This week's updates
23rd of February 2024

1st Lake Properties Inc.
Personal information of thousands of current and former tenants compromised
  • Tracking initiated
23andMe Holding Co.
Data breach into 'DNA Relatives' feature
  • Articles updated
23andMe Holding Co.
Hackers compiled a list of people with Ashkenazi Jewish ancestry
  • Articles updated
Accelya
Ransomware attack impacted some systems
  • Articles updated
Administrative Office of Pennsylvania Courts
Cyber attack impacted state court system website
  • Articles updated
Alabama A&M University
Students’ social security numbers compromised
  • Tracking initiated
Almerys and Viamedis
Half the French population's data compromised
  • Articles updated
Alphabet Inc. and 2 more...
500,000 users’ data compromised, business unit shuttered and then event disclosed
  • Articles updated
Amazon.com, Inc.
Doorbell cameras breached and victim extorted by bad actors
  • Articles updated
American Vision Partners and Medical Management Resource Group
Data breach affected more than 2.3 million patients
  • Articles updated
AnyDesk Software GmbH
Hackers breached production servers resulting in password resets
  • Articles updated
AutoZone
MOVEit data breach affected 184,995 individuals
  • Articles updated
Auxo
Cyber attack carried out by offshore hackers
  • Tracking initiated
BMW Group
Data leak after someone configured the cloud server incorrectly
  • Tracking initiated
Bandai Namco Entertainment Inc.
Suspected double-extortion ransomware attack
  • Articles updated
Bank of America and Infosys McCamish Systems LLC
Data leak affected 57,000 users owing to a ransomware attack suffered by third party
  • Articles updated
  • Lessons learnt updated
  • Cause updated
Blue Shield of California
Potentially large-scale cyber attack put millions of customers' private data at risk
  • Articles updated
Bradford-Scott Data, LLC
Unauthorised party accessed consumers’ sensitive information
  • Companies updated
CGM, Inc.
Unauthorized party accessed consumers’ sensitive information
  • Tracking initiated
Cambridge Water and South Staffordshire plc
Customers’ bank details published to dark web after cyber attack
  • Articles updated
Casepoint
Ransomware attack on lawtech platform
  • Articles updated
Central Arkansas Library System
Internet network offline after cyber security attack
  • Tracking initiated
Cloudflare, Inc. and Okta, Inc.
Attackers stole “some documentation and a limited amount” of source code
  • Articles updated
Colorado Department of Higher Education
Data breach spanning 16 years
  • Articles updated
Comcast Cable Communications, LLC and 2 more...
Customer data compromised after CitrixBleed vulnerability exploited
  • Articles updated
Company undisclosed: Energy Industry
Cyber attack shut down 70% of country's gas stations
  • Articles updated
Confederación Sindical de Comisiones Obreras
Credentials encompassing login details and passwords stolen from server
  • Tracking initiated
Consulting Radiologists Ltd.
Forced offline after apparent cyberattack
  • Articles updated
Delta Dental of California
Data breach impacted 6,928,932 customers
  • Articles updated
Drizly
Up to 2.5 million accounts have been affected by data breach
  • Articles updated
ETISALAT
Ransomware assault attributed to the LockBit ransomware group
  • Articles updated
Eagers Automotive
Cyber incident resulted in outage
  • Articles updated
Emmanuel College
Data breach affected 89k individuals' personal information
  • Articles updated
Employees’ Provident Fund Organisation
Data breach exposed the personal data of millions
  • Tracking initiated
Empress EMS
318,558 customers' information exposed after ransomware attack
  • Synopsis updated
Estée Lauder Companies
Serious ransomware breach after two groups claimed responsibility
  • Articles updated
FC Bayern and FC Bayern Munich
"Racist cyber attack" on player
  • Tracking initiated
Family and Children’s Services of Lanark, Leeds and Grenville
Personal information made available to unauthorized third party
  • Discovered at beginning updated
Fidelity National Financial, Inc.
