Data Breach Today

OCTOBER 3, 2023

McLaren Health Care Ransomware Incident Among Latest Alleged Alphv/BlackCat Attacks Ransomware-as-a-service gang Alphv/BlackCat claims to have stolen 6 terabytes of data on 2.5 The incident is part of the group's rash of recent attacks.

IT 301

IT Ransomware 301

Security Affairs

APRIL 10, 2024

Group Health Cooperative of South Central Wisconsin disclosed a data breach that impacted over 500,000 individuals. The Group Health Cooperative of South Central Wisconsin (GHC-SCW) is a non-profit organization that provides health insurance and medical care services to its members in the Madison metropolitan area of Wisconsin.

Data breaches 120

Data breaches e-Discovery Ransomware Insurance 120

Data Breach Today

APRIL 23, 2024

Breach 'Could Cover a Substantial Proportion of People in America,' Company Warns Hackers who hit Change Healthcare stole sensitive personal and medical details that "could cover a substantial proportion of people in America," parent company UnitedHealth Group warned.

256

256

Data Breach Today

OCTOBER 11, 2023

Microsoft Says Campaign Exploiting Escalation Flaw Began in September A Chinese nation state hacking group is exploiting a zero day flaw in Atlassian's Confluence Data Center and Server products as part a campaign spotted in mid-September, Microsoft researchers say.

318

318

Krebs on Security

SEPTEMBER 30, 2023

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. According to a September 20, 2023 joint advisory from the FBI and the U.S. According to a September 20, 2023 joint advisory from the FBI and the U.S.

Ransomware 206

Ransomware Data breaches Encryption Systems administration 206

Data Breach Today

DECEMBER 19, 2023

authorities seized dark web infrastructure of the BlackCat ransomware-as-a-service group, also known as Alphv, although the Russian-speaking threat actor said it has reestablished operations. The group's data leak site and its Tox instant messaging account went offline Dec.

Ransomware 279

Ransomware IT 279

Krebs on Security

JUNE 14, 2022

Cybercrime groups that specialize in stealing corporate data and demanding a ransom not to publish it have tried countless approaches to shaming their victims into paying. Today, however, the group began publishing individual victim websites on the public Internet, with the leaked data made available in an easily searchable form.

Ransomware 235

Ransomware Privacy Security IT 235

Data Breach Today

FEBRUARY 20, 2024

Even if Group Reboots, Disruption Already Stands as a Success, Experts Say Blue Monday arrived late this year for the LockBit ransomware-as-a-service group, after an international coalition of law enforcement agencies seized swathes of its infrastructure.

Ransomware 285

Ransomware Security IT 285

Data Breach Today

NOVEMBER 2, 2023

Aerospace Giant Says Elements of Parts and Distribution Business Are Affected Boeing has confirmed suffering a "cyber incident" affecting its parts and distribution business days after the notorious LockBit ransomware group claimed to have breached systems at the world's biggest aerospace company and to have stolen "a tremendous amount of sensitive (..)

Ransomware 297

Ransomware IT 297

Data Breach Today

OCTOBER 10, 2023

Threat Actor Likely Operates From A Region With A Strategic Interest In Taiwan A previously undetected cyberespionage group spied against Taiwanese government agencies and the island-country's manufacturing sector, say cybersecurity researchers.

Manufacturing 344

Manufacturing Cybersecurity Government IT 344

Data Breach Today

FEBRUARY 14, 2024

Researchers See Waning Mystique, Use of Ghost Groups, Breach Tricks, Trauma of War While overall ransomware profits might remain high, many of the remaining or rebooted top-tier groups are "really struggling" with scarce talent, trauma from the Russia-Ukraine war and repeated disruptions by law enforcement, say researchers from threat intelligence (..)

Ransomware 286

Ransomware 286

Data Breach Today

MARCH 5, 2024

Affiliate Claims Administrators Kept All $22 Million Paid by Change Healthcare The administrators of the BlackCat ransomware-as-a-service group claim law enforcement has shut down their operation.

