Pegasus Group Australia
October 4, 2022
•[ leak, misconfiguration, technology ]
Australia's largest telecommunications company Telstra discloses a data breach through Pegasus Group Australia, a third-party supplier.
Sequoia One
October 6, 2022
•[ misconfiguration, technology ]
THE HUMAN RESOURCES, payroll, and benefits management company Sequoia said in disclosures to customers at the beginning of the month that it detected unauthorized access to a cloud storage repository that contained an array of sensitive and personal data related to the company's Sequoia One customers.
U.K. Politicians
October 3, 2022
•[ leak, misconfiguration, government ]
The current mobile phone number of the U.K. Prime Minister Liz Truss is being sold online, similarly the mobile phone numbers for Chancellor of the Exchequer, Kwasi Kwarteng, and 24 other members of the U.K. Cabinet are also accessible.
University of Limerick (UL)
October 5, 2022
•[ leak, misconfiguration, education ]
Hundreds of people have their personal email addresses exposed in a data breach at the University of Limerick (UL).
Dallam Hartley Counties Hospital District
September 28, 2022
•[ leak, misconfiguration, healthcare ]
Dallam Hartley Counties Hospital District reports a data breach after the organization learned that an unauthorized party was able to access confidential patient information contained on its computer
Diodes Incorporated
September 23, 2022
•[ leak, misconfiguration, manufacturing ]
Diodes Incorporated confirms that the company experienced a data breach after consumer data entrusted to the company was accessible to an unauthorized party.
Auth0
September 26, 2022
•[ leak, misconfiguration, technology ]
Authentication service provider Auth0 discloses what it calls a "security event" involving some of its code repositories (from 2020 and earlier) obtained by unknown means from its environment.
Hampton Public Library
September 21, 2022
•[ hack, misconfiguration, government ]
The Hampton Public Library is hacked, redirecting people to an adult retail store website.
Doctors' Center Hospital
September 11, 2022
•[ hack, misconfiguration, healthcare ]
Doctors' Center Hospital reports a data breach after the company learned that an unauthorized party was able to gain access to sensitive patient information.
New York-Presbyterian Hospital
September 8, 2022
•[ leak, misconfiguration, healthcare ]
New York-Presbyterian Hospital discloses a security incident after detecting a possible attempts to download information by an unauthorized user.
Salud Family Health
September 5, 2022
•[ leak, misconfiguration, healthcare ]
Salud Family Health reports a data breach after the company learned that an unauthorized party was able to access sensitive employee and patient information contained on its network.
Avalanche blockchain
September 7, 2022
•[ financial, misconfiguration, finance ]
An attacker steals at least $370,000 worth of USDC stablecoins from a smart contract on the Avalanche blockchain in a flash loan attack, affecting multiple liquidity providers.
Axel Royal
August 23, 2022
•[ hack, misconfiguration, manufacturing ]
Axel Royal reports a data breach after an unauthorized party gained access to the company''s computer network.
California Department of Corrections and Rehabilitation (CDCR)
August 22, 2022
•[ leak, misconfiguration, government ]
The California Department of Corrections and Rehabilitation discloses a potential exposure of medical information, for employees and visitors who were tested for the coronavirus, after discovering some suspicious activity in a file transfer system.
Presidency of Moldova
August 12, 2022
•[ hack, misconfiguration, government ]
The e-mail server of the Presidency of Moldova is compromised.
Orot Yosef power plant
July 15, 2022
•[ hack, misconfiguration, energy ]
The Altahrea Team hacking group has taken responsibility for a power plant fire in Israel today, saying it assumed control of the plant's remote management system ahead of the blaze.
Mangatoon
July 5, 2022
•[ hack, misconfiguration, technology ]
Comic reading platform Mangatoon suffers a data breach that exposed information belonging to 23 million user accounts after a hacker stole it from an unsecured Elasticsearch database.
Macmillan Publishers
June 25, 2022
•[ hack, misconfiguration, technology ]
On December 5, 2022, Macmillan reported a data breach with the Texas Attorney General after an unauthorized party was able to bypass its data security system and gain access to sensitive consumer information on the company's computer system.
DiversiTech Corporation
June 14, 2022
•[ hack, misconfiguration, manufacturing ]
DiversiTech Corporation confirms that the company experienced a data breach apparently related to unauthorized access to a company email account.
Pegasus Airlines
May 30, 2022
•[ leak, misconfiguration, technology ]
Turkish flight operator Pegasus Airlines suffers a data breach after an AWS cloud storage bucket is reportedly left unprotected and there was unauthorized access to certain information held by carrier.