Ransomware shakedown forced shut down of number of key systems
  • Articles updated
Financial Asset Management Systems and Harris Center for Mental Health
Patient information compromised in MOVEit Transfer hack
  • Articles updated
Francis Howell School District
Network outage after cyber attack
  • Tracking initiated
Fulton County
Cybersecurity incident over the weekend
  • Articles updated
Golden Corral Corporation
183,000 impacted by data breach which compromised Social Security Numbers
  • Tracking initiated
Green Ridge Behavioral Health, LLC
Ransomware attack affected the protected health information of over 14,000 individuals
  • Discovered at beginning updated
  • Lessons learnt updated
  • Event updated
  • Risk effect category updated
HWL Ebsworth
Cybercriminals claimed to have published troves of sensitive data
  • Articles updated
HWL Ebsworth and Singtel Optus Pty Limited
Data leaked due to third party's attack
  • Articles updated
Halewood Artisanal Spirits
Cyber attack disrupted supply chain during peak Christmas trading period
  • Risk effect category updated
Hampton-Newport News Community Services Board
800 GB of sensitive data stolen
  • Articles updated
Harvard Pilgrim Health Care and Point32Health
Personal information stolen in "massive" breach
  • Occurred at beginning updated
  • Occurred at ending updated
  • Synopsis updated
Henry Schein, Inc.
Portion of its manufacturing and distribution businesses experienced a cybersecurity incident
  • Articles updated
Hillside Dental
Cyber attack affected operations and services
  • Tracking initiated
INTEGRIS Health
Unauthorised access to portion of network compromised patient data
  • Articles updated
Idaho National Laboratory
Personnel system breached at facility instrumental in US nuclear energy research
  • Articles updated
JCT600 Ltd
Network issue experienced which affected telephone and IT systems
  • Articles updated
Jeff Wyler Automotive Family
Data breach affected SSNs and financial account information
  • Tracking initiated
Johnson Controls International and Johnson Controls International PLC
Disruptive cyberattack suffered and 27TB of information stolen
  • Articles updated
Jules B
Criminal hackers launched ransomware attack
  • Tracking initiated
Kansas State University
Email, video and VPN services disrupted after cyber attack
  • Articles updated
Keenan & Associates
Data breach impacted 1.5 million individuals
  • Articles updated
Lehigh Valley Health Network
Cyber attack by Russian ransomware gang
  • Articles updated
Lexington Medical Center
Data breach compromised 1.7 million patients' personal information
  • Articles updated
LoanDepot
Cyber attack impacted systems payment portal
  • Articles updated
Lurie Children’s Hospital
'Cybersecurity matter' forced them to take communications and MyChart offline
  • Articles updated
MGM Resorts International
Cybersecurity issue shut down systems at Las Vegas venues
  • Articles updated
MSH International
Membership portal made unavailable as a result of cyber incident
  • Articles updated
McLaren Health Care Corporation
Ransomware attack took down computer network at 14 Michigan hospitals
  • Articles updated
MeridianLink Inc
Ransomware group filed a formal complaint regulator about their victim's regulatory conduct
  • Articles updated
Microsoft Corporation
Security systems were breached by Russian hacking group
  • Articles updated
Microsoft Corporation and The Storting
Cyber attack linked to a "vulnerability" in Microsoft's Exchange software
  • Articles updated
Minnesota State University-Moorhead
Internet outage affected students, faculty and staff
  • Tracking initiated
Morrison Community Hospital
5TB of patients’ and employee’s information stolen
  • Articles updated
Motilal Oswal Financial Services
Cyber attack by ransomware group LockBit resulted in shares off 2%
  • Articles updated
Munster Technological University
Staff and students' data “accessed and copied” and shared on dark web
  • Articles updated
National Cash Register and NCR Corporation
Data center outage result of ransomware attack
  • Articles updated
Nautic Partners
Cyber attack compromised 7,800 people's personal information
  • Articles updated
North Miami Beach Police Department
Fake e-mail fooled police officers
  • Tracking initiated
Office of the Colorado State Public Defender
Public defenders blocked from work computers and electronic court dockets and filings
  • Articles updated
Okanagan-Skaha School District
District-wide network issue after a cyber-security incident
  • Tracking initiated
PSI Software SE
Cyber attack on IT systems company proactively disconnected systems from Internet
  • Articles updated
Paypal Holdings Inc.
