This week's updates
8th of March 2024

1Password and 2 more...
Security incident after hackers gained access to its Okta ID management tenant
  • Articles updated
AGC America
Data breach after an unauthorised party accessed sensitive consumer data
  • Articles updated
Administrative Office of Pennsylvania Courts
Cyber attack impacted state court system website
  • Articles updated
Advantis Global
Cyber attack compromised more than 5,000 employees' personal data
  • Discovered at beginning updated
  • Location of victim updated
  • Industry updated
Aetna Inc.
Unauthorised party accessed consumers’ sensitive information
  • Discovered at beginning updated
  • Industry updated
  • Location of victim updated
Alliance Solutions Group and TalentLaunch
Cyber security incident exposed 119,261 individuals' personal information
  • Companies updated
  • Title updated
Almerys and Viamedis
Half the French population's data compromised
  • Articles updated
  • Industry updated
Alphabet Inc. and 2 more...
500,000 users’ data compromised, business unit shuttered and then event disclosed
  • Articles updated
  • Financial transaction updated
American Vision Partners and Medical Management Resource Group
Data breach affected more than 2.3 million patients
  • Articles updated
Apollo Information Systems and Tarrant Appraisal District
Security breach of computers but no data was compromised
  • Tracking initiated
Aramco and 2 more...
Petrochemical company with a plant in Saudi Arabia was hit by a new kind of cyberassault
  • Articles updated
AutoZone
MOVEit data breach affected 184,995 individuals
  • Articles updated
Auxo
Cyber attack carried out by offshore hackers
  • Articles updated
Bay Area Anesthesia and Envision Physician Services
Affected by data breach involving third party's computer systems
  • Companies updated
Bayview Asset Management
Data breach affected borrowers' personal information
  • Title updated
Big Brothers Big Sisters of America
Approximately 35,000 program participants' information breached
  • Articles updated
Blackbaud and Blackbaud Inc.
Paid ransom to have the hijacked data destroyed by the cybercriminals
  • Articles updated
Booking.com and Booking Holdings Inc.
Security breach denied after phishing scam attempt made on website
  • Tracking initiated
Bridgestone Americas, Inc. and Bridgestone Corporation
Plant’s night shift employees were also told not to come in for work after "potential information security incident"
  • Articles updated
British Library
Major technology outage after cyber-attack
  • Articles updated
CD Projekt Red and CD Projekt S.A.
Major upcoming game is being held hostage by hackers demanding a ransom
  • Companies updated
Casino del Sol
Cyber attack caused widespread system outage
  • Articles updated
Cencora Inc.
Unauthorised access to information systems
  • Articles updated
Change Healthcare and UnitedHealthcare Inc.
Network interruption related to cyber security issue
  • Articles updated
  • Financial transaction updated
  • Risk effect category updated
  • Has paid ransom updated
Chelan Public Utility District
Customer statements after vendor's cyber attack
  • Tracking initiated
Chunghwa Telecom
Data breach compromised government-related information
  • Tracking initiated
Cloudflare, Inc. and Okta, Inc.
Attackers stole “some documentation and a limited amount” of source code
  • Articles updated
Cogdell Memorial Hospital
85,000 patients' sensitive Protected Health Information compromised
  • Articles updated
Companies and Intellectual Property Commission
Sensitive data 3 million entities and individuals compromised
  • Industry updated
  • Location of victim updated
Concord Music Group
Data breach affected more than 3,000 people
  • Discovered at beginning updated
  • Industry updated
  • Location of victim updated
ConnectWise
Vulnerabilities in product that could allow the ability to execute remote code or directly impact confidential data or critical systems
  • Articles updated
Conrade Insurance Group Inc
Unauthorized actor accessed employee’s email account
  • Tracking initiated
Cutout.Pro
20 million users' personal information leaked
  • Articles updated
Datamatch
Students discovered they could access and scrape site’s user data
  • Tracking initiated
Department of Foreign Affairs
Russian cyber extortion group claimed it had “successfully breached” the systems
  • Articles updated
Derbyshire County Council
Email sent to wrong person resulted unintended sharing of personal data
  • Tracking initiated
Duke University and 3 more...
Hacker on dark web asserted possession of data from university
  • Companies updated
  • Location of victim updated
Egyptian Health Department
Unauthorised party accessed certain files on network containing confidential patient information
  • Articles updated
Eken Group Ltd
Cameras have security flaws that allow bad actors to view footage from the devices or control them
  • Articles updated
Epic Games, Inc.
Claim they suffered from ransomware hack denied
  • Articles updated
Epic Games, Inc. and Fortnite Battle Royale
Hackers kick off campaigns to hijack accounts of 800,000 players at gaming site
  • Companies updated
ExpressVPN
DNS requests routed to a third-party server due to vulnerability
  • Tracking initiated
Facebook, Inc. and 4 more...
