Ofcom
June 1, 2023
•[ hack, sqlinjection, government ]
Britain's communications regulator Ofcom announces that confidential information which it held on companies it regulates was downloaded by hackers exploiting the CVE-2023-34362 vulnerability in the MOVEit file transfer tool.
Allegiant Air
June 1, 2023
•[ hack, sqlinjection ]
Allegiant Air confirms that 1,405 people had information accessed through the exploitation of the MOVEit vulnerability.
Illinois Department of Innovation & Technology (DoIT)
May 31, 2023
•[ hack, sqlinjection, government ]
The Illinois Department of Innovation & Technology (DoIT) reveals to be investigating the impact of a data breach related to MOVEit CVE-2023-34362 vulnerability.
BORN Ontario
May 31, 2023
•[ hack, sqlinjection, government ]
BORN Ontario (Better Outcomes Registry & Network) reveals to have been hit by a data breach related to MOVEit CVE-2023-34362 vulnerability.
Centers for Medicare & Medicaid Services
May 31, 2023
•[ leak, sqlinjection, healthcare ]
The Centers for Medicare & Medicaid Services (CMS) notified 612,000 Medicare beneficiaries of a data breach stemming from a vulnerability in Progress Software's MOVEit Transfer software.
National Institutes of Health Federal Credit Union
May 19, 2023
•[ leak, sqlinjection, finance ]
The National Institutes of Health Federal Credit Union confirm to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Indiana Family and Social Services Administration
May 31, 2023
•[ leak, sqlinjection, government ]
The Indiana Family and Social Services Administration (FSSA) posts a notice announcing that the protected health information of an estimated 212,193 Indiana Medicaid members was impacted by the MOVEit data breach affecting CareSource.
Global Atlantic Financial Group
May 30, 2023
•[ leak, sqlinjection, finance ]
Global Atlantic Financial Group files a notice of data breach after discovering the MOVEit-related data breach at Pension Benefit Information.
AlohaCare
May 31, 2023
•[ leak, sqlinjection, healthcare ]
AlohaCare files a notice of data breach after confirming that a vulnerability in the file-transfer program MOVEit resulted in confidential patient information being accessible to an unauthorized party.
Undetermined
April 15, 2022
•[ leak, sqlinjection, finance ]
GhostSec exfiltrated over 100MB of data from a Russian internet domain registration provider. The leak includes screenshots of sensitive files and excel spreadsheet data. During the breach, GhostSec identified over 4TB of SQL databases, but the company's intrusion detection systems and kicked them off the network before the SQL data could be harvested.
University of California
March 31, 2021
•[ hack, sqlinjection, education ]
The University of California joins the list of the victims hit via the exploitation of the Accellion FTA vulnerability.
MyFreeCams
December 1, 2020
•[ financial, hack, leak ]
A data broker who allegedly hacked adult chat and web-streaming website MyFreeCams.com has sold nearly 2 million user records on a dark web forum. The hacker exfiltrated records from the company's servers in December 2020 after an SQL injection.
Freepik
August 21, 2020
•[ hack, sqlinjection, technology ]
Freepik says that hackers were able to steal emails and password hashes for 8.3 million Freepik and Flaticon users in an SQL injection attack against the company's Flaticon website.
UniCredit
April 19, 2020
•[ hack, sqlinjection, finance ]
Researchers from Tesly reveal that data on about 3,000 UniCredit SpA employees was put up for sale on cybercrime forums after an SQL Injection attack.
Kyushu Railway Co.
April 12, 2019
•[ hack, sqlinjection ]
Kyushu Railway Co. reveals that personal and credit information on up to 8,000 customers were stolen from the goods store website for its "Seven Stars in Kyushu" luxury cruise train.
Unknown Organization
December 22, 2016
•[ hack, sqlinjection, government ]
Kapustkiy hacks the Costa Rica Embassy in China (costaricaembassycn.com) and dumps 50 of the 280 login credentials.
ambru
December 12, 2016
•[ hack, sqlinjection, government ]
Kapustkiy claims to have stolen thousands of passport numbers and other pieces of personal information from the website of a Russian consular department (ambru.nl).
Unknown Organization
December 19, 2016
•[ hack, sqlinjection ]
Kapustkiy breaches the Slovak Chamber of Commerce (www.scci.sk) and accesses the data of more than 4,000 users.
Nulled.IO
May 6, 2016
•[ leak, sqlinjection, technology ]
The Nulled.IO forum is compromised and its data consequently leaked, consisting of a 9.45GB SQL file.
Unknown Organization
December 25, 2015
•[ hack, sqlinjection, technology ]
Members of the Anonymous hacker collective deface the Asia Pacific Telecommunity website (apt.int), gain access to the site's admin panel and also manage to get their hands on a database dump.