Accounts compromised by cyber criminals
  • Tracking initiated
Pitesti Pediatric Hospital
More than 100 health care facilities are offline after ransomware attack
  • Articles updated
Prince George’s County Public Schools
‘Cyberattack’ involved 4,500 user accounts
  • Articles updated
  • Discovered at beginning updated
Prudential Financial, Inc.
Sensitive employee and contractor data stolen
  • Articles updated
Robert Half International, Inc.
Unauthorized party gained access to sensitive consumer data on company’s network
  • Articles updated
  • Lessons learnt updated
  • Hacking group updated
Roblox Corporation and 2 more...
Third party accounting software provider breached and data compromised by ALPHV/BlackCat
  • Articles updated
SEIKO NPC Corporation
Cybersecurity incident described as “possible” data breach
  • Articles updated
Saint Anthony Hospital
Ransomware attack on children's hospital $800,000 demanded
  • Articles updated
Schneider Electric SE
Ransomware attack disabled some systems and possibly caused a theft of large amount of organisational information
  • Articles updated
Securence and US Internet Corp.
Decade’s worth of internal email exposed in plain text
  • Tracking initiated
Spectrum Vision Partners, Inc.
Unauthorised party accessed computer network
  • Tracking initiated
Stratford-on-Avon District Council
79,000 email addresses compromised
  • Articles updated
Subway and Subway IP LLC
LockBit gang claimed to have exfiltrated hundreds of gigabytes of data
  • Articles updated
Suffolk County
911 operations paralyzed after cyber attack
  • Articles updated
Sutter Health and Welltok, Inc.
MOVEit hack impacted 1.6M individuals
  • Articles updated
Tangerine
Data breach impacted 200,000 customers
  • Articles updated
Te Whatu Ora Health New Zealand
Large amounts vaccination data leaked online
  • Articles updated
Technica, U.S.A.
Theft of sensitive files by ransomware group
  • Articles updated
The Western Union Company
Attack resulted in significant disruptions to operations
  • Articles updated
The Zalkin Law Firm PC
Cyber attack exposed personal information and case files from 523 clients
  • Tracking initiated
Tic Hosting Solutions and TorchByte
Data incident suffered
  • Tracking initiated
TissuPath and TissuPath Pathology Pty Ltd
446 GB and 735,414 files exfiltrated
  • Articles updated
Toronto Public Library
Services down following weekend cyberattack
  • Articles updated
Trans-Northern Pipelines Inc.
ALPHV ransomware group listed them on leak site
  • Articles updated
Twitter
Zero-day vulnerability used to exposed 5.4 million anonymous accounts
  • Articles updated
US Department of Defense
26,000 individuals impacted by data breach
  • Articles updated
University of Cambridge
Services impacted by DDoS attack claimed by Anonymous Sudan hacktivist group
  • Articles updated
University of Vermont Health Network and University of Vermont Medical Centre
Significant and ongoing system-wide network issue cause by cyber attack
  • Articles updated
VARTA AG
Cyber attack forced shut down of IT systems and caused production to stop at plants
  • Articles updated
Victoria Police
Unauthorized access to police information sparked concerns over data protection
  • Tracking initiated
Vili’s Family Bakery
Unauthorised access to digital systems
  • Tracking initiated
Virginia Farm Bureau
IT system targeted in ransomware attack
  • Articles updated
Washington County
Cyberattack shuts down main computer server
  • Articles updated
Welch Foods Inc.
Disruption caused by cyber attack
  • Articles updated
  • Lessons learnt updated
  • Industry updated
  • Location of victim updated
  • Risk effect category updated
Williamson County
Unauthorized user gained access to court member's email account
  • Articles updated
Wyze Labs, Inc.
Outage cut off access to smart home devices/security cameras
  • Articles updated
Youngstown State University Foundation and YSU Foundation
Checking and personal information was stolen from donors
  • Tracking initiated
Zenlayer
Internal database exposed on the internet revealed c.384 million records
  • Tracking initiated
reddit Inc.
Attackers found a way around multi-factor authentication to breach systems
  • Articles updated

Cyber Security Case Studies is tracking 4,720 events affecting 4,864 companies resulting in $32,404,011,642 net costs