IT Governance

DECEMBER 11, 2023

Known records breached Up to 3,806 organisations with DICOM (Digital Imaging and Communications in Medicine) servers Source (New) Healthcare Unknown Unknown >59 million Akumin Source (New) Healthcare USA Yes 5 TB AMCO Proteins Source (New) Manufacturing USA Yes 4 TB Norton Healthcare Source (New) Healthcare USA Yes 2.5

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

JANUARY 3, 2024

Known records breached Real Estate Wealth Network Source 1 ; source 2 (New) Real estate USA Unknown 1,523,776,691 TuneFab Source (New) Software Hong Kong Unknown >151,000,000 Dori Media Group Source (New) Media Israel Yes >100 TB Rosvodokanal Source (New) Utilities Russia Yes 50 TB breached; 1.5

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107

Security Affairs

FEBRUARY 28, 2024

. “As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” APT28 had utilized compromised Ubiquiti EdgeRouters as a command-and-control infrastructure for MASEPIE backdoors. ” reads the joint report.

Energy and Utilities 94

Energy and Utilities Military Government Phishing 94

IT Governance

DECEMBER 19, 2023

GB City of Defiance Source (New) Public USA Yes >390 GB Dafiti Argentina Source (New) Retail Argentina Yes 321.63 Source (New) Energy India Yes 280,000 National Student Clearinghouse Source 1 ; source 2 (Update) Non-profit USA Yes 271,496 PCTEL Source (New) Telecoms USA Yes 267.45 Source (New) Finance USA Yes 1.1

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

FEBRUARY 21, 2024

Source New Retail USA Yes 12 Family and Children’s Services of Lanark, Leeds and Grenville Source New Public Canada Yes 4 100 Romanian hospitals using the Hipocrate Information System Source 1 ; source 2 New Healthcare USA Yes Unknown Prudential Financial Source New Finance USA Yes Unknown Securence (a subsidiary of U.S.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

NOVEMBER 28, 2023

They notified SAP SE, which responded “in the most professional and efficient manner”, remediating the issue, launching an investigation and maintaining communications with Aqua Nautilus. The researchers discovered credentials that provided access to 95,592,696 artifacts, as well as download permissions and some deploy operations.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

FEBRUARY 14, 2024

GB Western Municipal Construction Source New Construction and real estate USA Yes 101 GB Tennessee Farmers Insurance Source New Insurance USA Yes 71,000 CNO ACE Source 1 ; source 2 New Healthcare USA Yes 65,195 Verizon Communications Inc. TB KSA Architecture Source New Construction and real estate USA Yes 1.5 GB Signature Performance, Inc.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52