Ransomware 283

Ransomware 283

Data Breach Today

FEBRUARY 26, 2024

Espionage Groups Deploy Info Stealer to Monitor Russia's Diplomatic Moves North Korean espionage group TA406, aka the Konni Group, deployed information-stealing malware on a Russian government-owned software to spy on the country's foreign ministry officials.

Government 269

Government 269

Security Affairs

APRIL 16, 2024

The Dark Angels (Dunghill) ransomware group claims the hack of the chipmaker Nexperia and the theft of 1 TB of data from the company. The Dark Angels (Dunghill) ransomware group claims responsibility for hacking chipmaker Nexperia and stealing 1 TB of the company’s data. Gb AWACS software - 13 Gb.esm files - 1.9

Ransomware 118

Ransomware Manufacturing Insurance Cybersecurity 118

Data Breach Today

DECEMBER 13, 2023

Oxygen of Publicity' Helps Intimidate Victims and Recruit Affiliates, Experts Warn Seeking to maximize profits no matter the cost, ransomware groups have been bolstering their technical prowess and psychological shakedowns with a fresh strategy: attempting to control the narrative.

Ransomware 311

Ransomware Marketing Security 311

Data Breach Today

FEBRUARY 22, 2024

Numerous Impediments Remain If Administrators Attempt to Reboot the Operation The notorious ransomware-as-a-service group LockBit, disrupted by law enforcement this week, was developing a new version of its crypto-locking malware prior to being shut down, security researchers reported.

Ransomware 261

Ransomware Security IT 261

Data Breach Today

FEBRUARY 22, 2024

Numerous Impediments Remain, Should Administrators Attempt to Reboot Operation The notorious ransomware-as-a-service group LockBit, disrupted by law enforcement this week, was developing a new version of its crypto-locking malware prior to being disrupted, security researchers report.

Ransomware 259

Ransomware Security IT 259

Data Breach Today

AUGUST 22, 2023

Seiko Hints at Data Breach But Declines to Address BlackCat’s Claims The BlackCat group on Monday claimed responsibility for a ransomware attack on Japanese watchmaker Seiko, publishing samples of stolen data files as proof of its exploit. Seiko Group Corp.

Ransomware 236

Ransomware Data breaches Access IT 236

Data Breach Today

AUGUST 23, 2023

Rockstar, Uber, Okta, Microsoft and Other Big-Name Players Fell to Group's Attacks A British jury found that two teenagers had been members of the Lapsus$ hacking group that attacked Uber, Okta, Rockstar and other organizations.

IT 245

IT 245

Data Breach Today

OCTOBER 19, 2023

International Law Enforcement Operation Seizes Infrastructure, Disrupts Operation The data leak and negotiation sites for the Ragnar Locker ransomware group went offline Thursday after an international law enforcement operation, backed by the FBI and police in Europe, seized its infrastructure.

Ransomware 283

Ransomware IT 283

Data Breach Today

NOVEMBER 28, 2023

5 Suspects Arrested; Group Tied to Ransomware Attacks Against 1,800 Victims Police have arrested a group of criminals in Ukraine, including their alleged ringleader, who they suspect launched ransomware attacks against organizations across 71 countries, amassing at least 1,800 victims, from which they demanded ransoms collectively worth hundreds of (..)

Ransomware 309

Ransomware 309

Data Breach Today

MARCH 14, 2023

Extortionists With Penchant for Splashy PR Moves Call on Elon Musk to Pay Ransom The LockBit ransomware operation claims to have stolen data from a Texas-based supplier to Elon Musk's SpaceX, which designs, manufactures and launches rockets and spacecraft. It's the latest PR-grabbing attempt by the prolific LockBit extortion group.

Ransomware 176

Ransomware Manufacturing IT 176

Krebs on Security

JANUARY 30, 2024

Sources close to the investigation tell KrebsOnSecurity the accused was a key member of a criminal hacking group blamed for a string of cyber intrusions at major U.S. Multiple security firms soon assigned the hacking group the nickname “ Scattered Spider.” 9, 2024, U.S. technology companies during the summer of 2022.

