Mutuelle Nationale des Hospitaliers et des professionnels de la sant et du social
February 5, 2021
•[ hack, misconfiguration, healthcare ]
The MNH disconnected computer systems on Friday, February 5, 2021 because of a cyberattack. A Citrix / Netscaler Gateway system was affected by the CVE-2019-19781 vulnerability, known as Shitrix.
Bonobos
January 22, 2021
•[ leak, misconfiguration, retail ]
Bonobos men's clothing store has suffered a massive data breach exposing millions of customers' personal information after a cloud backup of their database was downloaded by a threat actor.
Ubiquiti
January 11, 2021
•[ hack, misconfiguration, technology ]
Ubiquiti informed customers of unauthorized access to certain information technology systems hosted by a third party cloud provider. Ubiquiti states that they are not aware of any customer databases that were illegally accessed but cannot be sure that the attack did not expose customers' data.
Ambulance Tasmania
January 7, 2021
•[ leak, misconfiguration, healthcare ]
The private details of every Tasmanian who has called an ambulance since November last year have been published online by a third party in a list still updating each time paramedics are dispatched.
Unknown Organization
January 1, 2021
•[ leak, misconfiguration, government ]
The Durham Region joins the list of the victims of the Accellion breach.
Voyager
December 28, 2020
•[ hack, misconfiguration, finance ]
The Voyager cryptocurrency brokerage platform suffered a cyberattack targeting its DNS configuration.
Office of the Washington State Auditor
December 25, 2020
•[ leak, misconfiguration, government ]
Washington's State Auditor office has suffered a data breach that exposed the personal information in 1.6 million employment claims. The Office of the Washington State Auditor ("SAO") states that they suffered a data breach after a threat actor exploited a vulnerability in a secure file transfer service from Accellion.
Salt Lake Community College
February 5, 2021
•[ hack, misconfiguration, education ]
A virtual poetry slam part of Black History Month events at Salt Lake Community College is commandeered by unknown individuals who display racist and anti-Black messages as well as inappropriate images of children.
Washington's State Auditor office
January 25, 2021
•[ leak, misconfiguration, government ]
Washington's State Auditor Office suffers a data breach that exposes the personal information in 1.6 million employment claims after a threat actor exploited a vulnerability in a secure file transfer service from Accellion.
Noblr Reciprocal Exchange
January 21, 2021
•[ hack, misconfiguration, finance ]
Noblr Reciprocal Exchange notifies 97,633 consumers of a breach involving its insurance quote platform. Attackers used a feature of the platform to illicitly obtain personal information of other drivers.
South African Social Security Agency
January 4, 2021
•[ leak, misconfiguration, government ]
The South African Social Security Agency is in talks to replace cards used for collecting social grants after a security breach compromised the master keys for the cards in 2019.
Proliance Surgeons, Inc.
December 23, 2020
•[ financial, misconfiguration, healthcare ]
Proliance Surgeons has disclosed a data breach where payment card information may have been exposed for customers who made online payments on Proliance's platform.
NetGalley
December 21, 2020
•[ leak, misconfiguration, technology ]
NetGalley " a website that gives book reviewers pre-release access to new titles " has warned users about a data breach that may have exposed their passwords and other personal data. NetGalley's website was also defaced.
Innovative Solution for Healthcare
December 23, 2020
•[ hack, misconfiguration, healthcare ]
Innovative Solution for Healthcare (iSofH) misconfigured a database of sensitive patient data which was then attacked by the meow bot.
North Shore Hebrew Academy
December 14, 2020
•[ hack, misconfiguration, education ]
The website of North Shore Hebrew Academy was defaced with racial slurs and anti-Semitic propaganda.
7 million debit and credit cardholders in India
December 8, 2020
•[ leak, misconfiguration, finance ]
Sensitive details belonging to 7 million debit and credit cardholders in India are available on a public Google Drive document that has been circulating on the dark web.
Vertafore
November 10, 2020
•[ leak, misconfiguration, technology ]
Vertrafore, a provider of insurance software, has disclosed a data breach after a third-party accessed the details of 27.7. million Texas drivers. The breach was a result of three files being stored in an unsecured external storage device.
Sherman Independent School District
November 20, 2020
•[ insider, misconfiguration, education ]
The Sherman Independent School District is investigating a data breach after two Sherman High School students accessed private information.
Polecat
October 29, 2020
•[ leak, misconfiguration, technology ]
U.K. analytics firm, Polecat, left 30TB of data and billions of records exposed on an elasticsearch server that was not secured. As a result, a Meow attack wiped half the data on the server.
Century 21
October 24, 2020
•[ insider, misconfiguration, retail ]
Hector Navarro, a former Human Resources systems administrator at Century 21's Manhattan department store, has been indicted for breaching the company's network to steal and alter data after resigning in October 2019.
