Data Breach Today

MAY 24, 2024

Many ransomware hackers agree with that statement - and they're learning to make such attacks even harder to recover from. Malicious Script Targets Users in Mexico, Indonesia, Jordan Why bother building a crypto-locker when Microsoft has perfectly acceptable encryption software preloaded on desktops?

Ransomware 300

Ransomware Encryption 300

Data Breach Today

MARCH 16, 2023

Microsoft Patches Another SmartScreen Signature-Based Vulnerability A financial motivated hacking group has been exploiting a now-patched zero-day vulnerability in the Windows operating system to deliver ransomware. Google Threat Analysis Group attributed the campaign to Magniber ransomware group.

Ransomware 321

Ransomware IT 321

Data Breach Today

FEBRUARY 15, 2023

UK Toughens Anti-Cybercrime Stance by Sanctioning Accused Operators for First Time As ransomware continues to disrupt British organizations, the U.K. Ransomware victims must conduct due diligence before paying any ransom, as violating sanctions carries severe penalties.

Ransomware 313

Ransomware Government 313

Data Breach Today

MARCH 12, 2024

US Healthcare Entities Are Firmly in Akira Ransomware Group's Sights, Expert Warns Ransomware groups may come and go, but often it's only in name, as the individuals involved will move on to power whatever group remains a going concern.

Ransomware 292

Ransomware IT 292

Data Breach Today

DECEMBER 13, 2023

Oxygen of Publicity' Helps Intimidate Victims and Recruit Affiliates, Experts Warn Seeking to maximize profits no matter the cost, ransomware groups have been bolstering their technical prowess and psychological shakedowns with a fresh strategy: attempting to control the narrative.

Ransomware 296

Ransomware Marketing Security 296

Data Breach Today

DECEMBER 12, 2023

parliamentary committee investigating ransomware threats recommended a more aggressive stance against threat actors and said the government should consider making incident reporting mandatory and provide government support for public sector victims "to the point of full recovery." Parliamentary Committee Says UK Must Be More Aggressive A U.K.

Ransomware 315

Ransomware IT Government 315

Data Breach Today

OCTOBER 13, 2023

Researcher Published Proof-of-Concept Exploit Code 1 Day After Vendor Issued Patch Ransomware-wielding attackers are targeting unpatched versions of FTP software that is widely used by large enterprises, including government and educational organizations.

Ransomware 331

Ransomware Education Government IT 331

Data Breach Today

NOVEMBER 26, 2024

Blue Yonder Outage Causing Disruptions for Starbucks, Major Grocery Store Chains Major grocery store chains, Starbucks and other large organizations are experiencing disruptions following a ransomware attack against supply chain management service provider Blue Yonder.

Ransomware 271

Ransomware IT 271

Data Breach Today

MAY 9, 2024

How Attacks Have Changed; New Insights Into How an Attack Affects the Business The fifth annual Sophos State of Ransomware Report combines year-on-year insights with brand-new areas of study. It includes a deep dive into ransom demands and ransom payments and shines new light on the role of law enforcement in ransomware remediation.

Ransomware 263

Ransomware IT 263

Data Breach Today

JANUARY 12, 2024

Crypto-Malware Trackers Report a Surge in Known Ransomware Victims at End of 2023 Ransomware-wielding attackers show no signs of stopping, and experts report December 2023 was the second-worst month on record for known victims.

Ransomware 285

Ransomware 285

Data Breach Today

AUGUST 27, 2024

Young Consulting Says Health Data Exposed; Ransomware Group Leaked Stolen Data Young Consulting, which develops software for the stop-loss insurance market, is notifying 1 million individuals that their personal information was stolen earlier this year in a hack attack.

Insurance 291

Insurance Ransomware Marketing 291

Data Breach Today

JULY 2, 2024

Million Individuals A February ransomware attack against Prudential Financial affected 2.5 Insurance Giant Says Hackers Stole Data of 2.5 million customers, the financial giant disclosed after initially calculating the totally as 36,000. In an emailed statement, Prudential said the tally shouldn't increase a second time.

