Data Breaches

A threat actor operating under the alias 'DrOne' has taken responsibility for leaking the scraped database of Chess.com, a widely popular online platform for chess enthusiasts and social networking. The breach, disclosed on November 8th, 2023, on Breach Forums, exposes personal data from over 800,000 registered users, raising cybersecurity alarms within the online chess...

A prominent torrenting site has fallen victim to a major data breach this year, as reports suggest that a database containing sensitive user data has been exposed online. The breach is said to have potentially compromised the personal details of up to 100,000 users of World in HD (WiHD), including site administrators. The leaked...

The Harris Center for Mental Health is grappling with the aftermath of a suspected ransomware attack that transpired earlier this week, raising concerns about patient care disruptions and data security. The attack, which was confirmed in a recent news release, led to the encryption of critical employee files, rendering them inaccessible to staff members. Consequently,...

Allen & Overy (A&O), one of London's prestigious "magic circle" law firms, has become the latest corporate entity to fall victim to a cyber attack, underscoring the growing threat of ransomware hacks targeting major organizations. A&O officially confirmed the incident, stating, "We have experienced a cyber security incident impacting a small number of storage servers."...

Shared service provider TransForm has published an update on the cyberattack that recently impacted operations in multiple hospitals in Ontario, Canada, clarifying that it was a ransomware attack. The organization confirms that the attackers managed to steal a database containing information on 5.6 million patient visits, corresponding to approximately 267,000 unique individuals. The incident caused...

Trinidad & Tobago's Telecommunications Services (TSTT) has suffered a significant data breach, exposing the personal information of over a million citizens, including the nation's Prime Minister, Dr. Keith Rowley. The compromised data includes sensitive personal identifiers such as identification card numbers, driver's license numbers, and passport numbers. The extent of the leak is alarming, with...

Marina Bay Sands (MBS), the renowned integrated resort in Singapore, has disclosed a data security breach that impacted the personal data of 665,000 customers. The breach, characterized as an "unauthorised access," occurred on October 19 and 20, as confirmed by an MBS spokesperson. According to MBS, the breach primarily affected the data of Sands LifeStyle...

A Las Vegas-based plastic surgery practice, Hankins & Sohn Plastic Surgery Associates, is currently entangled in a federal class-action lawsuit after falling victim to a cyberattack that resulted in the unauthorized exposure of private patient information, including photographs. Plaintiff Jennifer Tausinga initiated the lawsuit this spring, representing herself and others similarly affected. The legal proceedings...

U.S. insurance and advisory services provider, Hilb Group, has fallen victim to a significant data breach, compromising the personal information of 81,539 individuals. The breach, which occurred earlier this year, resulted in the unauthorized access to employee email accounts, according to a report from The Register. The breach incident revealed that threat actors not only...

A significant private torrent community recently experienced an inadvertent data exposure incident, raising concerns about the privacy and security of its users. Cybersecurity researchers from Cybernews have uncovered an unprotected database using Elasticsearch linked to the French service World in HD (WiHD), revealing a serious breach. The exposed database was found to contain a wealth...

An Iranian threat actor linked to the Ministry of Intelligence and Security (MOIS) has been conducting a highly sophisticated cyber espionage campaign, targeting financial, government, military, and telecommunications sectors in the Middle East for over a year. Israeli cybersecurity firm Check Point, in collaboration with Sygnia, uncovered this campaign and is tracking the actor under...

Mr. Cooper, formerly known as Nationstar, the nation's third-largest mortgage servicer, has announced a cybersecurity breach that occurred on October 31, leaving millions of customers unable to process payments or mortgage transactions. While the company has not officially confirmed whether this was a ransom attack, they have taken swift measures to safeguard customer data,...

Five hospitals in southwestern Ontario have been grappling with a crippling ransomware attack for twelve days, severely impacting healthcare services in the region. Recently, a cybercriminal group took responsibility for the attack, shedding light on the incident and asserting their theft of millions of private patient records. Windsor Regional Hospital's chief executive officer, David Musyj,...

Palo Alto Networks, undeterred by the ongoing war in Gaza, has solidified its presence in the Israeli cybersecurity sector with another major acquisition, following its recent purchase of Dig Security. The latest addition to its portfolio is Talon Cyber Security, the developer of a corporate browser, in a deal estimated to be valued at...

SolarWinds, the information technology firm that was at the center of a major Russian-backed cyber-espionage incident in 2019, is now facing a lawsuit from the U.S. Securities and Exchange Commission (SEC). The lawsuit alleges that SolarWinds committed fraud and failed to maintain adequate internal controls for several years prior to the hack. SolarWinds' Chief...