation #EscortsOffline and two more data dumps from two dating sites: 24luv.com (92,937 users' email addresses and plain-text passwords) and freedateusa.com (127,395 email addresses and plain-text passwords).
Brazzers
September 5, 2016
•[ leak, misconfiguration, technology ]
Nearly 800,000 accounts for popular porn site Brazzers have been exposed in a data breach.
