SolarWinds / CISA
Cybersecurity agency itself compromised in SolarWinds attack
Latest Disclosures
Blue Shield of California (2020)
67K member records exposed
European Medicines Agency
State-sponsored actors stole COVID vaccine documents — Pfizer/BioNTech data
FireEye / Mandiant
Red team tools stolen by Russian SVR in SolarWinds-related breach
City of Pensacola FL
Maze ransomware encrypted city systems
Dassault Falcon Jet (France)
Ragnar Locker ransomware targeted French business jet manufacturer
Peatix
4,227,907 records exposed — Email addresses, Names, Passwords
Leonardo SpA (Italy)
Former IT manager stole 10GB of military and defense data over 2 years
Pluto TV
3,225,080 records exposed — Dates of birth, Device information, Email addresses, Genders and 5 more
Netgain Technology
1.04M patient records exposed in cloud hosting ransomware affecting healthcare clients
Shirbit Insurance (Israel)
Black Shadow leaked customer passports, credit cards, medical data from insurer
Whirlpool
Nefilim ransomware attacked appliance manufacturer
Kmart / Transformco
Egregor ransomware encrypted store systems
Foxconn
DoppelPaymer ransomware encrypted servers at Mexican facility
Baltimore County Public Schools
115K student records exposed in ransomware
E-Land Group (Korea)
Clop ransomware forced closure of 50 retail stores across South Korea
Hendrick Health
640K patient records exposed in unauthorized access
123RF
8,661,578 records exposed — Email addresses, IP addresses, Names, Passwords and 3 more
Home Chef
8,815,692 records exposed — Email addresses, Geographic locations, IP addresses, Names and 3 more
City of Saint John (NB)
Ransomware attack disrupted municipal operations — IT systems offline for extended period
Animal Jam
7,104,998 records exposed — Dates of birth, Email addresses, Genders, IP addresses and 4 more
Vertafore
27.7M Texas driver license records exposed in cloud misconfiguration
Lazada RedMart
1,107,789 records exposed — Email addresses, Names, Partial credit card data, Passwords and 2 more
Mashable
1,414,677 records exposed — Auth tokens, Email addresses, Genders, Geographic locations and 4 more