BreachExchange: by date

256 messages starting Apr 01 20 and ending Jun 30 20
Date index | Thread index | Author index


Wednesday, 01 April

Cybercriminal group mails malicious USB dongles to targeted companies Destry Winant
Four Considerations For CISOs With Expanding Remote Workforces Destry Winant
Marriott discloses new data breach impacting 5.2 million hotel guests Destry Winant

Thursday, 02 April

Hackers switched from direct theft of money to gaining control over the infrastructure of companies Destry Winant
Zoom Contacts Feature Leaks Email Addresses, Photos Destry Winant
IDPC launches investigation after over 330,000 voters’ personal data leaked in security breach Destry Winant
Morrisons not liable for massive staff data leak, court rules Destry Winant

Friday, 03 April

New Magecart Skimmer Infects 19 Victim Websites Destry Winant
Key Ring App Data Leak Exposes 44 Million Images Destry Winant
Australian Kids' Smartwatch Maker Hit By Same Bug Again Destry Winant

Monday, 06 April

Affordacare data breach worse than company first thought Destry Winant
Twitter Tells Users Firefox Possibly Exposed Personal Information Destry Winant
Florida-Based Firm Files Class Action Against Marriott After Latest Data Breach Revelation Destry Winant
A hacker has wiped, defaced more than 15, 000 Elasticsearch servers Destry Winant

Tuesday, 07 April

Hacker 'ceasefire' gets little traction as pandemic fuels attacks Destry Winant
Open database exposes 425 GB of financial companies’ data Destry Winant
GoDaddy suffers embarrassing phishing attack Destry Winant

Wednesday, 08 April

Email provider got hacked, data of 600, 000 users now sold on the dark web Destry Winant
Maze ransomware group hacks oil giant; leaks data online Destry Winant

Thursday, 09 April

Application for disaster loans exposed business owners' personal data Destry Winant
Shipbuilder Austal was hacked with stolen creds sold on dark web Destry Winant
Drug testing firm sends data breach alerts after ransomware attack Destry Winant
Beware malware-laden emails offering COVID-19 information, US Secret Service warns Destry Winant

Friday, 10 April

A Familiar Storm Approaches: April 14th’s Vulnerability Fujiwhara Event Destry Winant
5 things for CISOs to know amid COVID-19 pandemic Destry Winant
95M records exposed on database belonging to marketing firm Maropost Destry Winant
Zoom hit by investor lawsuit as security, privacy concerns mount Destry Winant

Monday, 13 April

San Francisco Intl Airport discloses data breach after hack Destry Winant
Ransomware scumbags leak Boeing, Lockheed Martin, SpaceX documents after contractor refuses to pay Destry Winant
Data Breach Report: RigUp Exposes More Than 70, 000 Private Files Destry Winant
Businesses brace for second 'Fujiwhara effect' of 2020 as Patch Tuesday looms Destry Winant

Tuesday, 14 April

Exclusive: Personal data of 1.41m US doctors sold on hacker forum Destry Winant
1.1 million SCUF Gaming customer records exposed online due to faulty sever security Destry Winant
Account details for 4 million Quidd users shared on hacking forum Destry Winant
Sodinokibi Ransomware to stop taking Bitcoin to hide money trail Destry Winant

Wednesday, 15 April

The Next Cyber Breach Could Be Closer Than You Think Destry Winant
Law Society says members victim of ransomware attack Destry Winant
Ransomware Attack on Brandywine Urology Impacts 131K Patients Destry Winant
Four Million Quidd User Credentials Found on Dark Web Destry Winant
WordPress sites using WooCommerce targeted by credit card skimmers Destry Winant
RagnarLocker ransomware hits EDP energy giant, asks for €10M Destry Winant

Thursday, 16 April

Compromised email account leads to Saint Francis Ministries data breach Destry Winant
Hartford HealthCare Data Breach May Have Compromised Patient Information Destry Winant
Hacked almost three weeks ago, The Beer Store can’t track inventory and some outlets still only accept cash Destry Winant
PTA investigates data breach of 115mn Pakistani mobile users Destry Winant

Friday, 17 April

Wappalyzer discloses security breach after hacker starts emailing users Destry Winant
“Lincoln Financial Advisors” Disclose Data Breach Affecting Clients Destry Winant
What data breaches teach us about security procedures Destry Winant

