Federal agencies, state governments, municipalities, and public-sector contractors have become priority targets for nation-state actors and ransomware groups. Below is every government-sector breach LeakTrace has indexed.
7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points to large-scale scraping, not a server breach. Free is a strange price for stolen data, and that’s exactly what makes this listi
The exfiltrated data may be related to misconfiguration of Microsoft Power Page portals, according to a new report.
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed AmnesiaStealer, a new multi-st
Data breach disclosed in securities filing; type and scope of exposed data not yet determined
Data breach affected approximately 900,000 current and former customers; personal information exposed
24M customer breach due to lack of basic security controls; three major GDPR violations
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. [...]
Data storage platform hacked; 165 breaches affecting over 165 million records total across multiple organizations
Cyberattack exposed personal information of Xfinity customers; resulted in $117.5M settlement
165 orgs compromised, billions of records stolen
2500 orgs and 434K CI/CD pipelines exposed
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
1M+ customer records stolen in ransomware
Cyberattack exposed personal information of Xfinity customers; $117.5M settlement reached
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. [...]
Client documents exfiltrated via third-party platform
Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents
One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.
SSNs and health data from Salesforce breach
28K customers, 55GB financial PII stolen
Canadian software firm breached by BlackNevas