Security Affairs

SEPTEMBER 19, 2023

The cyber attack that hit the cleaning products manufacturer Clorox in August is still affecting the supply of the products to customers. In response to the cyber attack, the company has taken some of its systems offline while it was implementing additional “protections and hardening measures to further secure them”.

Cyber Attacks 131

Cyber Attacks Manufacturing Marketing Cybersecurity 131

Security Affairs

NOVEMBER 7, 2023

Iran-linked Agonizing Serpens group has been targeting Israeli organizations with destructive cyber attacks since January. personally identifiable information (PII) and intellectual property) and then deploy various wipers to cover the tracks. The tool sqlextractor (binary name sql.net4.exe)

Cyber Attacks 135

Cyber Attacks Education Technology Internet 135

Security Affairs

DECEMBER 28, 2022

The chief executive of insurance giant Zurich warns that cyber attacks, rather than natural catastrophes, will become uninsurable. Mario Greco, chief executive of insurer giant Zurich, has warned that cyber attacks will become soon “uninsurable.”. These people can severely disrupt our lives.” Pierluigi Paganini.

Cyber Attacks 98

Cyber Attacks Cyber Insurance Insurance Cyber Risk 98

Security Affairs

APRIL 25, 2024

A ransomware attack on a Swedish logistics company Skanlog severely impacted the country’s liquor supply. Skanlog, a critical distributor for Systembolaget, the Swedish government-owned retail chain suffered a ransomware attack. Our systems, including our central business system, have been affected by the attack.

Ransomware 138

Ransomware Retail Cyber Attacks Backups 138

Security Affairs

JULY 31, 2024

hospitals, suffered a ransomware attack that disrupted its medical operations. A disruptive ransomware attack hit OneBlood and disrupted its medical operations. Unfortunately, the attacks against US hospitals and healthcare organizations are growing. OneBlood, a non-profit blood bank serving over 300 U.S.

Banking 136

Banking Ransomware Healthcare Cyber Attacks 136

Security Affairs

SEPTEMBER 30, 2024

Community Clinic of Maui experienced a data breach impacting over 120,000 people following a LockBit ransomware attack. In May, the Community Clinic of Maui experienced a major IT outage that impacted thousands of patients following a cyber attack. In June, the Lockbit ransomware gang took credit for the attack.

Data breaches 136

Data breaches Ransomware Healthcare Identity Theft 136

Security Affairs

SEPTEMBER 15, 2024

Port of Seattle confirmed on Friday that the Rhysida ransomware group was behind the cyberattack that hit the agency in August. In August, a cyber attack hit the Port of Seattle, which also operates the Seattle-Tacoma International Airport, websites and phone systems were impacted. reported The Seattle Times.

Ransomware 131

Ransomware Cyber Attacks Internet Internet 131

Security Affairs

NOVEMBER 4, 2024

The July 2024 ransomware attack that hit the City of Columbus, Ohio, exposed the personal and financial data of 500,000 individuals. On July 18, 2024, the City of Columbus, Ohio, suffered a cyber attack that impacted the City’s services. The gang claimed they had stolen databases containing 6.5

Ransomware 116

Ransomware Identity Theft Data breaches Cyber threats 116

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. BleepingComputer first reported the attack that hit the Sustainability Business division of the company on January 17th. The Cactus ransomware relies on multiple legitimate tools (e.g.

Ransomware 142

Ransomware Hacking Data breaches Digital transformation 142

Security Affairs

AUGUST 10, 2024

A INC Ransom ransomware attack this week disrupted IT and phone systems at McLaren Health Care hospitals. On Tuesday, an INC Ransom ransomware attack hit the McLaren Health Care hospitals and disrupted their IT and phone systems. Following the cyber attack, McLaren Health Care launched an investigation into the incident.

Ransomware 134

Ransomware Insurance Data breaches Cyber Attacks 134

Security Affairs

DECEMBER 18, 2022

The fire and rescue service in the state of Victoria (FRV), Australia, has shut down its network after a cyber attack launched by “an external third party.” . “Preliminary investigations confirm this has been a cyber-attack by an external third party and that FRV systems are impacted.” Pierluigi Paganini.

Cyber Attacks 100

Cyber Attacks Mobile Hacking Ransomware 100

Security Affairs

FEBRUARY 22, 2022

American worldwide logistics and freight forwarding company Expeditors International shuts down global operations after cyber attack. The company discovered the attack on February 20, 2022, it doesn’t provide details about the attack and announced to have launched an investigation into the incident.

Cyber Attacks 102

Cyber Attacks Ransomware Hacking Cybersecurity 102

Security Affairs

JULY 13, 2024

The American drugstore chain Rite Aid Corporation disclosed a data breach following the cyber attack that hit the company in June. The American drugstore chain giant Rite Aid suffered a data breach following a cyberattack in June conducted by the RansomHub ransomware group. 148 in the Fortune 500 in 2022.