Monday, 20 April

Hartford HealthCare Hit by Valentine's Day Data Breach Destry Winant
Beaumont Health says 112K patients were impacted by data breach Destry Winant
Proposed government coronavirus tracking app falls at the first hurdle due to data breach Destry Winant
Hacker Claims Popular Android App Store Breached: Publishes 20 Million User Credentials Destry Winant

Tuesday, 21 April

Proposed government coronavirus tracking app falls at the first hurdle due to data breach Destry Winant
BetAmerica Sportsbook Finally Back Online after SBTech Cyber Attack Incident Destry Winant
267 Million Facebook identities available for 500 euros on the dark web Destry Winant
IT services giant Cognizant suffers Maze Ransomware cyber attack Destry Winant
Hackers Update Age-Old Excel 4.0 Macro Attack Destry Winant

Wednesday, 22 April

25K emails/pws from NIH, WHO, Gates Foundation, others dumped Richard Forno
23 million Webkinz login credentials found on the dark web Destry Winant
CISOs: Quantifying cybersecurity for the board of directors Destry Winant
PrimoHoagies Notifies Customers of Data Security Incident Destry Winant
Security lapse exposed Clearview AI source code Destry Winant
Hackers may have accessed personal information of Aurora Medical Center Bay Area patients Destry Winant

Thursday, 23 April

Implementing Effective Remote Incident Response in a Pandemic Destry Winant
Exercise tech firm Kinomap leaks 40GB database with 42M records Destry Winant
DoppelPaymer Ransomware hits Los Angeles County city, leaks files Destry Winant
MSU says data breach of third party vendor impacts hundreds Destry Winant

Friday, 24 April

Confidential details of entire WA Police Force accessed in 'startling' audit breach, CCC finds Destry Winant
WHO, Gates Foundation Credentials Dumped Online: Report Destry Winant
2.5M credit card records belonging to transaction firm PAAY exposed online Destry Winant
Online leak undermines Torrance’s claim that no personal data was affected by cyberattack Destry Winant

Monday, 27 April

Hackers Trick 3 British Private Equity Firms Into Sending Them $1.3 Million Destry Winant
EDP data breach highlights need for cybersecurity Destry Winant
SeaChange video platform allegedly hit by Sodinokibi ransomware Destry Winant
Taking a Closer Look at Zoom Destry Winant

Tuesday, 28 April

Optus faces class action after 50k customers' details sent to White Pages Destry Winant
Genetic Testing Lab Hack Affects 233,000 Destry Winant
Judge approves $8.9M settlement for Banner Health data breach Destry Winant
UniCredit Workers' Data Found for Sale Online Destry Winant
The Evolving Threat of Credential Stuffing Destry Winant

Wednesday, 29 April

Hackers publish ExecuPharm internal data after ransomware attack Destry Winant
Warwick University was hacked and kept breach secret from students and staff Destry Winant
Third-party compliance risk could become a bigger problem Destry Winant
Nintendo Breach Affects 160,000 User Accounts Destry Winant

Thursday, 30 April

Two Usenet providers blame data breaches on partner company Destry Winant
Hackers hit Chegg for the third time since 2018 Destry Winant
Why CISOs will be more important than ever after the coronavirus shutdown ends Destry Winant

Friday, 01 May

Hackers threaten to leak data from high-end architecture firm Zaha Hadid Destry Winant
Nine million logs of Brits' road journeys spill onto the internet from password-less number-plate camera dashboard Destry Winant
PrimoHoagies Sued Over Data Breach Destry Winant
Top 5 First Strategic Steps for a New CISO Destry Winant

Monday, 04 May

LabCorp slapped with shareholder suit over data breaches Destry Winant
Hacker leaks 15 million records from Tokopedia, Indonesia's largest online store Destry Winant
Home affairs data breach may have exposed personal details of 700, 000 migrants Destry Winant

Tuesday, 05 May

Can the CCO and CISO Work in Harmony? Destry Winant
North Dakota government fiber provider hit by ransomware Destry Winant
India’s Jio Coronavirus symptom checker exposed test results Destry Winant
Hacker leaks 15 million records from Tokopedia, Indonesia's largest online store Destry Winant

Wednesday, 06 May

CHILDREN’S COMPUTER GAME ROBLOX INSIDER TRICKED BY HACKER FOR ACCESS TO USERS’ DATA Destry Winant
Tarkett floored by cyber attack Destry Winant
Logistics giant Toll Group hit by ransomware for the second time in three months Destry Winant
CAM4 adult cam site exposes 11 million emails, private chats Destry Winant
GoDaddy Hack Breaches Hosting Account Credentials Destry Winant

