Hennepin HealthCare
October 13, 2020
•[ insider, misconfiguration, healthcare ]
Five employees at Hennepin HealthCare have been fired for improperly accessing George Floyd's medical information.
Pitkin County
October 1, 2020
•[ leak, misconfiguration, government ]
Pitkin County has disclosed a data sercurity incident where a file was left accessible via the Internet and was subject to unauthorized access.
Docsketch
October 9, 2020
•[ leak, misconfiguration, technology ]
The electronic document-signing service Docsketch says an unauthorized third-party accessed a three-week old copy of its database in early August.
Kate Ainge
October 9, 2020
•[ insider, misconfiguration, government ]
A Crown Prosecution Service lawyer is on trial accused of unlawfully accessing information about his judge wife's new lover.
Unnamed individual
October 7, 2020
•[ insider, misconfiguration, government ]
A Welsh police officer plead guilty to misusing Dyfed-Powys Police computers to unlawfully access information about the ex-partner of a woman he was in a relationship with.
RedDoorz
September 26, 2020
•[ leak, misconfiguration, technology ]
Singapore-based hospitality start-up RedDoorz acknowledged on Saturday (Sept 26) that one of its IT databases suffered a breach. In November, a threat actor began selling the stolen database.
Chesterfield County Public Schools
September 11, 2020
•[ hack, misconfiguration, education ]
Unknown users are disrupting virtual classrooms in Chesterfield County public schools.
Toledo Public Schools
September 9, 2020
•[ hack, misconfiguration, education ]
Toledo Public Schools also experience a security breach where a hacker got ahold of a classroom passcode and broke in to post racially and sexually offensive comments.
Atlanta federal district court
September 14, 2020
•[ hack, misconfiguration, government ]
An Atlanta court hearing on election security was Zoombombed with porn, swastikas and images of the 9/11 attacks.
San Juan Regional Medical Center
September 8, 2020
•[ hack, misconfiguration, healthcare ]
San Juan Regional Medical Center suffers an exploitive attack in which the personal and medical information of nearly 70,000 patients was stolen from servers.
Rochester City School District
August 15, 2020
•[ hack, misconfiguration, education ]
The Rochester City School District's first parent forum of the 2020-2021 school year, which was held over Zoom, was interrupted by attackers posting racist comments and hurtful symbols.
Lee County High School
August 24, 2020
•[ hack, misconfiguration, education ]
A virtual Spanish class was interrupted with offensive content at Lee County High School.
Yunrun Big Data Service
August 20, 2020
•[ hack, misconfiguration, technology ]
A group of hackers says they have obtained internal files from three Chinese social media monitoring companies. The victims are Knowlesys, Yunrun Big Data Service, and OneSight.
Instacart
August 20, 2020
•[ insider, misconfiguration, retail ]
US-based grocery delivery and pick-up service Instacart has disclosed a security incident that involved unauthorized access of customer information by two support agents from a third-party vendor retained by the company.
Santander
August 19, 2020
•[ financial, misconfiguration, finance ]
Tens of suspects have been arrested for exploiting a glitch in the software of Santander ATMs to cash-out more money than was stored on cards.
Bexar County
August 5, 2020
•[ hack, misconfiguration, government ]
A Zoom-bomber interrupts court proceedings in Bexar County, TX.
Kariyer
August 12, 2020
•[ leak, misconfiguration, technology ]
A file containing the information of 50,000 members of Kariyer.net is found on the web by LVKK, the Turkish data protection authority.
Archer High School
August 12, 2020
•[ hack, misconfiguration, education ]
A virtual class in Gwinnett County's Archer High School gets Zoom-bombed by two men.
ProctorU
August 9, 2020
•[ hack, misconfiguration, education ]
ProctorU confirms a data breach after a threat actor released a stolen database of user records on a hacker forum.