Users' account security compromised after text message routing company left one of its internal databases exposed
  • Articles updated
Fairway Independent Mortgage Corporation
Data breach disclosed
  • Articles updated
Family and Children’s Services of Lanark, Leeds and Grenville
Personal information made available to unauthorized third party
  • Articles updated
Farmacia AL SHEFA
Threat actor’s detailed crucial information regarding attack on dark web
  • Tracking initiated
Fidelity Investments and Infosys McCamish Systems LLC
LockBit attack affected over 28,000 customers
  • Companies updated
  • Discovered at beginning updated
  • Hacking group updated
  • Industry updated
  • Location of victim updated
Financial Transactions and Reports Analysis Centre of Canada
Cyber incident that did not involve intelligence or classified systems
  • Tracking initiated
Fulton County
Cybersecurity incident over the weekend
  • Articles updated
General Motors Company
Credential stuffing attack resulted in car owners' personal information being stolen
  • Articles updated
Golden Corral Corporation
183,000 impacted by data breach which compromised Social Security Numbers
  • Articles updated
Grace Lutheran Communities and Grace Lutheran Foundation
Employee and resident data acquired by threat actors
  • Articles updated
Hampton-Newport News Community Services Board
800 GB of sensitive data stolen
  • Articles updated
Hansab
Cyber attack caused significant disruptions to its IT systems
  • Risk effect category updated
Henry Schein, Inc.
Portion of its manufacturing and distribution businesses experienced a cybersecurity incident
  • Articles updated
Houser LLP
Over 325,000 people impacted by data breach
  • Articles updated
  • Occurred at beginning updated
INTEGRIS Health
Unauthorised access to portion of network compromised patient data
  • Articles updated
Jeff Wyler Automotive Family
Data breach affected SSNs and financial account information
  • Articles updated
Jovani Fashion, Ltd
Targeted by LockBit ransomware group
  • Tracking initiated
Kia Corporation
Cybersecurity incident impacted workers as manufacturing halted
  • Articles updated
Koons Automotive Group
Data breach compromised customers' personal information
  • Articles updated
Kutchins, Robbins & Diamond, Ltd
Data breach disclosed after employee’s email account accessed by unauthorised party
  • Tracking initiated
Laurentian University
Cyber incident shuts down website, WiFi and email access
  • Articles updated
LectureNotes
Data breach affects over 2 million users
  • Companies updated
Lehigh Valley Health Network
Cyber attack by Russian ransomware gang
  • Articles updated
Line and Naver
Data breach over 510,000 users' data exposed
  • Companies updated
London Public Library
Systems failure result of cyberattack
  • Articles updated
Lowell Public Schools
Outside attempt to gain access to file server
  • Articles updated
Lurie Children’s Hospital
'Cybersecurity matter' forced them to take communications and MyChart offline
  • Articles updated
McLaren Health Care Corporation
Ransomware attack took down computer network at 14 Michigan hospitals
  • Articles updated
Mercedes-Benz Group AG and Mercedes-Benz USA
Accidentally exposed data from nearly 1,000 customers
  • Articles updated
Mid Devon District Council
Data breaches included documents linked to the failed house builder
  • Tracking initiated
Morrie’s Auto Group
Unauthorized party accessed files containing sensitive employee information
  • Articles updated
Morrison Community Hospital
5TB of patients’ and employee’s information stolen
  • Articles updated
Mr Green & Co AB
27,000 members' details accessed and then leaked
  • Articles updated
Multi-Fineline Electronix, Inc.
Month-long data breach exposed employees and their beneficiaries' private information
  • Tracking initiated
Municipality of Bjuv
Threat actor threatened to leak c.200GB of stolen data
  • Tracking initiated
NTT and The Nippon Telegraph and Telephone Corporation
Decade-long data leak raised serious concerns
  • Effect updated
National Microbiology Laboratory
Reckless disregard of lab security and protection of confidential information
  • Tracking initiated
Nevada Gaming Control Board
Outage affected the public-facing website
  • Articles updated
Nissan Motor Co. , Ltd. and Nissan North America
18,000 customers exposed after breach at third party developer
  • Articles updated
Northeast Orthopedics and Sports Medicine
Cyber attack affected more than 177,000 people
  • Tracking initiated
Okanagan-Skaha 67 School District
District-wide network issue after a cyber-security incident
  • Articles updated
Okta, Inc.
IT service desk staff calls resulted in compromised super administrator accounts
  • Articles updated
Okta, Inc.
Threat actor accessed customer support tickets and files containing sensitive data
  • Articles updated
Onclusive
"Vicious and targeted" attack
  • Discovered at beginning updated
  • Industry updated
  • Location of victim updated
Pacific Cataract and Laser Institute
Data breach exposed some patient information
  • Tracking initiated
Paytm and 2 more...