Thursday, 07 May

Maze Ransomware group steals 11m card data from Banco de Costa Rica Destry Winant
French daily Le Figaro database exposes users’ personal info Destry Winant
European health care giant Fresenius Group grappling with computer virus Destry Winant
Unacademy Suffers a Data Breach; 22 Mn User Records for Sale on Dark Web Destry Winant

Friday, 08 May

Top 5 Tactical Steps for a New CISO Destry Winant
BJC HealthCare warns patients of possible data breach Destry Winant
Hackers use website favicon to camouflage credit card skimmer Destry Winant
InfinityBlack Dismantled After Selling Millions of Credentials Destry Winant

Monday, 11 May

Search Company Algolia Hacked via Recent Salt Vulnerabilities Destry Winant
E-commerce firm StorEnvy hacked; 1.5m plain-text accounts leaked Destry Winant
Cognizant expects to lose between $50m and $70m following ransomware attack Destry Winant
MAZE Claims Ransomware Attack on US Egg Supplier Destry Winant
No. of Records Exposed in 2020 Q1 Data Breaches Skyrockets to 8.4 Billion Destry Winant

Tuesday, 12 May

Sodinokibi ransomware can now encrypt open and locked files Destry Winant
A hacker group is selling more than 73 million user records on the dark web Destry Winant
Papa don't breach: Contracts, personal info on Madonna, Lady Gaga, Elton John, others swiped in celeb law firm 'hack' Destry Winant
Don’t Abandon Security During a Crisis Destry Winant

Thursday, 14 May

A cyber attack hit a port on Strait of Hormuz, Iran said Destry Winant
Paying ransomware demands could double the cost Destry Winant
Total number of publicly reported breaches in Q1 2020 down 58% compared to last year Destry Winant
Shipping Giant Toll Confirms Hackers Stole Data in Recent Attack Destry Winant
Over 4000 Android Apps Expose Users' Data via Misconfigured Firebase Databases Destry Winant

Friday, 15 May

Railway Vehicle Maker Stadler Hit by Malware Attack Destry Winant
Researcher finds 1, 236 websites infected with credit card stealers Destry Winant
Lurie Children’s Hospital hit with lawsuit over patient data breaches Destry Winant
MobiFriends data on 3.6 million users available for download online Destry Winant

Monday, 18 May

CISOs Finally Have The Board's Attention -- Now What? Destry Winant
Mysterious data breach called 'db8151dd' exposed email, physical address and job titles of 22 MILLION people - but no one knows exactly where the records came from Destry Winant
'Malware' takes Aussie money-manager MyBudget down for five days Destry Winant
Investment Firm Hit by BEC Scam Destry Winant

Tuesday, 19 May

Hackers leak over 20, 000 unemployment applicants bank information Destry Winant
‘Glitch’ In New Illinois Unemployment System Made Private Information Public Destry Winant
Pitney Bowes Suffered Second Ransomware Attack Within A Year Destry Winant
Interserve UK defense contractor hacked, up to 100, 000 past and present employees details exposed Destry Winant
Security Bytes #1: Vulns, Lists, and Zoom Destry Winant

Wednesday, 20 May

Hackers Hit Food Supply Company Destry Winant
Ruhr University Bochum (RUB) IT System Went Down Following Cyber Attack Destry Winant
Edison Mail bug exposed users’ email accounts to complete strangers Destry Winant
Magecart malware merrily sipped card details, evaded security scans on UK e-tailer Páramo for almost 8 months Destry Winant

Thursday, 21 May

Social Security numbers exposed in Ohio’s new unemployment system Destry Winant
Cybersecurity: How to Handle the Nontechnical Aspects of a Data Breach Destry Winant
Home Chef announces data breach after hacker sells 8M user records Destry Winant
Covve Contacts App Data Breach Exposes 23 Million Emails Addresses and Other Private Details Destry Winant
Brazil’s cosmetic giant Natura leaked 192 million records with payment data Destry Winant

Tuesday, 26 May

Hacker Swipes Data On 40 Million Users Of Popular Wishbone App Destry Winant
EasyJet faces £18 billion class-action lawsuit over data breach Destry Winant
Mathway investigates data breach after 25M records sold on dark web Destry Winant
Bank of America reveals data breach in PPP application process Destry Winant
4 Critical Responsibilities of a CISO Post COVID-19 Destry Winant

