OpSec Security
March 25, 2016
•[ social, phishing, technology ]
OpSec Security joins the list of the companies who have fallned victim to email scams, as a consequence the 2015 W-2 tax forms for current and former employees are compromised.
vbulletin
March 24, 2016
•[ hack, technology ]
Administrators of the vBulletin forums start a site-wide password reset operation after an unknown attacker gained access to one of their servers.
Verizon Enterprise Solutions
March 24, 2016
•[ leak, misconfiguration, technology ]
The contact information on some 1.5 million customers of Verizon Enterprise is published on an underground forum. The company confirms to have recently discovered and remediated a security vulnerability on its enterprise client portal.
Harry Styles
March 20, 2016
•[ hack, malware, technology ]
One Direction singer Harry Styles and his alleged girlfriend Kendall Jenner have their personal photos leaked online after iCloud account hack.
Tuned Global
March 16, 2016
•[ hack, misconfiguration, technology ]
In January 2021, data from a number of breached services including Tuned Global were released to a public hacking forum. The breach appears to date back to 2016 and includes 985k records containing email addresses, names, a small number of physical addresses and phone numbers and passwords stored in plain text.
Naughty America
March 14, 2016
•[ hack, misconfiguration, technology ]
In March 2016, the adult website Naughty America was hacked and the data consequently sold online. The breach included data from numerous systems with various personal identity attributes, the largest of which had passwords stored as easily crackable MD5 hashes. There were 1.4 million unique email addresses in the breach.
worldchess
March 11, 2016
•[ hack, ddos, technology ]
Controversial website worldchess.com, broadcasting in exclusive the World Chess Candidates Tournament, is the target of a DDoS attack.
Staminus
March 11, 2016
•[ hack, technology ]
In March 2016, the DDoS protection service Staminus was "massively hacked" resulting in an outage of more than 20 hours and the disclosure of customer credentials (with unsalted MD5 hashes), support tickets, credit card numbers and other sensitive data. 27k unique email addresses were found in the data which was subsequently released to the public. Staminus is no longer in operation.
Litecointalk Forum
March 10, 2016
•[ hack, technology ]
The Litecointalk forum is hacked, and all users are forced to reset their passwords.
Unnamed South Korean news-clipping firm
March 5, 2016
•[ hack, technology ]
South Korean officials launch an investigation into whether an Islamic State militant group hacked a South Korean news-clipping firm's computer network. Data on 20 South Koreans was reportedly acquired in the attack.
Mansueto Ventures
March 4, 2016
•[ financial, phishing, technology ]
Another victim of a payroll phish: unknown criminals obtain the IDs of 90 percent of the employees of Mansueto Ventures and use the data to file the fraudulent tax returns.
GCI
March 4, 2016
•[ financial, leak, phishing ]
GCI notifies more than 2,500 employees that their W-2 forms were stolen in an apparent phishing scam in February.
Seagate
March 1, 2016
•[ social, phishing, technology ]
Seagate is the last victim of a payroll phish. A Seagate employee sends the data to an outside e-mail address after receiving an e-mail purportedly from Seagate's CEO Stephen Luczo requesting 2015 W-2 data for current and former Seagate employees.
KM.RU
February 29, 2016
•[ leak, technology ]
In February 2016, the Russian portal and email service KM.RU was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", KM.RU was one of several Russian sites in the breach and impacted almost 1.5M accounts including sensitive personal information.
Mate1
February 29, 2016
•[ leak, misconfiguration, technology ]
A hacker on the dark web forum Hell claims to have sold the email addresses and plaintext passwords of over 27 million users of dating site Mate1.com.
primodominio
February 27, 2016
•[ hack, leak, technology ]
LulzSec Italia hacks primodominio.it and dumps 126,422 usernames and passwords.
Linux Mint
February 21, 2016
•[ hack, malware, technology ]
In February 2016, the website for the Linux distro known as Linux Mint was hacked and the ISO infected with a backdoor. The site also ran a phpBB forum which was subsequently put up for sale complete with almost 145k email addresses, passwords and other personal subscriber information.
Linux Mint Distribution
February 20, 2016
•[ hack, malware, technology ]
Clem Lefebvre, the creator of the Linux Mint Distribution reveals that an intrusion on the distribution's web site took place, in which hackers made a modified Linux Mint ISO, with a backdoor in it, and managed to hack the website to point to it.
SkTorrent
February 19, 2016
•[ hack, misconfiguration, technology ]
In February 2016, the Slovak torrent tracking site SkTorrent was hacked and over 117k records leaked online. The data dump included usernames, email addresses and passwords stored in plain text.
Bohemia Interactive
February 19, 2016
•[ hack, technology ]
Bohemia Interactive announces a potential security breach of the Mantis Feedback Tracker systems, used to collect feedback and bug reports for the games Arma 3 and DayZ.
