Data Breach Today

AUGUST 30, 2023

Blame Police Crackdowns on Big Names, Hacker Thrift, Ransomware Grifters in Trouble What's behind the a profusion of reported attacks involving stolen or reused strains of ransomware?

Ransomware 337

Ransomware 337

Data Breach Today

JANUARY 12, 2024

Crypto-Malware Trackers Report a Surge in Known Ransomware Victims at End of 2023 Ransomware-wielding attackers show no signs of stopping, and experts report December 2023 was the second-worst month on record for known victims.

Ransomware 309

Ransomware 309

Data Breach Today

FEBRUARY 12, 2024

Emergency Services Are Suspended as Digital Systems Are Pulled Offline Ransomware operators disrupted emergency healthcare services over the weekend, crippling operations in nearly two dozen hospitals in Romania and France. Ransomware attacks increase the in-hospital mortality rate for already-admitted patients, a recent study concluded.

Ransomware 275

Ransomware 275

Data Breach Today

MARCH 18, 2024

The Python Library Flaw Allows Directory Traversal Attacks Hackers who are possibly members of a criminal group affiliated with numerous ransomware-as-a-service operations are exploiting a directory traversal vulnerability in a Python library that allows unauthenticated remote attackers access to sensitive information from server files.

Libraries 283

Libraries Ransomware Access 283

Data Breach Today

FEBRUARY 7, 2024

Ongoing Innovation and Sophistication Drive Unparalleled Profits Attackers wielding ransomware collectively earned over $1 billion last year - breaking previous records.

Ransomware 326

Ransomware Government 326

Data Breach Today

FEBRUARY 2, 2024

During the last three months of 2023, an average of 29% of organizations hit by ransomware paid a ransom - a notable shift from what ransomware watchers saw in recent years.

Ransomware 284

Ransomware 284

Data Breach Today

DECEMBER 11, 2023

Prolific Ransomware Operation Tied to Big Hits Claims 'Everything Will Work Soon' Cybercrime underground chatter suggests ransomware group BlackCat - aka Alphv - is being disrupted by law enforcement.

Ransomware 319

Ransomware 319

Data Breach Today

SEPTEMBER 21, 2023

US Agency Advisory Sheds Light on the Group's Activities The Snatch ransomware group is targeting a wide range of critical infrastructure sectors, including the defense industrial base, food and agriculture, and information technology sectors, according to a new alert issued by U.S. The group operates on a ransomware-as-a-service model.

Ransomware 298

Ransomware Agriculture 298

Data Breach Today

NOVEMBER 10, 2023

The LockBit Ransomware Operation May Have Exploited Citrix Bleed A ransomware attack affecting the New York financial services subsidiary of the Industrial and Commercial Bank of China resulted in disruptions to the U.S. Close observers of the criminal underground say ransomware-as-a-service group LockBit is responsible.

Ransomware 288

Ransomware Financial Services Marketing 288

Data Breach Today

APRIL 18, 2024

Christopher Budd on the Rise of Junk Gun Ransomware Variants Since June 2023, 19 junk gun ransomware variants have been discovered on the dark web.

Ransomware 157

Ransomware 157

Data Breach Today

JANUARY 30, 2024

Manufacturer Confirms Systems Down, Data on Energy Consumption, Emission Accessed Schneider Electric confirmed a ransomware attack has locked up corporate systems of its Schneider Electric Sustainability Business division and accessed data. The company said it plans to resume operations in two business days after remediation is complete.

Ransomware 296

Ransomware Manufacturing Access IT 296

Data Breach Today

NOVEMBER 28, 2023

5 Suspects Arrested; Group Tied to Ransomware Attacks Against 1,800 Victims Police have arrested a group of criminals in Ukraine, including their alleged ringleader, who they suspect launched ransomware attacks against organizations across 71 countries, amassing at least 1,800 victims, from which they demanded ransoms collectively worth hundreds of (..)

