RDC
March 25, 2021
•[ leak, misconfiguration, automotive ]
RDC, a Dutch company that provides garage and maintenance services to Dutch car owners, confirms a data breach after the personal and vehicle details of 7.5 millions of Dutch car owners are posted for sale on a well-known cybercrime forum.
University of Hertfordshire
April 14, 2021
•[ hack, misconfiguration, education ]
The University of Hertfordshire suffers a devastating cyberattack that knocks out all of its IT systems, including Office 365, Teams and Zoom, local networks, Wi-Fi, email, data storage and VPN.
Physicians Dialysis
March 21, 2021
•[ hack, misconfiguration, healthcare ]
Physicians Dialysis discovers unauthroized access to its database containing personal and health information of current and former patients.
Avianis
March 23, 2021
•[ leak, misconfiguration, technology ]
Private aviation services provider Solairus Aviation announces that some employee and customer data was compromised in a security incident at third-party vendor Avianis.
Leon County Schools
March 17, 2021
•[ hack, misconfiguration, education ]
The Leon County Schools website is defaced with offensive posts.
Comission para el Mercado Financiero
March 17, 2021
•[ hack, misconfiguration, finance ]
Chile's Comision para el Mercado Financiero (CMF) has disclosed that their Microsoft Exchange server was compromised through the recently disclosed ProxyLogon vulnerabilities.
Equinox
March 9, 2021
•[ hack, misconfiguration, technology ]
Hackers gained access to live surveillance cameras installed at Tesla, Equinox, healthcare clinics, jails, and banks, including the Bank of Utah. In addition to images captured from the cameras, the hacker also shared screenshots of their ability to gain root shell access to the surveillance systems used by Cloudflare and at Telsa HQ.
Bank of Utah
March 9, 2021
•[ hack, misconfiguration, finance ]
Hackers gained access to live surveillance cameras installed at Tesla, Equinox, healthcare clinics, jails, and banks, including the Bank of Utah
Magnolia Independent School District
March 8, 2021
•[ leak, misconfiguration, education ]
Magnolia ISD is responding to a technology breach that occurred Sunday afternoon, school officials confirmed. The district said the unauthorized messages were shared via social media, text messages, emails and phone calls.
Ticketcounter
March 2, 2021
•[ leak, misconfiguration, technology ]
A Dutch e-Ticketing platform has suffered a data breach after a user database containing 1.9 million unique email addresses was stolen from an unsecured staging server.
Adecco Group
March 4, 2021
•[ hack, leak, misconfiguration ]
A user on a popular hacking forum purportedly sells the stolen credentials from 6 South American countries for the Swiss-based Adecco Group. The databse contains 5 million records and covers Peru, Brazil, Argentina, Colombia, Chile, and Ecuador.
Douglas County
March 2, 2021
•[ espionage, misconfiguration, government ]
Douglas County is the victim of a cyberattack by Hafnium, a Chinese threat actor. The attackers exploited a weakness in Microsoft servers.
Civil Service Commission
March 1, 2021
•[ leak, misconfiguration, government ]
IamNoobie noticed that the server of the Civil Service Commission (CSC) has promising results when he Google dorked government websites. When IamNoobie saw other groups downloading data, he then decided to disconnect them one by one and started to secure the server of the CSC.
Emsisoft
February 3, 2021
•[ leak, misconfiguration, technology ]
Antivirus solutions provider Emsisoft reveals last that a third-party had accessed a publicly exposed database containing technical logs.
British Mensa
January 31, 2021
•[ hack, misconfiguration ]
British Mensa has had its website hacked after failing to properly secure the data of its 18,000 members.
Parler
January 9, 2021
•[ hack, misconfiguration, technology ]
A hacker who goes by the name Crash Override on Twitter claims she found a web address that Parler used internally to retrieve data. She made a list of all posts, videos, and images uploaded to Parler, including posts that users had deleted, such as those referring to the Capitol attack on January 6.
Metromile
February 1, 2021
•[ leak, misconfiguration, finance ]
Car insurance startup Metromile says it has fixed a security flaw on its website that allowed a hacker to obtain driver license numbers.
Geico
January 21, 2021
•[ hack, misconfiguration, finance ]
Geico, the second-largest auto insurer in the U.S., suffers a data breach when threat actors exploit a bug in their website to steal the driver's licenses for policyholders for several weeks.
Virgin Mobile Polska
January 15, 2021
•[ leak, misconfiguration, technology ]
Virgin Mobile Polska has had a fine imposed on it for failing to secure user data which led to a data breach.
LogicGate
February 23, 2021
•[ leak, misconfiguration, technology ]
Risk and compliance startup LogicGate confirms a data breach after an unauthorized third party obtains credentials to its Amazon Web Services-hosted cloud storage.