Ransomware 303

Ransomware Insurance 303

Data Breach Today

JULY 2, 2024

Startups and Evolve Client Are Monitoring the Situation for Potential Fallout A ransomware attack against Evolve Bank & Trust triggered a small cascade of secondary breach notifications by current and past clients of the banking-as-a-service company.

Ransomware 278

Ransomware 278

Data Breach Today

DECEMBER 2, 2024

Suspected LockBit, Babuk Operator Mikhail Matveev Arrested in Russia A prolific ransomware affiliate hacker and developer is facing criminal charges in Russia, Kremlin media reported Friday. authorities since 2023 for his role in hacking activities as part of ransomware groups including LockBit, Hive and Babuk.

Ransomware 234

Ransomware 234

Data Breach Today

FEBRUARY 7, 2024

Ongoing Innovation and Sophistication Drive Unparalleled Profits Attackers wielding ransomware collectively earned over $1 billion last year - breaking previous records.

Ransomware 294

Ransomware Government 294

Data Breach Today

OCTOBER 31, 2022

Criminals Shooting Themselves in the Foot With Faulty Decryptors, Re-Extortion Many ransomware-wielding attackers - including big-name groups - have been collectively shooting themselves in the foot by resorting to "amateur" tactics, including decryptors that fail to decrypt as well as gangs re-extorting the same victims.

Ransomware 328

Ransomware 328

Data Breach Today

JULY 30, 2024

Bug Allows Attackers to Add New Users to a Group With Full Admin Privileges Ransomware hackers discovered a way to gain full administrative privileges on VMware ESXi hypervisors connected to Microsoft's Active Directory, a finding that resulted in extortion demands from cybercriminals, including Storm-0506, Storm-1175, Octo Tempest and Manatee Tempest. (..)

Ransomware 281

Ransomware 281

Data Breach Today

SEPTEMBER 21, 2023

US Agency Advisory Sheds Light on the Group's Activities The Snatch ransomware group is targeting a wide range of critical infrastructure sectors, including the defense industrial base, food and agriculture, and information technology sectors, according to a new alert issued by U.S. The group operates on a ransomware-as-a-service model.

Ransomware 279

Ransomware Agriculture 279

Data Breach Today

SEPTEMBER 17, 2024

Former Royal Mail and Manchester University CISOs Talk Ransomware Response Timely notification of ransomware incidents to British law enforcement agencies played a crucial role in understanding the threats and in developing mitigation strategies, the former security heads of Royal Mail and the University of Manchester said.

Ransomware 272

Ransomware Government Security 272

Data Breach Today

DECEMBER 11, 2023

Prolific Ransomware Operation Tied to Big Hits Claims 'Everything Will Work Soon' Cybercrime underground chatter suggests ransomware group BlackCat - aka Alphv - is being disrupted by law enforcement.

Ransomware 271

Ransomware 271

Data Breach Today

SEPTEMBER 7, 2023

Repeat Shakedown Tactic: Victims Told to Pay Up or Else They'll Pay Massive Fines Ransomware groups do whatever they can to pressure a victim into paying.

Ransomware 324

Ransomware GDPR 324

Data Breach Today

JUNE 19, 2024

Russian-Speaking Gang Follows Typical Playbook; Critical Services Still Disrupted The ransomware attack that disrupted U.K.

Ransomware 58

Ransomware 58

Data Breach Today

OCTOBER 26, 2023

Ransomware Groups Listed 514 Victims in Total on Their Data Leak Sites Last Month The volume of known ransomware attacks surged last month to record-breaking levels, with groups collectively listing 514 victims on their data-leak sites, security researchers report.

Ransomware 292

Ransomware Security 292

Data Breach Today

NOVEMBER 20, 2024

Incident Is Among Growing List of Attacks on Small, Rural Hospitals An Oklahoma hospital quickly restored its IT systems after a ransomware attack in September, but the 62-bed hospital could not recover some data and later learned that hackers may have accessed the personal information of 133,000 people.

