The Last Watchdog

JULY 13, 2023

London, July 13, 2023 — Beazley, the leading specialist insurer, today published its latest Risk & Resilience report: Spotlight on: Cyber & Technology Risks 2023. For the insurance industry, working with clients to help them tackle these challenges is vital to ensuring businesses operate in as safe an environment as possible.

Risk 161

Risk Insurance Energy and Utilities Marketing 161

IT Governance

DECEMBER 19, 2023

8 TB of data exfiltrated from Advantage Group International Following an outage affecting its leak site (see the ‘Enforcement’ section below), the ALPHV/BlackCat ransomware group is listing only a single incident: a data breach affecting the business management consultant Advantage Group International. GB Goa Natural Gas Pvt.Ltd.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

APRIL 9, 2024

Other databases contained health insurance data, such as patents’ names, dates of birth, addresses and medical data. TB Allium UPI, UAB, Apotheka, Apotheka Beauty and PetCity Source (New) Manufacturing Estonia Yes 1,190,000 Aero Dynamic Machining, Inc. Source (New) Manufacturing USA Yes 1.1 million patients and 1.6

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

IT Governance

FEBRUARY 6, 2024

Schneider Electric hit by Cactus ransomware The Sustainability Business division of the energy company Schneider Electric suffered a ransomware attack on 17 January, disrupting the company’s Resource Advisor platform. Data breached: 13,300,000 records.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

IT Governance

FEBRUARY 21, 2024

ALPHV/BlackCat ransomware gang adds 2.7 TB of ASA Electronics data to its leak site The ALPHV/BlackCat ransomware gang is attempting to extort a ransom from ASA Electronics for 2.7 It is not known how long the database was publicly available, nor whether anyone else accessed it. Date breached: 384,658,212 records. Data breached: 2.7

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

JANUARY 23, 2024

Known records breached Naz.API (likely belonging to multiple organisations) Source (New) Unknown Unknown Yes 70,840,771 VF Corporation Source 1 ; source 2 (Update) Retail USA Yes 35,500,000 Pastelería Mozart Source (New) Hospitality Chile Yes 10,870,524 Foxsemicon Integrated Technology, Inc. Source (New) Manufacturing Saudi Arabia Yes 86.16

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

MARCH 11, 2024

Source (New) Retail Italy Yes 436,932 Toner-dumping.de Source (New) Retail Germany Yes 334,000 Yakima Valley Radiology, PC Source 1 ; source 2 (New) Healthcare USA Yes 235,249 Consorzio Innovation Source (New) Professional services Italy Yes 225 GB Northeast Orthopaedics & Sports Medicine Source (New) Healthcare USA Yes 177,276 Strike.me

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. TB JP Original Corp Source New Manufacturing USA Yes 1.2 TB JP Original Corp Source New Manufacturing USA Yes 1.2

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

FEBRUARY 27, 2024

The breached data may include names, Social Security numbers and health insurance information. For some victims, the stolen data also included Social Security numbers and health insurance information. TB Roncelli Plastics Source (New) Manufacturing USA Yes 1.6 GB Tiete Automobile Source (New) Retail Brazil Yes 68.5

Data Privacy 52

Data Privacy Manufacturing Privacy Data breaches 52

IT Governance

JUNE 1, 2021

For the second month in a row, ransomware has dominated our list of data breaches and cyber attacks. Of the 128 publicly disclosed incidents that we discovered in May, more than 40% of them were ransomware attacks. Ransomware. Ransomware. Cyber attacks. Data breaches. Financial information. In other news…. Cyber attacks.

Data breaches 124

Data breaches Ransomware Insurance Energy and Utilities 124

IT Governance

APRIL 1, 2021

We typically expect ambiguity when it comes to ransomware, because organisations are locked out of their files and can’t calculate what’s been affected. Ransomware. The issue is that in far more cases than we’d expect, the number of breached records wasn’t included in the notification, so we can’t include it here. Cyber attacks.

Data breaches 130

Data breaches Ransomware Manufacturing e-Delivery 130

IT Governance

JANUARY 9, 2024

LockBit claims responsibility for Capital Health security incident The LockBit ransomware group has claimed responsibility for an attack on Capital Health , a healthcare provider in Pennington, New Jersey, last November. KG Source 1 ; source 2 (New) Manufacturing Germany Yes 1.1 Data breached: 41,500,000 records.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

IT Governance

JULY 1, 2021

Ransomware. Ransomware. discloses ransomware incident (unknown). discloses ransomware incident (unknown). discloses ransomware incident (unknown). Cyber attacks. Data breaches. Financial information. Malicious insiders and miscellaneous incidents. In other news…. Cyber attacks. Find out more.

Data breaches 130

Data breaches Ransomware Computer and Electronics Retail 130

IT Governance

JANUARY 4, 2021

Ransomware. Ransomware. We’ll have a separate post looking at the year’s data breaches and cyber attacks in more detail, but in the meantime, you can find the full list of December’s incidents below. As usual, incidents affecting UK organisations are in bold. Cyber attacks. Data breaches. Financial information. In other news….

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

Security Affairs

NOVEMBER 8, 2020

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. Luxottica was hit by a ransomware attack that took place on September 18.

Data breaches 79

Data breaches Insurance Retail Ransomware 79

Security Affairs

APRIL 26, 2021

Prometei has been observed to be active in systems across a variety of industries, including: Finance, Insurance, Retail, Manufacturing, Utilities, Travel, and Construction.” . “The victimology is quite random and opportunistic rather than highly targeted, which makes it even more dangerous and widespread.

Mining 71

Mining Retail Insurance Manufacturing 71

IT Governance

DECEMBER 5, 2023

27 Israeli organisations with e-commerce websites, likely in either the retail or manufacturing sector, but we can’t be sure at this time. Furthermore, thanks to laws like HIPAA (the Health Insurance Portability and Accountability Act), data breaches in the healthcare sector are more likely to be reported.

Data breaches 113

Data breaches Ransomware Access Security 113

ForAllSecure

MAY 17, 2023

Small to Medium Business are, today, the target of APTs and ransomware. Chris Gray of Deep Watch talks about the view from the inside of a virtual SOC, the ability to see threats against a large number of SMB organizations, and the changes to cyber insurance we’re seeing as a result. VAMOSI: Cybersecurity insurance.

Insurance 40

Insurance Privacy Ransomware GDPR 40

The Last Watchdog

SEPTEMBER 20, 2019

However, at this moment in history, two particularly worrisome types of cyber attacks are cycling up and hitting local government entities hard: ransomware sieges and election tampering. population 12,046, paid $460,000, respectively, for ransomware decryption keys. Ransomware attacks are trendy again,” Weller told me. “If

Ransomware 118

Ransomware Government Retail Security 118

The Last Watchdog

APRIL 14, 2020

Hudson: We have about 400 customers worldwide: big banks, big airlines, airplane manufacturers, big payment card companies, big health care insurers, big retailers. With ransomware, or denial of service or almost any type of attack, there’s no need for a human to log on to the system.

Digital transformation 115

Digital transformation Passwords Retail IoT 115