Data breaches 140

Data breaches Ransomware Hacking Insurance 140

Security Affairs

MAY 13, 2024

Unfortunately, our investigation has identified that an unauthorised third party has accessed some customer information.” “It is important to note that our systems are secure. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, ransomware)

Data breaches 131

Data breaches Cyber Attacks Identity Theft Banking 131

Security Affairs

NOVEMBER 12, 2023

The Lorenz ransomware gang has been active since April 2021 and hit multiple organizations worldwide demanding hundreds of thousands of dollars in ransom to the victims. At the time of this writing, the Loren group has started uploading the stolen data (95%) US Healthcare organizations continue to be a privileged target of ransomware gangs.

Ransomware 143

Ransomware Healthcare Encryption Cyber Attacks 143

Security Affairs

MAY 16, 2024

Electronic prescription provider MediSecure in Australia suffered a ransomware attack likely originate from a third-party vendor. MediSecure is a company that provides digital health solutions, particularly focusing on secure electronic prescription delivery services in Australia. ” reported ABC. million customers.

Ransomware 133

Ransomware Data breaches Government Insurance 133

Security Affairs

MARCH 2, 2021

France-based dairy giant Lactalis announced that it was hit by a cyber attack, but claimed that it had found no evidence of a data breach. The company did not provide details about the type of attack, but some experts speculate the company has been hit by ransomware. SecurityAffairs – hacking, cyber attack).

Cyber Attacks 133

Cyber Attacks Data breaches Hacking Mobile 133

Security Affairs

NOVEMBER 20, 2023

The Rhysida ransomware group claimed responsibility for the recent cyberattack on the British Library that has caused a major IT outage. The Rhysida ransomware gang added the British Library to the list of victims on its Tor leak site. The Rhysida ransomware operators plan to sell the stolen data to a single buyer.

Ransomware 141

Ransomware Cyber Attacks Technology Manufacturing 141

Security Affairs

OCTOBER 15, 2023

The Alphv ransomware group added the Morrison Community Hospital to its dark web leak site. The ALPHV/BlackCat ransomware group claims to have hacked the Morrison Community Hospital and added it to its dark web Tor leak site. The group is known to have a role for its affiliated that prohibits attacking healthcare organizations.

Ransomware 144

Ransomware Healthcare Data breaches Cyber Attacks 144

Security Affairs

APRIL 11, 2023

A cyber attack paralyzed the water controllers for irrigating fields in the Jordan Valley that are operated by the Galil Sewage Corporation. The National Cyber Organization warned of the risk of cyber attacks that anti-Israeli hackers can carry out against national infrastructure during the month of Ramadan.

Cyber Attacks 98

Cyber Attacks Education Media Risk 98

Security Affairs

DECEMBER 18, 2023

ransomware attack on the Italian cloud service provider Westpole disrupted multiple services of local and government organizations and municipalities. A cyber attack hit on December 8, 2023 the Italian cloud service provider Westpole, which is specialized in digital services for public administration.

Ransomware 144

Ransomware Cyber Attacks Government Media 144

Security Affairs

DECEMBER 29, 2021

A cyber attack hit Norwegian media company Amedia on Tuesday and forced it to shut down multiple systems. Amedia , one of the largest media companies in Norway, was hit by a “serious” cyber attack and was forced to shut down its computer systems. The media company informed the local authorities.

Cyber Attacks 132

Cyber Attacks Media Advertising Banking 132

Security Affairs

JUNE 27, 2020

The France Télévisions group announced yesterday that it was hit by a cyber attack, targeting one of its broadcasting sites. The France Télévisions group announced Friday that it was the victim of a cyber attack that targeted one of its broadcasting sites. According to the group, the attack did not impact its antennae.

Cyber Attacks 145

Cyber Attacks Backups Advertising Media 145

Security Affairs

MAY 5, 2024

FuckRansomware pic.twitter.com/uD09m7AukH — Jon DiMaggio (@Jon__DiMaggio) May 5, 2024 However, researchers at VX-underground have spoken with Lockbit ransomware group administrative staff regarding the return of the old domain and the gang claims law enforcement is lying. Lockbit ransomware group states law enforcement is lying.

Ransomware 142

Ransomware Cybercrime Cyber Attacks Encryption 142

Security Affairs

APRIL 6, 2022

.” Nordex did not disclose technical details of the cyberattack, but the fact that it was forced to shut down part of its IT infrastructure suggests that it fell victim to a ransomware attack. In November another manufacturer of wind turbines was hit by a cyber attack, it was the Danish wind turbine giant Vestas Wind Systems.