Wednesday, 27 May

Zoomcar Data Hacked; 3.5 Million Users’ Details Sold On Dark Web Destry Winant
Online education site EduCBA discloses data breach after hack Destry Winant
State unemployment office notifying more than 32, 000 gig workers whose personal information was possibly exposed Destry Winant
Deloitte Sued Over Pandemic Unemployment Website Data Breaches Destry Winant
5 Tips for Fighting Credential Stuffing Attacks Destry Winant

Thursday, 28 May

Hackers leak credit card info from Costa Rica's state bank Destry Winant
Qatar tracing app flaw exposed 1mn users’ data Destry Winant
Abuse victims data breach could cost £2.5m in damages Destry Winant
A massive database of 8 billion Thai internet records leaks Destry Winant
[Webinar] Data Breach QuickView – Trends and Highlights From Q1 2020 Destry Winant
Vulnerabilities Disclosed in Q1 2020 Decreased by 19.8% Destry Winant

Friday, 29 May

Texas Court Backs Phishing Attack Insurance Claim Destry Winant
Hackers breach data of Education and Culture Ministry’s 1.3 million civil servants Destry Winant
Hackers Sell Data from 26 Million LiveJournal Users on Dark Web Destry Winant
Real estate app leaking thousands of user records and sensitive private messages Destry Winant
Arbonne MLM data breach exposes user passwords, personal info Destry Winant

Monday, 01 June

Big Footy data breach exposed private details of up to 100, 000 users Destry Winant
Northwest Atlantic Fisheries Organization hit by ransomware attack Destry Winant
Joomla team discloses data breach Destry Winant
Amtrak resets user passwords after Guest Rewards data breach Destry Winant
Class action lawsuit filed against ODJFS consultant after Ohio Pandemic Unemployment Assistance data leak Destry Winant

Tuesday, 02 June

Hackers in £800K Bitcoin ransom note to Kent PPE firm Destry Winant
Vermont Updates its Data Breach Notification Law Destry Winant
Hackers breached six Cisco servers through SaltStack Salt vulnerabilities Destry Winant

Wednesday, 03 June

Database of dark web host with 7600 websites leaked by KingNull Destry Winant
Hackers breach data of Education and Culture Ministry’s 1.3 million civil servants Destry Winant
Wawa data breach aftermath: Observations from the legal side of things Destry Winant
Challenges of a New CISO: The First Year Destry Winant

Thursday, 04 June

Payment App Data Breach Exposes Millions of Indians' Data Destry Winant
Data Breach Litigation Waivers: Be Careful What You Wish For Destry Winant
San Francisco retirement program SFERS suffers data breach Destry Winant
Aveanna Healthcare Faces Lawsuit Over Monthlong Data Breach Destry Winant

Monday, 08 June

[Webinar] How to Be Proactive with Vulnerability Intelligence Destry Winant
Data breach affects 329,000 CPA stakeholders Destry Winant
IT Services Giant Conduent Suffers Ransomware Attack, Data Breach Destry Winant
“Aeries Software” Breached and Over 150 School Districts Compromised Destry Winant
Hackers begin publishing stolen documents after Michigan State refuses to pay ransom Destry Winant
Despite lower number of vulnerability disclosures, security teams have their work cut out for them Destry Winant

Tuesday, 09 June

Top US aerospace services provider suffers breach, loses 1.5 TB of data Destry Winant
Student loan company that stole millions from consumers leaks sensitive phone calls, SSNs, tax records Destry Winant
7 Ransomware Trends: Gangs Join Forces, Auction Stolen Data Destry Winant
Fitness Depot hit by data breach after ISP fails to 'activate the antivirus' Destry Winant

Wednesday, 10 June

Nintendo Switch hack: Company finds further 140, 000 IDs may have been breached Destry Winant
Dark Basin: Researchers Uncover Major Hack-for-Hire Group Destry Winant
Magecart Targets Emergency Services-related Sites via Insecure S3 Buckets Destry Winant
Ragnar Locker teams up with Maze; Zorab ransomware imitates decryptor Destry Winant
Five signs a virtual CISO makes sense for your organization Destry Winant

Thursday, 11 June

Babylon Health admits ‘software error’ led to patient data breach Destry Winant
Natura’s Avon suffers ‘cyber incident’ weeks after major data breach Destry Winant
Vulnerability In DigiLocker Could Have Allowed Access To Over 3 Billion Documents Destry Winant
Macy’s Settles Suit Over 2018 Data Breach for Up to $192K Destry Winant

