Metropolitan Police's Twitter account
July 19, 2019
•[ hack, misconfiguration, education ]
The Metropolitan Police's Twitter account is hit by hackers who post a series of bizarre messages. The breach is due to the compromise of the MyNewsDesk platform.
City of Concord
July 26, 2019
•[ hack, misconfiguration, government ]
The City of Concord website is defaced with offensive images.
University of Hawaii
July 23, 2019
•[ education, hack, misconfiguration ]
Personal information for as many as 70,000 public school students may have been compromised after Graduation Alliance, a University of Hawaii vendor, detected "suspicious" unauthorized access to one of its servers.
Tennessee Higher Education Commission
July 23, 2019
•[ leak, misconfiguration, education ]
The Tennessee Higher Education Commission investigates a possible data breach of a 3rd party vendor, that potentially has exposed personal information of thousands of students.
NASA's Jet Propulsion Laboratory (JPL)
June 20, 2019
•[ hack, misconfiguration, government ]
A report from NASA reveals an April 2018 security breach, wherein a Raspberry Pi that was not authorized to be linked to the JPL network was targeted by hackers.
WIRED
May 9, 2019
•[ financial, hack, misconfiguration ]
Cond Nast notifies about 1,100 WIRED subscribers of a breach involving their payment information, when an unauthorized party accessed a third-party vendor's systems between April 14 and April 17, 2019.
American Medical Collection Agency
May 10, 2019
•[ leak, misconfiguration, healthcare ]
A data breach involving a medical collection agency affects more than 200,000 patients who had used the firm's online payment portal between September, 2018 and the beginning of March, 2019. The data is found on the dark web.
275 Million Indian Citizens
May 8, 2019
•[ ransomware, misconfiguration, government ]
The "Unistellar" hacking group steals 275 million records of Indian citizens from a publicly configured Mongo database exposing and hold them for ransom.
Lime
April 23, 2019
•[ hack, misconfiguration, manufacturing ]
Eight e-scooters from Lime, a Brisbane-based manufacturer, have their audio files swapped during a test in the streets of Brisbane.
SkyMed
April 29, 2019
•[ leak, ransomware, misconfiguration ]
A detailed list or 137,000 SkyMed members accounts is found, on March 27th, into an unsecured Elasticsearch database. The leak also shows evidence of ransomware inside the network.
Georgia Tech University
April 2, 2019
•[ hack, misconfiguration, education ]
Georgia Tech announces that a vulnerability in a web application allowed an attacker to gain access to the personal information of up to 1.3 million students, college applications, staff, and faculty members. The breach was discovered on March 21.
Post Rock Rural Water District
March 27, 2019
•[ insider, misconfiguration, government ]
Kansas WWS is hacked by former employee able to use creditentials to remotely tamper with facility processes and threaten safety of drinking water.
Blue Cross of Idaho Health Service
April 12, 2019
•[ hack, misconfiguration, healthcare ]
Blue Cross of Idaho Health Service notifies that, on March 21, 2019, an unauthorized user accessed Blue Cross of Idaho's online provider portal and was able to access provider remittance documents, which contained PHI.
Canada's Natural Health Services (NHS)
March 28, 2019
•[ hack, misconfiguration, healthcare ]
A data breach at Canada's Natural Health Services (NHS) exposes personal information of roughly 34,000 medical marijuana users after a record is accessed by an "unauthorized user".
UK Labour Party
February 21, 2019
•[ insider, misconfiguration, government ]
The UK's Labour Party locks down access to membership databases and campaign tools after a number of attempts to access personal data on its systems by "individuals who are not, or are no longer, authorized to do so".
Hampton Roads Community Health Center
February 15, 2019
•[ hack, misconfiguration, healthcare ]
Hampton Roads Community Health Center reveals that a server hosting unencrypted patient data was compromised back in December 2018.
Zillow
February 27, 2019
•[ hack, misconfiguration, technology ]
Zillow is sued for $60 million after a hacker manages to gain access to a property's Zillow listing page, and update its information.
EOS Cryptocurrency
February 23, 2019
•[ hack, misconfiguration, finance ]
A hacker steals $7.7 million worth of EOS cryptocurrency after one of the 21 maintainers of an EOS blacklist fails to update it. The maintainer is identified in eos.games.
Universiti Teknologi Mara (UiTM)
January 25, 2019
•[ leak, misconfiguration, education ]
A total of 1,164,540 records, belonging to students at Universiti Teknologi Mara (UiTM) between 2000 and 2018 are leaked online. According to sources, the data happened between February and March 2018.
Tampa Bay Credit Union
January 17, 2019
•[ financial, misconfiguration, finance ]
Tampa Bay Credit Union members have their debit card information spoofed after threat actors generate false cards using the financial institution's bin numbers.
