Undisclosed organization(s) or individual(s)
April 3, 2024
•[ hack, malware, technology ]
Google fixes CVE-2024-29745 and CVE-2024-29748, two Google Pixel zero-days exploited by forensic firms to unlock phones without a PIN and gain access to the data stored within them.
The Pokémon Company
March 19, 2024
•[ hack, technology ]
The Pokmon Company says it detected hacking attempts against some of its users and reset those user account passwords.
Multiple organizations
June 3, 2024
•[ hack, malware, technology ]
A massive trove of 361 million email addresses from credentials stolen by password-stealing malware, in credential stuffing attacks, and from data breaches is added to the Have I Been Pwned data breach notification service.
Kadokawa
June 28, 2024
•[ ransomware, leak, malware ]
Japanese media giant Kadokawa confirms that some of its data was leaked in a ransomware attack early June 2024. The BlackSuit ransomware gang claims responsibility for the attack.
KIM
March 20, 2024
•[ leak, technology ]
The Russian threat actors from UAC-0165 disrupts the network of KIM, a local ISP in Ukraine and claims to have obtained the client database and internal documentation.
AT&T
March 16, 2024
•[ leak, technology ]
Two threat actors (ShinyHunters and MajorNelson) put on sale 71 million records allegedly stolen from AT&T in 2021. However the company claims the data did not originate from its systems. Approximately one month later AT&T confirms the breach adding that the real number of impacted users is 51 million.
Mintlify
March 13, 2024
•[ leak, misconfiguration, technology ]
Documentation startup Mintlify says dozens of customers had GitHub tokens exposed in a data breach at the start of the month.
SurveyLama
February 29, 2024
•[ leak, technology ]
SurveyLama suffers a data breach in February 2024, which exposes the sensitive data of 4.4 million users.
PSI Software SE
February 15, 2024
•[ ransomware, malware, technology ]
PSI Software SE, a German software developer for complex production and logistics processes suffers a ransomware attack that impacts its internal infrastructure.
Undisclosed Meta contractor
February 13, 2024
•[ leak, hack, technology ]
The IntelBroker threat actor leals 200,000 records on a hacker forum, claiming they contain the mobile phone numbers, email addresses, and other personal information of Facebook Marketplace users.
mpl.live
January 20, 2024
•[ leak, technology ]
The same threat actor roshtosh' leaks data from mpl.live (Mobile Premier League) another gambling platform in India.
Viber
March 16, 2024
•[ hack, technology ]
Pro-Palestinian threat actors calling themselves Handala Hack claim to have accessed 740GB of data from the messaging app Viber, including source code Viber denies the breach but is investigating Users are advised to change passwords.
Chunghwa Telecom
February 29, 2024
•[ espionage, leak, government ]
The Taiwan ministry of national defense says that threat actors stole sensitive information including military and government documents from Chunghwa Telecom, Taiwans largest telecom company and sold it on the dark web.
medQ
February 23, 2024
•[ ransomware, malware, technology ]
medQ files a notice of data breach after discovering that hackers accessed and encrypted a software platform used by medQ.
iTITAN Hosting
February 6, 2024
•[ hack, technology ]
iTITAN Hosting, another hosting provider in Romania, suffers a data breach.
Hewlett Packard Enterprise
February 1, 2024
•[ leak, technology ]
Hewlett Packard Enterprise (HPE) is investigating a potential new breach after a threat actor put allegedly stolen data up for sale on a hacking forum, claiming it contains HPE credentials and other sensitive information.
OpenAI
January 29, 2024
•[ hack, technology ]
OpenAI officials say that the ChatGPT histories a user reported result from his ChatGPT account being compromised.
Hewlett Packard Enterprise (HPE)
January 23, 2024
•[ hack, espionage, malware ]
Hewlett Packard Enterprise (HPE) discloses that suspected Russian hackers known as Midnight Blizzard gained access to the company's Microsoft Office 365 email environment to steal data from its cybersecurity team and other departments.
Trello
January 22, 2024
•[ leak, misconfiguration, technology ]
A threat actor with the moniker of 'emo' leaks the private emails of 15,115,516 Trello members, using an exposed Trello API to link private email addresses with Trello accounts, enabling the creation of millions of data profiles containing both public and private information.
Tietoevry
January 20, 2024
•[ ransomware, malware, technology ]
Finnish IT services and enterprise cloud hosting provider Tietoevry suffers an Akira ransomware attack impacting cloud hosting customers in one of its data centers in Sweden.
