QuoteWizard
June 10, 2024
•[ financial, misconfiguration, finance ]
Financial services firm LendingTree confirms that QuoteWizard, one of its subsidiaries, was potentially affected by a cybersecurity incident following a wider attack on customers of data storage company Snowflake.
Mintlify
March 13, 2024
•[ leak, misconfiguration, technology ]
Documentation startup Mintlify says dozens of customers had GitHub tokens exposed in a data breach at the start of the month.
Davlyn Investments Property Management
February 14, 2024
•[ hack, misconfiguration ]
Davlyn Investments Property Management files a notice of data breach after discovering that an unauthorized party was able to access its IT network.
Mr Green Gaming
March 1, 2024
•[ leak, misconfiguration ]
Mr Green Gaming, a game community, suffers a breach when an inactive admin account is exploited, resulting in the leak of personal details belonging to 27,000 members.
Trello
January 22, 2024
•[ leak, misconfiguration, technology ]
A threat actor with the moniker of 'emo' leaks the private emails of 15,115,516 Trello members, using an exposed Trello API to link private email addresses with Trello accounts, enabling the creation of millions of data profiles containing both public and private information.
CGI Federal
January 17, 2024
•[ hack, misconfiguration, government ]
The Government Accountability Office warns of a breach resulting in the compromise of data associated with thousands of current and former employees. The attack was carried out exploiting the CVE-2023-22515 Atlassian vulnerability from one of its contractors, CGI Federal.
Cooper Aerobics
February 3, 2024
•[ hack, misconfiguration, healthcare ]
Cooper Aerobics files a notice of data breach after discovering unauthorized access to its computer network.
Unknown Healthcare organization in Thailand
January 22, 2024
•[ leak, misconfiguration, healthcare ]
A threat actor named Soni posts a leaked database related to healthcare. The data breach consists of 25.5k records of user information including ID, user URL, encrypted passwords (phpass), user emails, login details, account status, display names, registration dates, and user activation keys.
Ashford
January 19, 2024
•[ hack, misconfiguration, finance ]
Ashford files a notice of data breach after discovering that an unauthorized actor was able to access and acquire information stored on the companys IT network.
Trezor
January 17, 2024
•[ hack, misconfiguration, manufacturing ]
Trezor issues a security alert after identifying a data breach due to unauthorized access to their third-party support ticketing portal.
Orange Spain
January 2, 2024
•[ hack, misconfiguration, technology ]
Orange Spain suffers an internet outage after an attacker with the moniker of 'Snow' breaches the company's RIPE account to misconfigure BGP routing and an RPKI configuration.
Southern Illinois Healthcare - Harrisburg Medical Center
December 19, 2023
•[ hack, misconfiguration, healthcare ]
Southern Illinois Healthcare - Harrisburg Medical Center (SIH HMC) files a notice of data breach after discovering that an unknown and unauthorized party was able to access its computer network.
Fairway Independent Mortgage Corporation
December 4, 2023
•[ hack, misconfiguration, finance ]
Fairway Independent Mortgage Corporation (Fairway) files a notice of data breach after discovering that an unauthorized user had accessed a third-party system utilized by Fairway.
General Electric
November 25, 2023
•[ hack, misconfiguration, technology ]
General Electric is investigating claims that a threat actor named IntelBroker breached the company's development environment in a cyberattack and leaked allegedly stolen data.
Berglund Management Group
November 22, 2023
•[ hack, misconfiguration, retail ]
Berglund Management Group files a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party was able to gain access to portions of the company's computer network.
Bangladesh National Telecommunication Monitoring Center
November 16, 2023
•[ leak, misconfiguration, government ]
The National Telecommunication Monitoring Center (NTMC) in Bangladesh publishes people's personal information through an unsecured database until anonymous threat actors attack the exposed database, wiping details from the system and claiming to have stolen the trove of information.
Adams Bank & Trust
November 15, 2023
•[ hack, misconfiguration, finance ]
Adams Bank & Trust (ABT) files a notice of data breach after confirming that the bank's computer system was accessed by an unauthorized party.
Harris Center for Mental Health and IDD
November 7, 2023
•[ hack, misconfiguration, healthcare ]
The Harris Center for Mental Health and IDD files a notice of data breach after discovering that an unauthorized party was able to access portions of the organizations computer network.
BHS Physicians Network
November 2, 2023
•[ hack, misconfiguration, healthcare ]
BHS Physicians Network confirms a breach of a Microsoft Office 365-hosted business email account that was used by a medical assistant.
Casio
October 17, 2023
•[ hack, misconfiguration, education ]
Japanese electronics manufacturer Casio discloses a data breach impacting customers from 149 countries after hackers gained to the servers of its ClassPad education platform.
