#data-theft

#data-theft

LilacSquid, a cyberespionage group, uses various tactics to compromise systems with custom malware, targeting organizations worldwide for data theft. [ more ]

Sensitive data of over 560 million Ticketmaster customers stolen and listed for sale by threat actors.

The breach appears to have compromised a vast amount of personal and payment information, going back to 2011.

FBI seized BreachForums for the second time, impacting ShinyHunters. [ more ]

Shoulder surfing, an old yet effective cyber threat, was demonstrated through a real event involving a UK cabinet minister's leaked memo. [ more ]

Ransomware threat remains high with companies paying ransoms for data recovery. [ more ]

Cybercrimes by foreign actors increased by 28% in 2023, with most attacks targeted at German companies for data theft, espionage, or sabotage. [ more ]

A ransomware gang called Qilin claimed responsibility for breaching the Big Issue Group's IT systems and stealing 550GB of confidential data.

The stolen data includes personnel info, contracts, financial statements, and personal addresses like passport scans and payroll information. [ more ]

Ransomware attack on British Library

Importance of transparency in cybersecurity incidents [ more ]

Europol is investigating a cybercriminal's claims of stealing data; Europol Platform for Experts affected but no core systems compromised. [ more ]

The FCC was targeted in a phishing operation using a fake login page.

The phishing kit named CryptoChameleon targeted cryptocurrency exchange platforms and successfully collected sensitive information. [ more ]

Financially motivated threat actor UNC5537 accessed data from 165 organizations' Snowflake instances using stolen credentials and sold data to cybercriminals for various malicious purposes. [ more ]

Claxton-Hepburn Medical Center and Carthage Area Hospital have filed legal paperwork to get their stolen data back

The stolen data was found to be stored on a server owned by Wasabi Technologies in Boston, Massachusetts [ more ]

An ex-employee of the Minnesota Timberwolves was arrested for stealing sensitive internal information.

The stolen data included strategic NBA information and the executive's personal details. [ more ]

An employee of the Minnesota Timberwolves was fired, arrested, and charged with felony third-degree burglary for stealing strategic NBA information.

The Timberwolves executive, Sachin Gupta, had his personal and team-related information stolen from a hard drive left in his office. [ more ]

Patient records from Vastaamo used in extortion led to suicides.

Trial of Aleksanteri Kivimäki nearing conclusion in data theft case. [ more ]

LockBit3.0 claims to have stolen over 10 million files and 7 terabytes of medical confidentiality data from CapitalHealth.org in New Jersey.

There is no proof to support LockBit3.0's claims and Capital Health has not mentioned any extortion attempt or known group claiming responsibility. [ more ]

Malware campaign started in PyPI spread to GitHub infecting 100,000 repositories.

Attackers upload altered files to GitHub, cloning legitimate repos to spread malware loaders. [ more ]

Commercial surveillance vendors sell surveillance services to governments for monitoring or spying purposes.

CSVs openly operate with websites, marketing content, and sales teams, and may change names to avoid scrutiny. [ more ]

Long Beach officials confirmed a cybersecurity breach and data theft.

The city does not currently know what data was taken or the extent of the breach. [ more ]

The British Library has confirmed that a ransomware attack led to the theft of internal data.

The attack caused a major technology outage across the library's sites and disrupted online and on-site services.

The ransomware gang responsible for the attack has demanded over $740,000 worth of bitcoin. [ more ]

Google's Threat Analysis Group discovered and helped patch an email server flaw used to steal data from government organizations in several countries.

The exploit targeted the email server Zimbra Collaboration and stole email data, user credentials, and authentication tokens.

Updating software with the latest fixes is crucial to protect against these types of exploits. [ more ]