Security Affairs

MARCH 17, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 105

Data breaches Security Computer and Electronics Ransomware 105

IT Governance

FEBRUARY 6, 2024

million Gumtree user records allegedly for sale A user database from the classified advertising platform Gumtree has allegedly been offered for sale on a hacking forum. According to Bleeping Computer, the Cactus ransomware gang stole “terabytes of corporate data”, which it’s threatening to leak if a ransom isn’t paid.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

IT Governance

AUGUST 3, 2020

Australian MyGov accounts for sale on dark web (3,600). Canadian insurer Heartland Farm Mutual says an employee’s email account breached (unknown). Brazilian health insurer Hapvida discloses cyber attack (unknown). Ransomware. CNY Works jobseekers Social Security numbers exposed in suspected ransomware attack (56,000).

Data breaches 141

Data breaches Insurance Ransomware Personal data 141

IT Governance

JUNE 1, 2023

A month later, a ransomware attack shut down the company’s operations in Italy and China. The information was offered for a private sale on the now-defunct hacking forum Breached, and it was later leaked in its entirety for free. His research also revealed that the stolen data contains 305 lines of data, including 74.4

Data breaches 122

Data breaches Insurance Personal data Ransomware 122

IT Governance

DECEMBER 1, 2022

The second was a cyber attack on the Russian scooter-sharing service Whoosh, which was discovered after customers’ data was put up for sale on the dark web. Ransomware. Brazilian health insurance firm Fisco Saúde hit by cyber attack (unknown). Spain’s Generali España insurance company says it was hacked (unknown).

Data breaches 115

Data breaches Ransomware Personal data Insurance 115

Krebs on Security

JUNE 1, 2023

2016 sales thread on Exploit. More recently, it appears Megatraffer has been working with ransomware groups to help improve the stealth of their malware. Additionally, newer versions of Microsoft Windows will complain with a bright yellow or red alert message if users try to install a program that is not signed.

Healthcare 242

Healthcare Passwords Sales Ransomware 242

IT Governance

AUGUST 2, 2021

Ransomware. Ransomware. As always, you can find the full list of incidents below, with those affecting UK organisations listed in bold. And don’t forget to subscribe to our Weekly Round-up to receive the latest industry news and advice. Cyber attacks. Data breaches. Financial information. Malicious insiders and miscellaneous incidents.

Data breaches 105

Data breaches Ransomware Insurance Personal data 105

IT Governance

NOVEMBER 6, 2023

When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised. Compromised information included patients’ names, dates of birth, postal addresses, Social Security numbers, diagnosis and treatment information, and health insurance information.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

IT Governance

DECEMBER 11, 2023

suffers second ransomware attack in months Having been struck by a ransomware attack in October by the BlackSuit group , which led to operations and appointments being postponed, Akumin Inc. has suffered a second attack, this time by the BianLian ransomware group. Data breached: more than 59 million data records. Akumin Inc.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

APRIL 29, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight Data scraping site taken offline after billions of Discord users’ messages offered for sale A data scraping website called Spy.pet has been taken offline after harvesting more than 4 billion messages made by almost 630 million Discord users and offering them for sale.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

IT Governance

SEPTEMBER 1, 2022

Ransomware. Ransomware. d/b/a Watson Electrical announces ransomware attack (unknown). d/b/a Watson Electrical announces ransomware attack (unknown). In total, we identified 112 publicly disclosed security incidents in August, resulting in 97,456,345 compromised records. Cyber attacks. Data breaches. In other news….

Data breaches 116

Data breaches Ransomware Energy and Utilities Phishing 116

IT Governance

NOVEMBER 1, 2022

Ransomware. Learn more.

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

Security Affairs

JANUARY 14, 2019

Zurich American Insurance Company is refusing to refund its client because consider the attack as “an act of war” that is not covered by its policy. The overall damages that insurance firms would probably have to cover reach over $80bn. SecurityAffairs – Mondelez, cyber insurance). Pierluigi Paganini.

Insurance 84

Insurance Ransomware Sales Government 84

IT Governance

MARCH 2, 2020

Pacific Specialty Insurance Company notifies plan members of 2019 data breach (unknown). Total Quality Logistics confirms cyber attack but says it wasn’t ransomware (unknown). Ransomware. Belvedere, IL, locked out of government systems after ransomware attack (25,181).