Ransomware 309

Ransomware 309

Data Breach Today

DECEMBER 13, 2023

Oxygen of Publicity' Helps Intimidate Victims and Recruit Affiliates, Experts Warn Seeking to maximize profits no matter the cost, ransomware groups have been bolstering their technical prowess and psychological shakedowns with a fresh strategy: attempting to control the narrative.

Ransomware 311

Ransomware Marketing Security 311

Data Breach Today

JANUARY 22, 2024

million customers when they breached its systems earlier this month as part of a ransomware attack. Customers 'Sensitive Personal Information' Stolen, Large Mortgage Lender Reports Non-bank mortgage lending giant LoanDepot says hackers stole "sensitive personal information" pertaining to 16.6

Ransomware 302

Ransomware IT 302

Data Breach Today

MARCH 7, 2024

Investment fraud and business email compromise losses dominated, and ransomware attacks spared almost no critical infrastructure sector.

Ransomware 285

Ransomware Manufacturing IT 285

Krebs on Security

DECEMBER 19, 2023

Federal Bureau of Investigation (FBI) disclosed today that it infiltrated the world’s second most prolific ransomware gang, a Russia-based criminal group known as ALPHV and BlackCat. BlackCat formed by recruiting operators from several competing or disbanded ransomware organizations — including REvil , BlackMatter and DarkSide.

Ransomware 240

Ransomware Encryption IT Access 240

Data Breach Today

JANUARY 24, 2024

report that they recently fell victim to ransomware attacks. Ransomware trackers say known attacks, affecting all sectors, have been surging. US and UK Water Giants Report Network Breaches and Data Leaks, But No Encryption Two major water providers in the U.S.

Ransomware 280

Ransomware Encryption 280

Data Breach Today

FEBRUARY 20, 2024

Even if Group Reboots, Disruption Already Stands as a Success, Experts Say Blue Monday arrived late this year for the LockBit ransomware-as-a-service group, after an international coalition of law enforcement agencies seized swathes of its infrastructure.

Ransomware 285

Ransomware Security IT 285

Krebs on Security

FEBRUARY 20, 2024

authorities have seized the darknet websites run by LockBit , a prolific and destructive ransomware group that has claimed more than 2,000 victims worldwide and extorted over $120 million in payments. “I don’t think this is an accident—this is how ransomware groups talk to each other,” Stockley said.

Ransomware 259

Ransomware Encryption Insurance Manufacturing 259

Data Breach Today

FEBRUARY 26, 2024

After Operation Cronos, LockBit Leader LockBitSupp's Vows to Continue Hacking Russian-speaking ransomware operation LockBit reestablished a dark web leak site Saturday afternoon, posting a lengthy screed apparently authored by its leader, who vowed not to retreat from the criminal underground world. The FBI had no comment.

Ransomware 270

Ransomware IT 270

Data Breach Today

MARCH 5, 2024

Affiliate Claims Administrators Kept All $22 Million Paid by Change Healthcare The administrators of the BlackCat ransomware-as-a-service group claim law enforcement has shut down their operation.

Ransomware 283

Ransomware 283

Data Breach Today

OCTOBER 26, 2023

Ransomware Groups Listed 514 Victims in Total on Their Data Leak Sites Last Month The volume of known ransomware attacks surged last month to record-breaking levels, with groups collectively listing 514 victims on their data-leak sites, security researchers report.

Ransomware 311

Ransomware Security 311

Data Breach Today

FEBRUARY 14, 2024

Researchers See Waning Mystique, Use of Ghost Groups, Breach Tricks, Trauma of War While overall ransomware profits might remain high, many of the remaining or rebooted top-tier groups are "really struggling" with scarce talent, trauma from the Russia-Ukraine war and repeated disruptions by law enforcement, say researchers from threat intelligence (..)

Ransomware 286

Ransomware 286

Data Breach Today

JANUARY 15, 2024

Report to State Regulators Indicates Big Jump in Number of Patients Affected A Mississippi health system is notifying nearly 253,000 individuals that their data was potentially compromised in a "malicious and sophisticated ransomware" attack last August that also took IT systems offline.