Passwords 305

Passwords Phishing Access Encryption 305

Krebs on Security

SEPTEMBER 27, 2023

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The Snatch ransomware gang’s victim shaming site on the darknet is leaking data about its visitors.

Ransomware 238

Ransomware Phishing Access Authentication 238

Data Breach Today

MARCH 28, 2024

US Government Offers $10M Bounty to Track Down Leadership of BlackCat Crime Group UnitedHealth Group has admitted data was "taken" in the cyberattack on Change Healthcare and has just started analyzing the types of personal, financial and health information potentially compromised.

Government 293

Government 293

Data Breach Today

FEBRUARY 29, 2024

Microsoft Fixed Bug in February That Gave Kernel-Level Access to North Korean APT North Korea's Lazarus hackers exploited a Windows AppLocker driver zero-day to gain kernel-level access and turn off security tools that could detect the group's bring-your-own-vulnerable-driver exploitation techniques.

Access 259

Access Security IT 259

Data Breach Today

FEBRUARY 26, 2024

Some Researchers Confident ConnectWise ScreenConnect Flaw Was Exploited in Attack Healthcare industry groups are urging their members to take certain precautionary actions in the wake of the attack last week on Change Healthcare, a unit of Optum.

282

282

Data Breach Today

JANUARY 18, 2024

Coldriver' Has Been Sending Backdoors Embedded in PDFs Since November 2022 A Russian domestic intelligence agency hacking group known for long-lasting logon credential phishing campaigns against Western targets is now deploying malware embedded into PDFs, say security researchers from Google.

Phishing 291

Phishing Security 291

Data Breach Today

MARCH 28, 2024

US Government Offers $10M Bounty to Track Down Leadership of BlackCat Crime Group UnitedHealth Group has admitted data was "taken" in the cyberattack on Change Healthcare and has just started analyzing the types of personal, financial and health information potentially compromised.

Government 283

Government 283

Data Breach Today

NOVEMBER 8, 2023

Attackers Exploited Unpatched Flaw, Affecting Nearly 93,000 New Yorkers New York state regulators have smacked one of the nation's largest physician-owned radiology groups with a $450,000 settlement in the aftermath of a 2021 data exfiltration incident that compromised sensitive information of nearly 200,000 patients, including about 93,000 New Yorkers. (..)

279

279

Data Breach Today

DECEMBER 11, 2023

Prolific Ransomware Operation Tied to Big Hits Claims 'Everything Will Work Soon' Cybercrime underground chatter suggests ransomware group BlackCat - aka Alphv - is being disrupted by law enforcement.

Ransomware 319

Ransomware 319

Data Breach Today

OCTOBER 30, 2023

Patch or Perish: Researchers See Mass Exploits of NetScaler ADC and Gateway Devices Ransomware-wielding groups are among the attackers exploiting vulnerabilities in NetScaler devices to bypass authentication and gain initial access to victims' networks.

Ransomware 293

Ransomware Authentication Access 293

Data Breach Today

OCTOBER 29, 2023

In a new campaign spotted by Kaspersky researchers, the Lazarus group is targeting a version of an unnamed software product with vulnerabilities reported and patches available.

313

313

Data Breach Today

MARCH 16, 2023

Microsoft Patches Another SmartScreen Signature-Based Vulnerability A financial motivated hacking group has been exploiting a now-patched zero-day vulnerability in the Windows operating system to deliver ransomware. Google Threat Analysis Group attributed the campaign to Magniber ransomware group.

Ransomware 347

Ransomware IT 347

Data Breach Today

APRIL 26, 2024

Calls for More Aid to Providers Come as Parent Company UHG Grapples With Breach Twenty-two state attorneys general and some industry groups are urging Change Healthcare's parent company and regulators to be transparent and give more financial aid to providers as the firm recovers from a highly disruptive cyberattack and the industry braces for massive (..)

144

144