Massive data breach as hackers gain 'unrestricted access' into database
  • Companies updated
  • Articles updated
  • Financial transaction updated
  • Risk effect category updated
Pepco Group
Phishing attack against its Hungarian business resulted in about 15 million euros loss
  • Articles updated
Personal Touch Holding Corp.
Former employees and patients may have affected their personally identifiable information and protected health information exposed
  • Synopsis updated
Physicians to Women
147,000 current and former patients' personal information exposed
  • Articles updated
Pitesti Pediatric Hospital
More than 100 health care facilities are offline after ransomware attack
  • Articles updated
Planet Home Lending, LLC
Nearly 200,000 affected by data breach
  • Articles updated
  • Hacking group updated
PlayDapp
Cyber attack resulted in criminals minting tokens worth c. $31 million
  • Tracking initiated
Retina Group of Washington, PLLC
Data breach affected 456,000 patients
  • Articles updated
Richland Community College
Network servers, phones, emails and website down after cyber attack
  • Tracking initiated
Riksdag
Russian hacker group claimed cyber attack
  • Tracking initiated
Rio Hondo Community College District
Incident resulted in unauthorized party accessing consumers’ sensitive information
  • Tracking initiated
Scottish Ambulance Service
Cyber security breach after inadvertent release of staff data
  • Discovered at beginning updated
  • Industry updated
  • Location of victim updated
Southeast Vermont Transit
Computer network breached and some files accessed by unauthorised threat actor
  • Discovered at beginning updated
  • Industry updated
  • Location of victim updated
Southland Holdings
Data breach compromised employee information
  • Discovered at beginning updated
  • Industry updated
  • Location of victim updated
Spokane Regional Health District
Sensitive medical data of over 1,200 Washington residents exposed
  • Articles updated
  • Discovered at beginning updated
  • Cause updated
State Farm
Data breach where 40 million customer records were stolen
  • Industry updated
Stratford-on-Avon District Council
79,000 email addresses compromised
  • Articles updated
Te Whatu Ora Health New Zealand
Large amounts vaccination data leaked online
  • Articles updated
Tesla
Teen hacker gained remote control of 25 cars in 13 countries
  • Articles updated
Tesla
Whistleblower leaked a massive trove of data about the electric carmaker
  • Articles updated
Thales Group
Hacker displayed mockery and audacity as he posted company's data on dark web
  • Tracking initiated
The American Express Company
Credit card holders' account information exposed via third party breach
  • Articles updated
The City of Hamilton
Information technology (IT) systems hit by "cybersecurity incident"
  • Articles updated
The Home Office
Privacy risks posed by electronic monitoring of people arriving via unauthorised means
  • Articles updated
The Labour Party
Kremlin election meddling claims after 'sophisticated' hack which experts dismiss as 'fairly standard' digital vandalism
  • Articles updated
  • Story updated
Trans-Northern Pipelines Inc.
ALPHV ransomware group listed them on leak site
  • Articles updated
Vastaamo
Finland shocked by therapy center hacking which leads to clients being blackmailed
  • Articles updated
Verizon Communications Inc. and Verizon Enterprise Solutions
Insider, accidentally or otherwise, had inappropriate access to personal data
  • Stock index updated
Virgin Hotels and Virgin Media Limited
Sensitive personal details compromised such as Social Security numbers
  • Tracking initiated
Volkswagen AG and Volkswagen Group of America, Inc.
Data breach impacting over 3.3 million customers/prospective customers
  • Articles updated
Washington County
Cyberattack shuts down main computer server
  • Articles updated
WayForward Technologies
Unreleased game prototypes leaked
  • Tracking initiated
Welch Foods Inc.
Disruption caused by cyber attack
  • Articles updated
Wellnow Urgent Care
Private information of large number of people stolen after hack of network
  • Tracking initiated
Western National Group
Unauthorised party gained access to the company’s IT network
  • Industry updated
  • Location of victim updated
Whitley Penn
Data breach after unauthorised party accessed employee’s email account
  • Industry updated
  • Location of victim updated
Williamson County
Unauthorized user gained access to court member's email account
  • Articles updated
Willis Lease Finance Corporation
Unauthorised activity detected on portions of its systems
  • Articles updated
Wyze Labs, Inc.
Outage cut off access to smart home devices/security cameras
  • Articles updated
YX International and YX International Information Co., LTD
Inadvertent exposure of database containing millions of sensitive text messages
  • Tracking initiated
medQ, Inc.
Hackers accessed and encrypted a software platform
  • Industry updated
  • Location of victim updated

Cyber Security Case Studies is tracking 4,826 events affecting 4,971 companies resulting in $32,993,736,090 net costs