Choice Health Insurance
June 8, 2022
•[ leak, misconfiguration, healthcare ]
Choice Health Insurance notifies people of a data breach caused by human error of a vendor. they learned on May 14 that an unauthorized person was "offering to make available data allegedly taken from Choice Health.
Verizon
May 26, 2022
•[ hack, misconfiguration, technology ]
A hacker obtains a database that includes the full name, email address, corporate ID numbers, and phone number of hundreds of Verizon employees.
Benefit Plan Administrators, Inc. (BPA)
June 15, 2022
•[ hack, misconfiguration, government ]
Benefit Plan Administrators, Inc. (BPA) confirms that the company experienced a data breach after an unauthorized party gained access to the company's computer network and the sensitive consumer data contained
OLL.TV
June 5, 2022
•[ hack, misconfiguration, technology ]
According to the State Service of Special Communications and Information Protection of Ukraine (SSSCIP), the broadcast of the Football World Cup 2022 qualifier game between Wales and Ukraine is interrupted in Ukraine by a cyberattack that targeted OLL.TV, a Ukrainian online broadcasting platform. SSSCIP claims that malicious actors succeeded in gaining access to a Content delivery network (CDN) nod and rerouted the traffic. Ukrainian authorities temporarily stopped the broadcast to restart the traffic.
Afni
June 7, 2022
•[ leak, misconfiguration ]
Afni files official notice of a data breach that impacted the sensitive information of certain individuals, after detecting anomalous activity on its network.
Russian TV
May 9, 2022
•[ hack, misconfiguration, technology ]
During the Russian President Putin's speech at today's "Victory Day" military parade, pro-Ukrainian hacking groups defaced the online Russian TV schedule page to display anti-war messages.
Avem Health Partners
May 14, 2022
•[ leak, misconfiguration, healthcare ]
On December 14, 2022, Avem Health Partners reported a data breach with several state attorney general offices after the company learned of a cybersecurity incident at 365 Data Centers, a vendor used by one of Avem's service providers.
The Springs Living
May 12, 2022
•[ hack, misconfiguration, healthcare ]
The Springs Living reports a data breach after an unauthorized party gained access to sensitive information on the company's computer network.
MM.Finance
May 4, 2022
•[ financial, misconfiguration, finance ]
MM.Finance announces that attackers managed to steal $2 million worth of digital assets in a Domain Name System (DNS) attack.
Heroku
May 4, 2022
•[ hack, misconfiguration, technology ]
Salesforce-owned Heroku performs a forced password reset on a subset of user accounts. The company admits that the stolen GitHub integration OAuth tokens from last month further led to the compromise of an internal customer database.
McDonald's Costa Rica
April 15, 2022
•[ hack, misconfiguration, retail ]
A hacker accessed sensitive data belonging to McDonald's Costa Rica customers through an exposed database managed by a third-party service provider.
Taiwanese singer and actor Jay Chou
April 14, 2022
•[ hack, misconfiguration, finance ]
Attackers exploit a design flaw in the Rarible NFT marketplace to steal a non-fungible token from Taiwanese singer and actor Jay Chou and sell it for about $500,000.
Undetermined
March 20, 2022
•[ hack, misconfiguration, finance ]
Anonymous claimed to have remotely accessed printers across Russia and forced them to print over 100,000 documents with messages against war and propaganda, and how to bypass censorship in the country. The hacked printers were forced to print PDFs with a message informing Russians that "their president, the government, and media all have been feeding them lies."
Revest Finance
March 27, 2022
•[ financial, misconfiguration, finance ]
Decentralized finance (DeFi) protocol Revest Finance discloses that $2 million was stolen through a vulnerability on their platform.
Nestle
March 24, 2022
•[ leak, misconfiguration ]
The Anonymous collective leaks a 10GB trove of data from Nestl after the company unintentionally exposed some test data.
Regional Ministry of Health
March 15, 2022
•[ hack, misconfiguration, government ]
A hacker dubbed Spielerkid89 remotely accesses a computer belonging to a regional Ministry of Health in Russia, exploiting a VNC Server without authentication
Undetermined
February 26, 2022
•[ hack, misconfiguration, finance ]
A number of Russia's largest domestic news websites were attacked and information replaced with a "tombstone" for the war dead. Many of the sites were then taken offline.
Work Health Solutions
February 16, 2022
•[ hack, misconfiguration, healthcare ]
Work Health Solutions reports a data breach after an unauthorized party was able to access an employee's email account that contained sensitive information related to certain individuals.
Vodafone
February 10, 2022
•[ leak, misconfiguration, technology ]
Vodafone launches an investigation after the cybercrime group Lapsus$ claims to have obtained roughly 200 Gb of source code files, allegedly representing approximately 5,000 GitHub repositories.
Quantum Group
February 10, 2022
•[ leak, misconfiguration, healthcare ]
Highmark Inc., a non-profit healthcare company and Integrated Delivery Network announces that some HIPAA-protected data has been exposed in a data breach at the printing and mailing vendor, Quantum Group.
