Ivanti VPN (Multiple Victims)
Critical zero-day chain exploited by state-sponsored actors — CISA emergency directive
Latest Disclosures
Ivanti
Multiple zero-day VPN vulnerabilities exploited by Chinese APT
Vietnam Social Security (VNPT)
5M citizen records exposed from government social security system
Ivanti (Pulse Secure)
Chinese APT exploited VPN zero-days affecting thousands of organizations
Ivanti VPN (CVE-2024-21887)
Chinese state hackers mass-exploited Ivanti VPN zero-days — 1,700+ organizations breached
LCBO (Ontario)
Customer credit card data skimmed via Magecart web injection on provincial liquor retailer
LoanDepot Inc.
16.6M customer records stolen in ransomware attack — SSNs, financial account numbers exposed
Blackhawk Network
73K customer records exposed
Equifax (2024 Settlement)
$700M settlement payments began — 147M affected consumers eligible for monitoring credit
Flair Airlines (Canada)
Internal systems compromised — pilot training and scheduling data exposed
City of Irving TX
36K records exposed in ransomware
Hathway Cable (India)
41.5M subscriber records exposed — emails, addresses, device info
LoanDepot Mortgage
17M customer records stolen in ALPHV ransomware attack — mortgage applications and SSNs
Riverside Community Care
25K patient records exposed
Integris Health (Oklahoma)
2.4M patient records stolen — attackers emailed patients directly demanding payment
Resolve Marine (Canada)
Ransomware targeted Canadian maritime services company
Legendas.TV
3,869,181 records exposed — Email addresses, IP addresses, Names, Passwords and 1 more
LoanDepot
16.6M customer records exposed in ALPHV ransomware
LoanDepot (operations)
16.6M customer records — one of largest mortgage data breaches
City of San Bernardino CA
85K resident records exposed in breach
General Electric Aviation
IntelBroker claimed breach of DARPA research data and jet engine maintenance records
PHH Mortgage
436K customer records exposed
Atos SE (France)
LockBit attempted extortion of French IT services giant
Anna Jaques Hospital (Massachusetts)
316K patient records exposed after Christmas Day ransomware attack — Money Message gang