Ransomware 250

Ransomware Access IT 250

Data Breach Today

MARCH 18, 2024

Review of Attacks Finds Inconsistent Data Leaks and Victim Naming, Broken Promises Ransomware groups hope threats are enough to sway victims so they don't have to follow through.

Ransomware 268

Ransomware 268

Data Breach Today

OCTOBER 25, 2024

Operation Cronos Prioritized Disrupting Criminal Trust in the Group, Official Says What does it take to disrupt a major ransomware operation? The effort against LockBit initially prioritized disrupting criminals' trust in the ransomware group, and has since shifted to unmasking affiliates, a Europol's official told attendees at the Hardwear.io

Ransomware 255

Ransomware Security IT 255

Data Breach Today

JANUARY 22, 2024

million customers when they breached its systems earlier this month as part of a ransomware attack. Customers 'Sensitive Personal Information' Stolen, Large Mortgage Lender Reports Non-bank mortgage lending giant LoanDepot says hackers stole "sensitive personal information" pertaining to 16.6

Ransomware 274

Ransomware IT 274

Data Breach Today

AUGUST 20, 2024

Robert Boyce on Accenture's Strategy for Assessing the Behavior of Ransomware Gangs Accenture Global Cyber Resilience Lead Robert Boyce outlines why organizations must assess the stability of ransomware groups before deciding how to respond to extortion threats.

Ransomware 247

Ransomware 247

Data Breach Today

JANUARY 5, 2024

Also: Cyber Resilience in Israel; Human Risk Management in the Era of Remote Work In the latest weekly update, four ISMG editors discussed the number of ransomware victims who are paying a ransom to cybercriminals, the need for greater cyber resilience during wartime, and the critical role of human risk management in organizational cybersecurity in (..)

Ransomware 281

Ransomware Risk Cybersecurity 281

Data Breach Today

NOVEMBER 28, 2023

5 Suspects Arrested; Group Tied to Ransomware Attacks Against 1,800 Victims Police have arrested a group of criminals in Ukraine, including their alleged ringleader, who they suspect launched ransomware attacks against organizations across 71 countries, amassing at least 1,800 victims, from which they demanded ransoms collectively worth hundreds of (..)

Ransomware 284

Ransomware 284

Data Breach Today

MARCH 15, 2024

Don't Let the Quest for Data Lead You to Amplify What Criminals Might Be Claiming For the love of humanity, please stop playing into ransomware groups' hands by treating their data leak blogs as reliable sources of information and then using them to build lists of who's amassed the most victims.

Ransomware 285

Ransomware 285

Data Breach Today

JANUARY 3, 2024

organizations that fell victim to ransomware last year - whether or not they paid a ransom - surged from 220 to 321, and hospital systems, K-12 school districts and post-secondary schools were especially affected, researchers report. Healthcare, School District and University Victim Counts Increase, Research Reports The count of known U.S.

Ransomware 283

Ransomware 283

Data Breach Today

FEBRUARY 1, 2024

FTC Is Latest Agency to Rebuke Fundraising Firm for Lax Security in 2020 Attack The Federal Trade Commission is the latest regulatory agency taking action against fundraising and customer relationship management software provider Blackbaud in the aftermath of a 2020 ransomware incident that compromised the data of tens of thousands of clients and millions (..)

Ransomware 277

Ransomware Security 277

Data Breach Today

JANUARY 11, 2024

Financially Motivated Actors Targeting US, EU and LATAM Countries Financially motivated Turkish hackers are targeting Microsoft SQL servers in the United States, Europe and Latin America in hacking that ultimately ends with deployment of Mimic ransomware or the sale of access to infected hosts on criminal online markets.

Ransomware 281

Ransomware Sales Marketing Access 281

Data Breach Today

MARCH 18, 2024

The Python Library Flaw Allows Directory Traversal Attacks Hackers who are possibly members of a criminal group affiliated with numerous ransomware-as-a-service operations are exploiting a directory traversal vulnerability in a Python library that allows unauthenticated remote attackers access to sensitive information from server files.

Libraries 271

Libraries Ransomware Access 271