Western Union
February 14, 2018
•[ hack, misconfiguration, finance ]
Western Union warns that some customers' information may have been accessed without authorization as a result of a computer intrusion against an external vendor system formerly used by Western Union for secure data storage.
Tenafly High School
December 1, 2017
•[ insider, misconfiguration, education ]
Tenafly High School informs parents that a student has gained access to its internal IT systems, changed grades to improve his GPA, and sent out college applications immediately after.
blog
October 26, 2017
•[ hack, misconfiguration, technology ]
Two hackers going by the online handle of "n3tr1x" and "str0ng" deface the official blog (blog.jquery.com) of jQuery.
Tarte Cosmetics
October 25, 2017
•[ leak, misconfiguration, retail ]
Tarte Cosmetics exposes nearly two million customers' personal data to the public via two unsecured MongoDB databases. Unfortunately the gang Cru3lty get hold of the data, demanding 0.2 Bitcoins for recovering the database once the data had been deleted or encrypted.
SchoolDesk
November 6, 2017
•[ hack, misconfiguration, education ]
Hackers from Team System Dz deface hundreds of websites across the US to post pro-ISIS messages, images of Saddam Hussein and a recruitment video. SchoolDesk, the Atlanta, Georgia-based web hosting company servicing these sites, confirmed the attack.
Aviva
October 25, 2017
•[ hack, misconfiguration, finance ]
According to the security group RedLock, a group of hackers managed to breach Amazon Web Services belonging to two companies on the Amazon Cloud: Aviva and Gemalto. The breach was due to poor password policy and aimed to use the resources to mine cryptocurrency.
Hetzner
November 1, 2017
•[ hack, misconfiguration, technology ]
A key database operated by large South African data centre operator and website hosting service provider Hetzner is compromised, and the company advises clients to change their passwords immediately. Compromised data includes customer and bank account details.
Etherparty
October 1, 2017
•[ hack, misconfiguration, finance ]
Hackers disrupt the Etherparty ICO (Initial Coin Offering) after hijacking the platform's website, displaying their own Ethereum address, tricking 59 ICO participants into sending funds to the wrong wallets.
Forrester Research
October 6, 2017
•[ hack, misconfiguration, technology ]
Forrester, one of the world's leading market research and investment advisory firms, admits that a security breach took place during the past week. An unidentified attacker (or attackers) has gained access to the infrastructure hosting its website stealing site credentials and proprietary research.
Road Sign in Modesto
September 10, 2017
•[ hack, misconfiguration, government ]
An electronic road sign in the city of Modesto, California is hacked and defaced with a message against President Donald Trump.
"Girls" Twitter account
August 17, 2017
•[ hack, misconfiguration, technology ]
Several HBO Twitter accounts are taken over by the notorious OurMine hacking group, posting #HBOHacked messages and warnings about security. Affected accounts include the main HBO Twitter account, as well as those for TV shows including Game of Thrones and Girls.
Mansfield 103.2
July 11, 2017
•[ hack, misconfiguration, technology ]
The UK Communications Regulator (Ofcom) is hunting a pirate who persistently overrides frequency of Mansfield 103.2 to play a modified version of "The Winker's Song".
Reliance Jio
July 9, 2017
•[ leak, misconfiguration, technology ]
Personal details of some 120 million Reliance Jio customers are exposed on the Internet in probably the biggest breach of personal data ever in India.
Hotels
June 3, 2017
•[ leak, misconfiguration, retail ]
Hotels.com sends an email to some customers advising that their username, password, email address, and the last four digits of stored credit card numbers were potentially stolen last month (between may 22 and 29).
Fast Health
May 28, 2017
•[ hack, misconfiguration, healthcare ]
Fast Health reports a security breach that could affect over 700 of their patients, when a third-party altered a code on their server, stealing the credit card information of close to 700 customers who paid bills online from January 14, 2016 to December 20, 2016.
The Harvard Crimson
May 25, 2017
•[ hack, misconfiguration, education ]
The website of Harvard's 144-year-old newspaper is defaced and posts fake stories and an altered picture of Facebook CEO Mark Zuckerberg (who was visiting the institution).
OneLogin
May 31, 2017
•[ hack, misconfiguration, technology ]
OneLogin reveals the details about an attack on its systems, confirming that a "threat actor" has accessed database tables including "information about users, apps, and various types of keys." The attacker was been able to rifle through OneLogin's infrastructure for seven hours.
Blackburn High School
May 19, 2017
•[ leak, misconfiguration, education ]
Police investigate a major privacy breach at Blackburn High School, which saw the personal information of families, including their phone numbers, addresses and Medicare details, published online.
Road Sign in Houston
May 30, 2017
•[ hack, misconfiguration, government ]
Someone hacks a road sign in Houston with a message against Donald Trump.
Netflix
April 28, 2017
•[ ransomware, misconfiguration, technology ]
TheDarkOverlord leaks upcoming episode of Orange is the New Black after Netflix doesn't pay extortion demand. The hack happened via a "production vendor".
