Boost Mobile
May 15, 2019
•[ hack, technology ]
Boost Mobile is hit with a breach which affected an unknown number of customer accounts. The company experienced unauthorized online account on March 14, 2019.
Forbes
May 15, 2019
•[ financial, malware, technology ]
Researchers from Bad Packets discover that hackers injected the Forbes' subscription website with a Magecart script which collects payment card data customers introduce on the checkout page and exfiltrates it to a server controlled by the attackers.
Best of the Web
May 14, 2019
•[ hack, malware, technology ]
Sanguine Security researcher Willem de Groot discovers that hackers compromised the script used by Best of the Web to display their trust seal on their customers' websites and to add two key logging scripts designed to sniff keystrokes from visitors.
Alpaca Forms
May 12, 2019
•[ hack, malware, technology ]
Hackers breach the Cloud CMS managed CDN and modify one of the Alpaca Form scripts to inject malicious code in over 3,400 sites.
Picreel
May 12, 2019
•[ hack, malware, technology ]
Hackers breach the analytics service Picreel and embed malicious code on over 1,200 websites.
WIRED
May 9, 2019
•[ financial, hack, misconfiguration ]
Cond Nast notifies about 1,100 WIRED subscribers of a breach involving their payment information, when an unauthorized party accessed a third-party vendor's systems between April 14 and April 17, 2019.
Wolters Kluwer
May 6, 2019
•[ ransomware, malware, technology ]
The global information services firm Wolters Kluwer is crippled by a ransomware attack.
Airbnb users in UK
May 5, 2019
•[ hack, technology ]
Several Airbnb users complain that their accounts have been "hacked" with some finding holidays unknowingly booked in their name costing thousands of pounds.
Michael Bubles Instagram Account
April 30, 2019
•[ hack, technology ]
Michael Bubles Instagram account is apparently hacked, when some strange images are shown for about half an hour.
A2 Hosting
April 23, 2019
•[ ransomware, malware, technology ]
A ransomware infection takes down the operations of A2 Hosting, a US-based web hosting provider.
Deezer
April 22, 2019
•[ leak, misconfiguration, technology ]
In late 2022, the music streaming service Deezer disclosed a data breach that impacted over 240M customers. The breach dated back to a mid-2019 backup exposed by a 3rd party partner which was subsequently sold and then broadly redistributed on a popular hacking forum. Impacted data included 229M unique email addresses, IP addresses, names, usernames, genders, DoBs and the geographic location of the customer.
The Weather Channel
April 18, 2019
•[ ransomware, malware, technology ]
The Weather Channel is hit by a ransomware attack.
Verint
April 17, 2019
•[ ransomware, malware, technology ]
The Israel offices of US cyber-security firm Verint are hit by ransomware.
ApexSMS
April 15, 2019
•[ leak, misconfiguration, technology ]
In May 2019, news broke of a massive SMS spam operation known as "ApexSMS" which was discovered after a MongoDB instance of the same name was found exposed without a password. The incident leaked over 80M records with 23M unique email addresses alongside names, phone numbers and carriers, geographic locations (state and country), genders and IP addresses.
Flashpoint
April 12, 2019
•[ hack, malware, technology ]
A 0-day vulnerability in the Yuzo WordPress plugin causes the Flashpoint website to briefly redirect the users to an external website with a pop-up leading to malware.
Truth Finder
April 12, 2019
•[ leak, technology ]
In 2019, the public records search service TruthFinder suffered a data breach that later came to light in early 2023. The data included over 8M unique customer email addresses, names, phone numbers and passwords stored as scrypt hashes.
Instant Checkmate
April 12, 2019
•[ leak, technology ]
In 2019, the public records search service Instant Checkmate suffered a data breach that later came to light in early 2023. The data included almost 12M unique customer email addresses, names, phone numbers and passwords stored as scrypt hashes.
VSDC
April 11, 2019
•[ financial, malware, technology ]
The website of the free multimedia editor VSDC is breached again to distribute a banking trojan and an info stealer (Win32.Bolik.2 and KPOT stealer).
Matrix
April 10, 2019
•[ leak, technology ]
Matrix.org is the victim of a cyberattack which forces the organization to overhaul its entire production infrastructure and inform users of a widespread credentials leak.
Tenx Systems
April 9, 2019
•[ ransomware, malware, technology ]
Tenx Systems reveals to have been hit by a ransomware attack discovered on April 9.