Manufacturing 128

Manufacturing Cyber Attacks Ransomware Hacking 128

Security Affairs

AUGUST 6, 2021

Taiwanese manufacturer and distributor of computer hardware GIGABYTE was a victim of the RansomEXX ransomware gang. RansomEXX ransomware gang hit the Taiwanese manufacturer and distributor of computer hardware GIGABYTE and claims to have stolen 112GB of data. ” states the Chinese news site United Daily News. and some others.”

Manufacturing 135

Manufacturing Ransomware Information Security Security Defenses 135

The Last Watchdog

FEBRUARY 21, 2022

The headlines are disturbing: Breach of patient records ; Surgeries and appointments cancelled due to IT outage ; and even, Death attributed to ransomware attack on hospital. One example of this is isolating or quarantining systems with malware (virus or ransomware) from the remainder of the network.

Healthcare 214

Healthcare Cyber Attacks Education Social Engineering 214

Security Affairs

JANUARY 28, 2024

Medusa ransomware gang claimed responsibility for the attack against the Kansas City Area Transportation Authority (KCATA). On January 23, 2023, the Kansas City Area Transportation Authority (KCATA) suffered a ransomware attack. “A ransom cyber-attack hit the KCATA early Tuesday, January 23.

Ransomware 139

Ransomware Data breaches Cyber Attacks Cybercrime 139

Security Affairs

DECEMBER 22, 2023

The Akira ransomware group announced it had breached the network of Nissan Australia, the Australian branch of the car maker giant. The Akira ransomware gang claimed to have breached Nissan Australia and to have stolen around 100GB of files from the carmaker giant. “We’ve obtained 100 GB of data of Nissan Australia. .”

Ransomware 142

Ransomware Data breaches Financial Services Scams 142

Security Affairs

DECEMBER 15, 2023

Resecurity has uncovered a meaningful link between three major ransomware groups, BianLian, White Rabbit, and Mario Ransomware. Resecurity’s HUNTER (HUMINT) unit spotted the BianLian , White Rabbit , and Mario ransomware gangs collaborating in a joint extortion campaign targeting publicly-traded financial services firms.

Ransomware 140

Ransomware Financial Services Cyber Attacks Passwords 140

Security Affairs

AUGUST 13, 2020

Israel ‘s defence ministry announced to have foiled an attempted cyber attack by a foreign threat actors group targeting the country’s defence manufacturers. According to the officials, the attack was launched by “an international cyber group called ‘ Lazarus.’ Pierluigi Paganini.

Cyber Attacks 145

Cyber Attacks Manufacturing Hacking Advertising 145

Security Affairs

JANUARY 9, 2024

The LockBit ransomware gang claimed responsibility for the cyber attack on the Capital Health hospital network. The LockBit ransomware operation has claimed responsibility for the cyberattack that hit the Capital Health hospital network in November 2023.

Ransomware 132

Ransomware Healthcare Encryption Cyber Attacks 132

Security Affairs

NOVEMBER 9, 2020

The Taiwanese electronics manufacture Compal suffered a ransomware attack over the weekend, media blames the DoppelPaymer ransomware gang. Compal suffered a ransomware attack over the weekend, a screenshot of the ransom note shared by the employees of the company is circulating online. Source ZDNet.

Manufacturing 145

Manufacturing Computers and Electronics Ransomware Media 145

Security Affairs

FEBRUARY 19, 2024

The Cactus ransomware gang claims the theft of 1.5TB of data from the Energy management and industrial automation firm Schneider Electric. The Cactus ransomware group claims responsibility for pilfering 1.5TB of data from the Energy management and industrial automation giant Schneider Electric.

Ransomware 140

Ransomware Digital transformation Retail Antivirus 140

Security Affairs

DECEMBER 28, 2023

A Lockbit ransomware attack against the German hospital network Katholische Hospitalvereinigung Ostwestfalen (KHO) caused service disruptions at three hospitals. The security incident could have a serious impact on the local population due to the interruption of the medical emergencies.

Ransomware 140

Ransomware Encryption Cyber Attacks Hacking 140

Security Affairs

SEPTEMBER 10, 2023

Rhysida Ransomware group added three more US hospitals to the list of victims on its Tor leak site after the PROSPECT MEDICAL attack. Recently the Rhysida ransomware group made the headlines because it announced the hack of Prospect Medical Holdings and the theft of sensitive information from the organization.

Hacking 144

Hacking Ransomware Healthcare Cyber Attacks 144

Security Affairs

SEPTEMBER 26, 2023

This week the Rhysida ransomware group claimed the hack of the Kuwait Ministry of Finance and added it to its Tor leak site. Last week a ransomware attack hit the Government of Kuwait, the attack took place on September 18 and the government experts immediately started the incident response procedures to block the threat.

Ransomware 138

Ransomware Government Hacking Cyber Attacks 138