Friday, 12 June

La Salle County ransomware attack cost an estimated $500,000; insurance will cover almost all expenses Destry Winant
City Pays Ransom Despite Pre-Ransomware Outbreak Hack Alert Destry Winant
Honda confirms its network has been hit by cyberattack Destry Winant
CISO: Is Now The Time To Broaden The Scope Of This Important Role? Destry Winant

Monday, 15 June

Lion warns of beer shortages following ransomware attack Destry Winant
Live Event Manufacturer Reveals Employee Data Breach Destry Winant
Knoxville Pulls IT Systems Offline Following Ransomware Attack Destry Winant

Tuesday, 16 June

College should have shared data breach information sooner, experts say Destry Winant
Minted Sued Over Data Breach Under California Law (Corrected) Destry Winant
South Africa’s PostBank is Replacing 12 Million Bank Cards After Major Security Breach Destry Winant
NHSmail accounts hit by phishing attack Destry Winant
Should someone be fired for a cyber breach? And if so, who? Destry Winant

Wednesday, 17 June

Niche dating apps expose almost 1TB of user data Destry Winant
Colorado hospital loses access to 5+ years of patient medical records in ransomware attack Destry Winant
Enel Group attacked by SNAKE ransomware same as Honda Destry Winant
Google Alerts catches fake data breach notes pushing malware Destry Winant
CIA cyber weapons stolen in historic breach due to 'woefully lax security', internal report says Destry Winant

Thursday, 18 June

Attackers give Lion deadline for paying ransom of US$800, 000 Featured Destry Winant
New Mexico health system email hacks exposed info of 183, 000 patients Destry Winant
A Tale of 2 Health Data Breaches: Persistent Challenges Destry Winant
Revised DOJ compliance guidance offers risk-management lessons for cybersecurity leaders Destry Winant

Monday, 22 June

3 Things Wilderness Survival Can Teach Us About Email Security Destry Winant
U.S. Semiconductor Maker MaxLinear Discloses Ransomware Attack Destry Winant
Business Associate Incidents Added to Breach Tally Destry Winant
Businesswoman's computer hacking revenge 'ruined' firm Destry Winant
Maze Ransomware Gang Continues Data-Leaking Spree Destry Winant
Nigerian entrepreneur pleaded guilty to $11M Caterpillar fraud Destry Winant

Tuesday, 23 June

If a Cyber Security Report Falls in a Forest, Is Anyone Listening? Destry Winant
Hackers Compromise A Grey Market That Trades In Roblox Items Destry Winant
'Distributed Denial of Secrets' publishes 'Blue Leaks, ' a trove of law enforcement records Destry Winant
Oracle's BlueKai tracks you across the web. That data spilled online Destry Winant
Authorities Arrest Suspect in 2014 UPMC Data Breach Destry Winant

Wednesday, 24 June

Web-skimming scam infected e-commerce sites on three continents Destry Winant
5 areas IT leaders should be followers Destry Winant
'Work pressure' sees Maze ransomware gang demand payoff from wrong company Destry Winant
Ransomware group auctions Crozer-Keystone Health System data on darknet Destry Winant

Thursday, 25 June

REvil ransomware scans victim's network for Point of Sale systems Destry Winant
Twitter apologizes for leaking businesses’ financial data Destry Winant
Brute-force attacks explained, and why they are on the rise Destry Winant
Keizer officials pay $48k ransom to regain control of city computers Destry Winant

Friday, 26 June

Personal Data of 350, 000+ Social Media Influencers and Users Compromised Following Preen.Me Hack Destry Winant
LG Electronics allegedly hit by Maze ransomware attack Destry Winant
EncroChat encrypted communication provider quits after malware attack Destry Winant

Monday, 29 June

OneClass unsecured S3 bucket exposes PII on more than one million students, instructors Destry Winant
Breach Notification Delay: A Step-by-Step Timeline Destry Winant
Criminals use Sekhmet ransomware to hit gas company SilPac twice Destry Winant
Digital Assets: Nasdaq-Listed Software Company Sapiens Paid $250K Ransom to Hackers Amidst COVID Destry Winant
Stalker Online Breach: 1.3 Million User Records Stolen Destry Winant

Tuesday, 30 June

Hackers Leak Tons of Personal Data as IndiaBulls Fails to Meet the First Ransomware Deadline Destry Winant
Turkey: KVKK fines gaming company TRY 1, 100, 000 for breach notification violations Destry Winant
UnityPoint agrees to $2.8 million data breach settlement Destry Winant
8 U.S. City Websites Targeted in Magecart Attacks Destry Winant
Breach Notification Delay: A Step-by-Step Timeline Destry Winant