myRepoSpace
July 6, 2015
•[ hack, leak, technology ]
In July 2015, the Cydia repository known as myRepoSpace was hacked and user data leaked publicly. Cydia is designed to facilitate the installation of apps on jailbroken iOS devices. The repository service was allegedly hacked by @its_not_herpes and 0x8badfl00d in retaliation for the service refusing to remove pirated tweaks.
Unknown Organization
July 5, 2015
•[ financial, misconfiguration, technology ]
Primedice, an online gaming/gambling site loses $1 million in bitcoin to an attacker who exploited its random number generation (RNG) system.
Hacking Team
July 5, 2015
•[ hack, technology ]
Hacking Team, the Italian company behind the infamous surveillance software is hacked. The attacker, allegedly the same author behind the attack on Gamma International (another surveillance software) dumps approximately 400Gb of data by hijacking the Hacking Team Twitter account.
Bharat Sanchar Nigam Limited (BSNL)
July 4, 2015
•[ hack, leak, technology ]
In name of OpIndia, AnonOpsindia, a group affiliated to the Anonymous collective hacks BSNL and claims to have siphoned the entire database, which has sensitive information of over 30 million users.
Islam Channel
July 1, 2015
•[ espionage, technology ]
A threat actor compromised Islam Channel, a small UK TV station, in July 2015. In October 2018, the United Kingdom publicly attributed the compromise to Russian military intelligence.
CheapAssGamer.com
July 1, 2015
•[ leak, sqlinjection, technology ]
In approximately mid-2015, the forum for CheapAssGamer.com suffered a data breach. The database from the IP.Board based forum contained 445k accounts including usernames, email and IP addresses and salted MD5 password hashes.
iPmart
July 1, 2015
•[ hack, misconfiguration, technology ]
During 2015, the iPmart forum (now known as Mobi NUKE) was hacked and over 2 million forum members' details were exposed. The vBulletin forum included IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked. A further 368k accounts were added to "Have I Been Pwned" in March 2016 bringing the total to over 2.4M.
PS3Hax
July 1, 2015
•[ hack, misconfiguration, technology ]
In approximately July 2015, the Sony Playstation hacks and mods forum known as PS3Hax was hacked and more than 447k accounts were exposed. The vBulletin forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
Minefield
June 28, 2015
•[ hack, misconfiguration, technology ]
In June 2015, the French Minecraft server known as Minefield was hacked and 188k member records were exposed. The IP.Board forum included email and IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.
Uber
June 15, 2015
•[ hack, misconfiguration, technology ]
A website hosting an Uber petition (petition.uber.org) calling on local government to allow its drivers to work on San Francisco's Market Street is defaced by a seemingly well-intentioned blogger, who also inserts a banner that automatically redirects visitors to a competitor's site.
Kaspersky Lab
June 10, 2015
•[ espionage, malware, technology ]
Kaspersky discoveres an advanced attack on its own internal networks. The company is confident that there's a nation state behind it and calls the malware Duqu 2.0.
Freeparking
June 9, 2015
•[ hack, ddos, technology ]
Freeparking, a web hosting provider, is the target of a severe DDoS attack.
Westnet
June 6, 2015
•[ leak, hack, technology ]
Australia's third-largest internet service provider, iiNet, investigates claims that a database held by its subsidiary, Westnet, has been hacked and is being offered for sale by a hacker dubbed Mufasa.
Hex-Rays
May 25, 2015
•[ hack, technology ]
Hex-Rays, developers of IDA (Interactive Disassembler) sends an email notification to its customers about a recent attack that may have resulted in the compromise of some license keys along with the web forum and the quotation system.
minecraftpeforum
May 24, 2015
•[ hack, technology ]
@rmsg0d, a member of TeaMp0isoN, hacks minecraftpeforum.net (a Minecraft Pocket Edition Forum whose domain was recently expired) and dumps the forum's database containing 16,125 records with, usernames, passwords, and numerous other fields relating to for
Bitcointalk
May 22, 2015
•[ hack, technology ]
LeakedSource reveals that Bitcointalk.org had 499,593 users hacked in May of 2015. Data contains usernames, emails, passwords, birthdays, secret questions, hashed secret answers and some other internal data.
Adult Friend Finder
May 21, 2015
•[ hack, technology ]
Personal information relating to almost 4 million users of a worldwide online dating website adultfriendfider.com is leaked on the Dark Web by unknown hackers. Details of users' sexual preferences, along with email addresses, usernames, dates of birth, postcodes and the unique internet addresses of users' computers are compromised.
VNG
May 19, 2015
•[ hack, misconfiguration, technology ]
In April 2018, news broke of a massive data breach impacting the Vietnamese company known as VNG after data was discovered being traded on a popular hacking forum where it was extensively redistributed. The breach dated back to an incident in May of 2015 and included of over 163 million customers. The data in the breach contained a wide range of personal attributes including usernames, birth dates, genders and home addresses along with unsalted MD5 hashes and 25 million unique email addresses. The data was provided to HIBP by dehashed.com.
Спрашивай.ру
May 11, 2015
•[ leak, technology ]
In May 2015, . (a the Russian website for anonymous reviews) was reported to have had 6.7 million user details exposed by a hacker known as "w0rm". Intended to be a site for expressing anonymous opinions, the leaked data included email addresses, birth dates and other personally identifiable data about almost 3.5 million unique email addresses found in the leak.
Evermotion
May 7, 2015
•[ hack, sqlinjection, technology ]
In May 2015, the Polish 3D modelling website known as Evermotion suffered a data breach resulting in the exposure of 435k unique user records. The data was sourced from a vBulletin forum and contained email addresses, usernames, dates of birth and salted MD5 hashes of passwords. The site was previously reported as compromised on the Vigilante.pw breached database directory.
