Ceph
September 18, 2015
•[ hack, misconfiguration, technology ]
Red Hat reveals to have suffered an intrusion on the sites of both the Ceph community project (ceph.com) and Inktank (download.inktank.com) that resulted in signed code being accessed.
Final Fantasy Shrine
September 18, 2015
•[ leak, technology ]
In September 2015, the Final Fantasy discussion forum known as FFShrine was breached and the data dumped publicly. Approximately 620k records were released containing email addresses, IP addresses and salted hashes of passwords.
Forbes
September 15, 2015
•[ hack, malware, technology ]
Forbes is notified of a malvertising campaign on its website running from 8 to 15 September. The company states to have removed the offending ads.
Mozilla Bugzilla
September 4, 2015
•[ hack, technology ]
Mozilla reveals that an attacker stole security-sensitive vulnerability information from the Mozilla's Bugzilla bug tracking system and probably used it to attack Firefox users. The attacker may have had access since September 2013.
http://www
September 3, 2015
•[ hack, technology ]
Two hackers dubbed ConnectingFriend and KheXan rOot hack askmebazaar.com and dump 2,105 user records.
mumsnet
August 27, 2015
•[ hack, ddos, technology ]
Mumsnet is hit by a new wave of DDoS attacks.
ClearVoice Surveys
August 23, 2015
•[ leak, misconfiguration, technology ]
In April 2021, the market research surveys company ClearVoice Surveys had a publicly facing database backup from 2015 taken and redistributed on a popular hacking forum. The data included 15M unique email addresses across more than 17M rows of data that also included names, physical and IP addresses, genders, dates of birth and plain text passwords. ClearVoice Surveys advised they were aware of the breach and confirmed its authenticity.
Tianwang
August 18, 2015
•[ hack, ddos, technology ]
Tianwang, a rights and citizen journalism website based in the southwestern Chinese province of Sichuan says its operations have been paralyzed by an external attack.
OneBookShelf
August 12, 2015
•[ hack, technology ]
OneBookShelf, the operator of websites that sell games and comics as PDFs and print-on-demand publications, notifies customers that it suffered a hacker attack that obtained some credit card information.
Sabre Corporation
August 7, 2015
•[ hack, technology ]
Sabre Corp., which processes reservations for hundreds of airlines and thousands of hotels, confirm that its systems were breached recently. The company was probably hacked as part of the same wave of attacks that targeted insurer Anthem Inc. and the U.S. military.
http://itembay
August 6, 2015
•[ hack, misconfiguration, technology ]
l1kw1d hacks itembay.ca, an online game virtual currency provider and dumps 4,330 usernames with clear text passwords.
Hover
August 5, 2015
•[ hack, technology ]
Website domain name registrar Hover emails users warning of possible "unauthorised access" to one of its systems, telling them that they will not be able to log into the service until they reset their passwords.
Andy Weir
August 4, 2015
•[ hack, technology ]
Andy Weir, the creator of The Martian has his Twitter and e-mail accounts hacked.
Dota 2 Servers
August 4, 2015
•[ hack, ddos, technology ]
The International, the annual tournament for Valve's Dota 2, featuring dozens of players and millions in prize money, is put on hold when a DDoS attack takes down the game's servers.
Red Granite Pictures
July 30, 2015
•[ hack, social, technology ]
Red Granite Pictures, claims in a new lawsuit that it has been the subject of a malicious hack that has allowed the attackers to intimidate employees and disrupt its business via a mass emails campaign.
PagerDuty
July 30, 2015
•[ leak, technology ]
Alarm aggregation and dispatching service PagerDuty detects an unauthorized intrusion by an attacker who gained access to customer information, and the company requires that all customers change their passwords.
Pokébip
July 28, 2015
•[ hack, misconfiguration, technology ]
In July 2015, the French Pokmon site Pokbip suffered a data breach which exposed 657k subscriber identities. The data included email and IP addresses, usernames and passwords stored as unsalted MD5 hashes.
Ashley Madison
July 19, 2015
•[ leak, technology ]
In July 2015, the infidelity website Ashley Madison suffered a serious data breach. The attackers threatened Ashley Madison with the full disclosure of the breach unless the service was shut down. One month later, the database was dumped including more than 30M unique email addresses. This breach has been classed as "sensitive" and is not publicly searchable, although individuals may discover if they've been impacted by registering for notifications. Read about this approach in detail.
Soundwave
July 16, 2015
•[ leak, misconfiguration, technology ]
In approximately mid 2015, the music tracking app Soundwave suffered a data breach. The breach stemmed from an incident whereby "production data had been used to populate the test database" and was then inadvertently exposed in a MongoDB. The data contained 130k records and included email addresses, dates of birth, genders and MD5 hashes of passwords without a salt.
Telegram
July 14, 2015
•[ hack, ddos, technology ]
Popular messaging platform Telegram is hit with a 200Gbps distributed denial of service (DDoS) attack. Users in Asia, Australia, and Oceania are prevented from using the service.
