Telecom Regulatory Authority of India (TRAI) chairman R S Sharma
July 28, 2018
•[ leak, misconfiguration, government ]
Alleged personal details of the Telecom Regulatory Authority of India (TRAI) chairman R S Sharma are leaked after he tweeted his 12-digit Unique Identification Authority of India or UIDAI number and challenged hackers.
Accreditation, Audit & Risk Management Security, LLC
July 23, 2018
•[ leak, misconfiguration, government ]
A "security incident" occurred on April 3 at a third-party vendor (Accreditation, Audit & Risk Management Security, LLC) may have compromised the personal information of employees, inmates and others involved with the Pennsylvania Department of Corrections.
Gas station in Detroit
July 9, 2018
•[ hack, misconfiguration, retail ]
Police in Detroit are looking into an apparent hack at a gas station that allowed people to steal more than 600 gallons of gas, valued at over $1,800. Authorities believe the thieves used some sort of remote device to take control of the pump.
Fortnum & Mason
July 2, 2018
•[ leak, misconfiguration, retail ]
Luxury retailer Fortnum & Mason is the latest big brand to be involved in a significant data breach after the company admits the details of around 23,000 competition and survey participants have been compromised in the wake of the Typeform breach.
Typeform
June 29, 2018
•[ leak, misconfiguration, technology ]
Barcelona-based online survey and form building service Typeform announces a data breach after an unknown attacker downloaded a backup file containing sensitive customer information. The backup file contained data gathered by Typeform customers through surveys and online forms up until May 3, 2018.
Midwest City
June 24, 2018
•[ hack, misconfiguration, government ]
Midwest City, Oklahoma, reports that about 2,300 customers are potentially affected by a breach involving Superion's software Click2Gov.
Major international airport
July 11, 2018
•[ hack, misconfiguration, technology ]
While researching underground hacker marketplaces, researchers from McAfee discover that access linked to security and building automation systems of a major international airport could be bought for only US$10.
U.S. Air Force
July 10, 2018
•[ espionage, misconfiguration, government ]
Security Firm Recorded Future identifies an attempted sale of what is believed to be highly sensitive U.S. Air Force documents pertaining to the MQ-9 Reaper drone. The attack was carried on via the default FTP authentication credentials in Netgear routers.
Taiwan Democratic Progressive Party's (DPP)
July 3, 2018
•[ hack, misconfiguration, government ]
The Democratic Progressive Party's (DPP) official website is defaced by Chinese hackers and the website is replaced with pictures and words reading "Chinese netizens are supporting Tsai Ing-wen to run for re-election" in simplified Chinese characters.
Career and Technology Education Centers (C-TEC)
July 10, 2018
•[ leak, misconfiguration, education ]
Career and Technology Education Centers (C-TEC) reveals it suffered a possible data breach earlier this year that could have exposed individuals' names and Social Security numbers. The breach happened on May 25 when an unauthorized person had access to a private file for several minutes.
PageUp
June 6, 2018
•[ leak, misconfiguration, technology ]
Australia-based human resources firm PageUp confirms it found "unusual" activity on its IT infrastructure on May 23, which has resulted in the potential compromise of client data.
W.S. Neal High School
May 4, 2018
•[ hack, misconfiguration, education ]
While finalizing end-year school rankings, W.S. Neal High School realizes that someone has been changing grades since 2016.
Billings Clinic
April 27, 2018
•[ hack, misconfiguration, healthcare ]
Billings Clinic notifies 949 patients of a breach affecting its email security system causing an unknown individual to access patients' information back in February.
Red Bull
April 22, 2018
•[ hack, misconfiguration, manufacturing ]
The Red Bull website is defaced twice in few hours, probably exploiting the Drupalgeddon 2 vulnerability.
Honda Greece
May 7, 2018
•[ hack, misconfiguration, manufacturing ]
Turkish hackers from Akincilar launch a new cyber attack against Honda Greece. The automaker's website in Greece is infiltrated with a message condemning the country for "partnering" with terrorists.
Highway Sign in Arizona
April 27, 2018
•[ hack, misconfiguration, government ]
Someone hacks a highway sign in Arizona and defaces it with 'Hail Hitler' text.
MyEtherWallet
April 24, 2018
•[ hack, financial, misconfiguration ]
A hacker (or group of hackers) hijacks the Amazon DNS servers of MyEtherWallet.com, a web-based Ether wallet service. Users accessing the site are redirected to a fake version of the website. Those who logged in had their wallet private keys stolen, which the attacker used to empty accounts.
Trusted Quid
March 20, 2018
•[ hack, misconfiguration, finance ]
Trusted Quid reports a theft of data from unauthorised access to its website. The incident relates to data directly entered by people applying for a loan only on the Trusted Quid website between 1 July 2016 and 17 February 2018. Up to 65,925 people may have been affected by the incident.
Svitzer
March 15, 2018
•[ insider, misconfiguration ]
The shipping company Svitzer suffers a significant data breach affecting almost half its Australian employees when three employees have had emails auto-forwarded in the past 11 months.
