Advanced Health Media (AHM)
February 24, 2023
•[ hack, misconfiguration, healthcare ]
Advanced Health Media (AHM) files a notice of data breach after learning that an unauthorized party was able to access certain company servers that stored confidential consumer data.
PeopleConnect Holdings Inc.
February 21, 2023
•[ leak, misconfiguration, technology ]
PeopleConnect, the owners of the TruthFinder and Instant Checkmate background check services, confirm they suffered a data breach after hackers leaked a 2019 backup database containing the info of 20 millions of customers.
O'Neal Industries
February 17, 2023
•[ hack, misconfiguration, manufacturing ]
O'Neal Industries files notice of a data breach after learning that confidential consumer information stored on the company's computer network was accessible to an unauthorized party.
Platypus
February 16, 2023
•[ financial, misconfiguration, finance ]
Decentralized finance protocol Platypus, suffers a fresh loan attack causing $8.5 million drained from the protocol. The suspect is identified shortly after.
Verizon
January 27, 2023
•[ leak, misconfiguration, technology ]
IntelBroker leaks a database, allegedly from Verizon, for free, containing 7.5 million clients' records, only first names, device types (Apple or Android), and service plans. Verizon verified that the data leak was legitimate and originated from a vendor which creates videos to assist clients.
Retina & Vitreous of Texas
February 1, 2023
•[ hack, misconfiguration, healthcare ]
Retina & Vitreous of Texas files a notice of data breach after learning that confidential patient information that had been entrusted to the company was accessible to unauthorized parties following a cybersecurity incident.
Francesca's Acquisition
January 31, 2023
•[ hack, misconfiguration, retail ]
Francesca's Acquisition files a notice of data breach after discovering that an unauthorized party accessed portions of its computer network.
School District 42 Maple Ridge-Pitt Meadows
January 17, 2023
•[ leak, misconfiguration, education ]
The School District 42 has 19,126 records released in a breach when the documents appear to have been uploaded to a popular hacker forum.
Guardian Analytics
January 26, 2023
•[ leak, misconfiguration, finance ]
Webster Bank files a notice of data breach after learning of a third-party data breach at Guardian Analytics, one of Webster Bank's vendors.
CommuteAir
January 26, 2023
•[ leak, misconfiguration, government ]
A U.S. No Fly list with over 1.5 million records of banned flyers and upwards of 250,000 'selectees' is shared publicly on a hacking forum.
Citi Trends
January 14, 2023
•[ hack, misconfiguration, retail ]
Citi Trends files a notice of data breach after discovering that an unauthorized party was able to access confidential employee information stored on the company's IT network.
Mscripts
January 17, 2023
•[ hack, misconfiguration, technology ]
Mscripts files notice of a data breach after determining confidential consumer information entrusted to the company was accessible by an unauthorized party.
AT&T
January 6, 2023
•[ leak, misconfiguration, technology ]
A threat actor named IntelBroker claims to have found a third-party vendor's unsecured cloud storage containing 37 million AT&T client records. The threat actor shares a sample of 5 million records.
T-Mobile
January 5, 2023
•[ hack, misconfiguration, technology ]
T-Mobile discloses a new data breach after a threat actor stole the personal information of 37 million current postpaid and prepaid customer accounts through one of its Application Programming Interfaces (APIs).
Bay Bridge Administrators
December 29, 2022
•[ hack, misconfiguration, finance ]
Bay Bridge Administrators, LLC ("BBA") filed notice of a data breach after an unauthorized party was able to access sensitive consumer information stored on the company's computer network.
Hub International Limited
December 31, 2022
•[ hack, misconfiguration, finance ]
Hub International Limited files a notice of data breach after discovering that files on the company's IT network were accessed and copied by an unauthorized party.
UnitedHealthcare
December 29, 2022
•[ hack, misconfiguration, healthcare ]
UnitedHealthcare notifies individuals across the country of a recent data breach after an unauthorized party was able to access a UHC broker portal.
CGM
December 28, 2022
•[ hack, misconfiguration, technology ]
CGM files a notice of data breach after learning that an unauthorized party was able to access confidential personal information stored on the company's computer system.
Slack
December 27, 2022
•[ hack, misconfiguration, technology ]
Threat actors gained access to Slack's externally hosted GitHub repositories via a "limited" number of Slack employee tokens that were stolen.
Astro
December 25, 2022
•[ leak, misconfiguration, technology ]
A website had listed details of 3.5 million Astro customers.