Ransomware 291

Ransomware IT 291

Data Breach Today

FEBRUARY 2, 2024

Today, we examine what happens when ransomware groups get careless, application developers' laissez-faire attitude toward vulnerabilities, and the security woes of a beleaguered crypto exchange.

Ransomware 268

Ransomware Cloud Security 268

Data Breach Today

SEPTEMBER 28, 2023

Also, New Malware Targets New Bitwarden Users This week: Johnson Controls suffers a ransomware attack, the Philippine state health insurance program struggles to recover from a ransomware and Air Canada reports a cyberattack. Also: an APT group uses the American Red Cross as bait and new malware targets would-be users of Bitwarden.

Ransomware 291

Ransomware Insurance 291

Data Breach Today

OCTOBER 13, 2023

Researcher Published Proof-of-Concept Exploit Code 1 Day After Vendor Issued Patch Ransomware-wielding attackers are targeting unpatched versions of FTP software that is widely used by large enterprises, including government and educational organizations.

Ransomware 335

Ransomware Education Government IT 335

Data Breach Today

FEBRUARY 24, 2024

LockBit Leader Vows to Continue Hacking Russian-speaking ransomware operation LockBit reestablished a dark web leak site Saturday afternoon, posting a lengthy screed apparently authored by its leader, who vowed not to retreat from the criminal underground world. The FBI had no comment.

Ransomware 251

Ransomware IT 251

Data Breach Today

FEBRUARY 22, 2024

Numerous Impediments Remain, Should Administrators Attempt to Reboot Operation The notorious ransomware-as-a-service group LockBit, disrupted by law enforcement this week, was developing a new version of its crypto-locking malware prior to being disrupted, security researchers report.

Ransomware 259

Ransomware Security IT 259

Data Breach Today

DECEMBER 15, 2023

Also: Fraud Trends; Cryptocurrency Regulatory Developments In the latest weekly update, editors at ISMG discuss whether police have seized ransomware group Alphv/BlackCat's data leak site, how fraudsters are adapting their tactics and techniques to exploit advancements in technology, and which cryptocurrency stories shaped the industry this year.

Ransomware 287

Ransomware 287

Data Breach Today

NOVEMBER 9, 2023

Patient Care Still Disrupted and IT Network, EHR System Down Until Mid-December A shared IT services provider and its five Ontario member hospitals say their recovery from a Daixin Team ransomware attack in October could last into December as the group rebuilds its IT network.

Ransomware 291

Ransomware IT 291

Data Breach Today

AUGUST 22, 2023

More Ransomware Groups Targeting Linux Systems A ransomware campaign by the recently emerged Monti ransomware group is targeting victims with a new Linux variant of its malware. The threat group is the latest in a growing number of ransomware groups finding profit in going after Linux infrastructure.

Ransomware 242

Ransomware IT 242

Data Breach Today

FEBRUARY 1, 2024

FTC Is Latest Agency to Rebuke Fundraising Firm for Lax Security in 2020 Attack The Federal Trade Commission is the latest regulatory agency taking action against fundraising and customer relationship management software provider Blackbaud in the aftermath of a 2020 ransomware incident that compromised the data of tens of thousands of clients and millions (..)

Ransomware 274

Ransomware Security 274

Data Breach Today

JANUARY 3, 2024

organizations that fell victim to ransomware last year - whether or not they paid a ransom - surged from 220 to 321, and hospital systems, K-12 school districts and post-secondary schools were especially affected, researchers report. Healthcare, School District and University Victim Counts Increase, Research Reports The count of known U.S.

Ransomware 312

Ransomware 312

Data Breach Today

FEBRUARY 19, 2024

As the damage caused by ransomware and profits flowing to attackers reaches record levels, a panel of cybersecurity and policy experts reviewed what it might take to ban ransom payments and whether such a ban might take a bite out of cybercrime or have unwelcome consequences. Would Criminals Care? Might Victims Still Pay?

Ransomware 257

Ransomware Cybersecurity IT 257