P&N Bank
January 15, 2020
•[ hack, misconfiguration, finance ]
P&N Bank in Western Australia informs its customers that hackers may have accessed personal information stored on its systems following a cyber attack on December 12, during an upgrade at a third-party hosting company.
An Ukrainian government job portal
January 21, 2020
•[ leak, misconfiguration, government ]
The https://career.gov.ua has leaked the personal data of an unidentified number of job applicants. It is unclear whether the leak was a result of cyberattack or human error.
LimeLeads
January 14, 2020
•[ leak, misconfiguration, technology ]
49 million user records extracted from a misconfigured Elasticsearch database by US data broker LimeLeads are put up for sale online.
Aurora Water
December 31, 2019
•[ leak, misconfiguration, government ]
Aurora Water announces yet another data breach involving the Click2Gov payment system. Payments between Aug. 30 and Oct. 14 were impacted.
U.S. Federal Depository Library Program
January 4, 2020
•[ hack, misconfiguration, government ]
The homepage for the U.S. Federal Depository Library Program is briefly altered to show a pro-Iranian message and an image of bloodied Donald Trump being punched in the face.
Helix Hosting
December 10, 2019
•[ hack, misconfiguration, technology ]
Popular 'pirate' IPTV provider Helix Hosting appears to be facing a crisis after someone claiming to be a hacker posts a message on the service's homepage.
Keybase
December 13, 2019
•[ financial, misconfiguration, finance ]
Keybase announces the closure of its free Lumens (XLM) cryptocurrency drop scheme due to an influx of spam accounts.
Disney
November 12, 2019
•[ hack, misconfiguration ]
Thousands of hacked Disney+ accounts are already for sale on hacking forums, immediately after the launch of the streaming service.
Veritas Genetics
November 6, 2019
•[ hack, misconfiguration, healthcare ]
The DNA-testing firm Veritas Genetics experiences a security breach that included customer information, when a customer-facing portal is accessed by an unauthorized user.
UniCredit
October 28, 2019
•[ hack, misconfiguration, finance ]
UniCredit uncover a data breach involving the personal records of 3 million domestic clients from a compromised 2015 file.
NordVPN
October 20, 2019
•[ leak, misconfiguration, technology ]
NordVPN is compromised as the'private keys for their web site certificate'are publicly leaked on the Internet The company confirms the breach was discovered on March 2018.
VikingVPN
October 20, 2019
•[ leak, misconfiguration, technology ]
OpenVPN keys and configuration files from VikingVPN are also leaked online.
U.S. Virgin Islands Water and Power Authority (WAPA)
November 1, 2019
•[ hack, misconfiguration, government ]
The U.S. Virgin Islands Water and Power Authority is the latest victim of a new Click2Gov Breach.
Billboard on Interstate 75
September 28, 2019
•[ hack, misconfiguration, technology ]
Two individuals play an adult pornography video on a billboard on Interstate 75 near Michigan highway 59.
ASICS Store in Auckland
September 29, 2019
•[ hack, misconfiguration, retail ]
Major sportswear brand Asics blames a "cyberattack" after large storefront display screens played pornography to passersby for nine hours. The incident took place at a busy Asics store on a major high street in Auckland.
CircleCI
August 31, 2019
•[ leak, misconfiguration, technology ]
Software testing and delivery company CircleCI notifies a security incident involving the company and a third-party analytics vendor. An attacker was able to improperly access some user data in the vendor account.
Hostinger
August 25, 2019
•[ hack, misconfiguration, technology ]
Hostinger discloses a security incident that impacted its platform and users. A hacker gained access to an internal server, where he found an authorization token for an internal API used to retrieve information about up to 14 million clients.
Choice Hotels
August 13, 2019
•[ hack, misconfiguration ]
Hackers claim to have stolen 700,000 guest records belonging to Choice Hotels, one of the largest hotel chains in the world. The data was left exposed in an unsecured MongoDB.
Imperva
August 27, 2019
•[ hack, misconfiguration, technology ]
Imperva discloses a security incident that impacts customers of its cloud Web Application Firewall. Apparently the intruders made off with customer API keys and SSL certificates.
Comodo
July 27, 2019
•[ hack, misconfiguration, technology ]
A hacker gain access to internal files and documents owned by security company and former SSL certificate issuer Comodo by using an email address and password mistakenly exposed on the internet (GitHub).