Data breaches 145

Data breaches Ransomware Phishing Personal data 145

IT Governance

JANUARY 4, 2021

Ransomware. Ransomware. We’ll have a separate post looking at the year’s data breaches and cyber attacks in more detail, but in the meantime, you can find the full list of December’s incidents below. As usual, incidents affecting UK organisations are in bold. Cyber attacks. Data breaches. Financial information. In other news….

Data breaches 116

Data breaches Ransomware Energy and Utilities Computer and Electronics 116

Security Affairs

APRIL 30, 2023

ViperSoftX uses more sophisticated encryption and anti-analysis techniques Atomic macOS Stealer is advertised on Telegram for $1,000 per month CISA warns of a critical flaw affecting Illumina medical devices OpenAI reinstates ChatGPT service in Italy after meeting Garante Privacy’s demands Cisco discloses a bug in the Prime Collaboration Deployment (..)

Security 89

Security Ransomware Cybersecurity Authentication 89

IT Governance

MARCH 28, 2019

Ransomware. Wolverine Solutions still notifying patients more than five months after ransomware attack (1.2 More than a million Israeli websites hit with ransomware (unknown). Detroit-based Health Alliance Plan confirms it was affected by ransomware attack on Wolverine Solutions (120,000*).

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

Security Affairs

JULY 15, 2019

On July 6, a ransomware attack brought down government computer systems at La Porte County, Indiana, finally, the county decided to pay $130,000 ransom. Now La Porte County decided to pay $130,000 to recover data on systems infected with the ransomware. ” It seems that $100,000 out of $130,000 are being covered by insurance.

Ransomware 75

Ransomware Insurance Government Sales 75

eSecurity Planet

DECEMBER 9, 2021

What investments can we make to drive down costs or increase sales? For cybersecurity personnel, our scope of responsibility may be limited to cyberattacks on IT systems, such as ransomware attacks, phishing attacks, and DDoS attacks. See the Best Ransomware Removal and Recovery Services. Be in-line with insurance policies.

Insurance 121

Insurance Ransomware Data breaches Cloud 121

Security Affairs

OCTOBER 1, 2019

Demant, a leading international hearing health care company, expects to incur losses of up to $95 million following a ransomware attack. Last month, Demant suffered a cyber attack that caused important problems to its operations, the company has yet to recover after the attack, a circumstance that suggests it was hit by a ransomware attack.

Sales 75

Sales Ransomware Retail Insurance 75

IT Governance

FEBRUARY 26, 2019

Cyber attack and ransomware. Crosby ISD’s IT system hacked by ransomware virus. Dr. DeLuca & Dr. Marciano Eye Associates notify almost 24,000 patients after ransomware attack. Toyota Australia driven offline by cyber attack, as heart hospital hit by ransomware. Payroll Provider Gives Extortionists a Payday.

Data breaches 109

Data breaches Sales Phishing Ransomware 109

IT Governance

NOVEMBER 2, 2020

Ransomware. Ransomware. With that in mind, here is our complete list of October’s cyber attacks and data breaches. As usual, incidents affecting UK organisations are in bold. Cyber attacks. Data breaches. Financial information. Malicious insiders and miscellaneous incidents. In other news…. Cyber attacks.

Data breaches 141

Data breaches Ransomware Personal data Healthcare 141

IT Governance

MARCH 11, 2024

million OpenSea records for sale on hacking forum A cyber criminal known as ‘bossmoves90004’ claims to have exfiltrated 6.9 million data records from the NFT (non-fungible token) marketplace OpenSea, which they have offered for sale on a hacking forum. Data breached: 6,935,412 individuals’ data.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

JUNE 27, 2019

Earlier this month, Norsk Hydro published its first quarterly report since it fell victim to a devastating ransomware attack in March. On 19 March 2019, Norsk Hydro’s systems were infected with the LockerGoga ransomware. This means there’s a chance that the network was compromised before the attackers planted the ransomware.

Ransomware 87

Ransomware Phishing Insurance Systems administration 87

IT Governance

JANUARY 3, 2020

Ransomware. Illinois’ Sycamore School District 427 hit by ransomware (3,763). Data centre CyrusOne suffers ransomware attack (unknown). The Southeastern Minnesota Oral & Maxillofacial Surgery discloses ransomware (80,000). More than a hundred dental offices affected by ransomware at Colorado IT provider (unknown).

