Three Million Affected by Unsecured Cloud Storage Data Breach
A misconfigured Amazon cloud bucket at SeniorAdvisor exposed names, emails, phone numbers and contact dates for more than three million people.
Breaches & threats, page 4 of 5
Newest first. Back to the first page.
100 Million T-Mobile Customers' Info Up For Sale After Hacking Incident
A hacker claims to be selling personal data for 100 million T-Mobile customers, including SSNs, phone numbers, addresses and driver's licenses.
UC San Diego Health Suffers Data Breach After Phishing Attack
A phishing attack on employee email accounts at UC San Diego Health exposed patient, student and staff names, addresses, SSNs and medical records for months.
Waterloo Brewing Loses $2 Million Dollars
A business email compromise scam tricked an employee into wiring $2.1 million to fraudsters posing as a creditor; Waterloo Brewing's systems were not breached.
A Digital Education Platform Used by 5,200 Schools Suffers 10 Day Outage Following a Cyber Incident
Illuminate Education, which runs school platforms Skedula and PupilPath, suffered a 10-day outage affecting 5,200 US schools after a cyber incident.
VA State Ransomware Attack
A ransomware attack forced Virginia's legislative IT division to shut down its servers, with officials receiving a ransom demand within days of the intrusion.
Apple Safari Arbitrary Code Execution Vulnerability
A five-year-old WebKit flaw in Safari let attackers run arbitrary code on Apple devices; Apple patched it in February 2022 across iOS, iPadOS and macOS.
9,800 Patients Warned Months After Data Breach Compromises Protected Health Information
Atlanta Allergy & Asthma notified 9,800 patients months after a breach dumped their Social Security numbers, health records and account numbers online.
Database Containing 70 Million AT&T Users' Info To Be Sold On Hacker Forum
A database allegedly holding 70 million AT&T users' names, Social Security numbers and birthdates surfaced for sale on a hacker forum for $200,000.
Black Basta Ransomware Group Threat
Black Basta is exploiting unpatched Microsoft Exchange servers to steal financial data and encrypt networks, echoing an FBI warning tied to 60 organizations.
Cyberattack Leaves Library With System-Wide Technical Outages
A cyberattack caused system-wide outages at the Boston Public Library; officials found no evidence yet that employee or customer data was taken.
Cable TV Provider Cox Communications' Customer Data Exposed in Phishing (Vishing) Scheme
A hacker who impersonated a support agent by phone tricked Cox Communications into exposing customer names, addresses, PINs and account numbers.
Businesses Face Payroll, Scheduling Woes After Ransomware Attack on Kronos
A ransomware attack on Ultimate Kronos Group's Workforce Central disrupted payroll and scheduling for major clients, including Tesla and Puma, for weeks.
The Cyber Centre Releases Report on Cyber Threats Targeting Major International Sporting Events
The Canadian Centre for Cyber Security warns that cybercriminals, hacktivists and state actors are likely to target major sporting events this year.
FastJSON Versions Vulnerable to Deserialization
A flaw in FastJSON's AutoType feature (CVE-2022-25845) lets attackers run code via crafted JSON; upgrading to version 1.2.83 or enabling Safe Mode fixes it.
Florida Credit Union "Taking All Appropriate Steps" After Possible Ransomware Attack
Envision Credit Union reported technical difficulties after the LockBit 2.0 ransomware group threatened to publish the Florida credit union's stolen data.
Nearly 500,000 Fortinet VPN Accounts Leaked By Hackers
Hackers leaked login credentials for nearly 500,000 Fortinet VPN accounts; Fortinet warns unpatched or unreset credentials remain vulnerable.
Heightened Threat Activity Expected as Global Conflicts Intensify
DoS attacks hit Ukraine's defense ministry and major banks as Russia-Ukraine tensions rise; such attacks can serve as cover for larger, damaging operations.
LockBit Ransomware Threat
LockBit 2.0 ransomware spreads via emails disguised as copyright violation notices; opening the attached 'PDF' encrypts the device and deletes shadow copies.
2 Public Wastewater Facilities Hit By Ransomware Attack
Ransomware hit two Maine wastewater plants via an outdated Windows 7 computer, taking office systems down for three days with no data compromised.
Marketing Firm RR Donnelly Has Confirmed That Threat Actors Stole Data in a December Cyberattack
Marketing firm RR Donnelly confirmed data was stolen in a December ransomware attack claimed by the Conti gang, which briefly leaked 2.5GB of files.
Microsoft Azure Vulnerability
FabricScape, a flaw in Azure Service Fabric's Data Collection Agent, lets attackers escalate privileges and take over Linux clusters; patching is the fix.
Fired Credit Union Employee Takes Revenge Deleting 21GB of Data
A fired credit union employee logged back in with active remote credentials and deleted 21GB of data in an act of revenge, costing over $10,000 to restore.
OpenSSL Vulnerability
Two flaws in OpenSSL 3.0.4 can corrupt memory during RSA operations or leak 16 bytes of plaintext from AES OCB encryption; upgrade to fix both.
Want to know what this would look like for you?
A 30-minute call. No slides, no audit fee, no obligation. We ask what is breaking and tell you honestly whether we are the right fit.