Data breaches 116

Data breaches Ransomware Phishing Government 116

IT Governance

DECEMBER 19, 2023

8 TB of data exfiltrated from Advantage Group International Following an outage affecting its leak site (see the ‘Enforcement’ section below), the ALPHV/BlackCat ransomware group is listing only a single incident: a data breach affecting the business management consultant Advantage Group International.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

JANUARY 9, 2020

Ransomware will continue to increase. Cyber insurance has in some regions encouraged victims to pay as it is cheaper than remediation in some cases. The complexity of ransomware is such that there have been decoders released by attackers that have bugs that prevent the decryption of the data. Open banking will be targeted.

Security 98

Security IoT Phishing Ransomware 98

eSecurity Planet

SEPTEMBER 14, 2022

Finance and insurance finished a close second at 22.4%. Finance and insurance companies were particularly vulnerable to the sort of phishing scams we’re talking about. Given how lucrative and necessary both sectors are to daily life, they make prime targets for ransomware. of cyber attacks IBM handled. costing an estimated $18.88

Energy and Utilities 118

Energy and Utilities Phishing Blockchain Cybersecurity 118

Thales Cloud Protection & Licensing

APRIL 18, 2023

Ransomware remains a hot topic, so don’t miss ‘Ransomware - Catch’em before they Wreak Havoc!’, Victor is also presenting with AWS in a session titled ‘Bring Control, Trust and Transparency to AWS’. presented by Steven Gautier , Principal Solutions Architect.

Security 71

Security Digital transformation Privacy Cybersecurity 71

eSecurity Planet

FEBRUARY 14, 2023

It was also a drag on the sales cycle, and then there was the need for maintaining compliance. The cloud computing services company was hit by a ransomware attack in early December that disrupted the mail servers for thousands of customers. In the case of Lemonade – an online insurance company – it spent over 200 hours on the process.

Compliance 100

Compliance Security Cybersecurity Marketing 100

Krebs on Security

APRIL 29, 2021

Some of the world’s top tech firms are backing a new industry task force focused on disrupting cybercriminal ransomware gangs by limiting their ability to get paid, and targeting the individuals and finances of the organized thieves behind these crimes. ” A proposed framework for a public-private operational ransomware campaign.

Ransomware 253

Ransomware Government Insurance Sales 253

IT Governance

JANUARY 30, 2024

Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Compromised data includes victims’ names, addresses, phone numbers and Aadhaar numbers (a 12-digit government identification number).

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

eSecurity Planet

APRIL 29, 2024

Business Objectives Business objectives define the goals of an organization beyond simple financial measures of sales and profit. For example, the Health Insurance Portability and Accountability Act (HIPAA) regulates personal health information and imposes fines for data breach or data inaccessibility.

Risk 67

Risk Compliance Communications Insurance 67

ForAllSecure

MAY 30, 2023

Say you’re an organization that’s been hit with ransomware. At what point do you need to bring in a ransomware negotiator? Mark Lance, the VP of DFIR and Threat intelligence for GuidePoint Security, provides The Hacker Mind with stories of ransomware cases he’s handled. The same is true with ransomware.

Ransomware 40

Ransomware Encryption Authentication Communications 40

KnowBe4

FEBRUARY 14, 2023

By Javvad Malik Insurance provider Hiscox has published its fifth annual cyber readiness report, which has some eye-opening statistics. The reports show that ransomware incidents have increased from 17% to 19%, often spread through phishing emails and malware. businesses.

Phishing 85

Phishing Security awareness Compliance Risk 85

Krebs on Security

DECEMBER 29, 2022

The Kremlin breaks with all tradition and announces that — at the request of the United States — it has arrested 14 people suspected of working for REvil , one of the more ruthless and profitable Russian ransomware groups. Unfortunately, this static data on most Americans has been for sale in the cybercrime underground for years.

Passwords 233

Passwords Ransomware Computer and Electronics Encryption 233

IT Governance

DECEMBER 27, 2019

It was yet another case of point-of-sale vulnerabilities being exposed, as the US fails to expedite its transition to chip and PIN. Many commenters were disappointed by the car manufacturer’s lack of transparency, as it refused to provide further details of the incident, including whether it was a ransomware attack.

Data breaches 69

Data breaches GDPR Passwords Personal data 69