Latest Breach news

InterContinental Hotels Group cyberattack disrupts booking systems

Leading hospitality company InterContinental Hotels Group PLC (also known as IHG Hotels & Resorts) says its information technology (IT) systems have been disrupted since yesterday after its network was breached.
- Sergiu Gatlan
- September 06, 2022
- 01:11 PM
- 0
Twilio breach let hackers gain access to Authy 2FA accounts

Twilio's investigation into the attack on August 4 reveals that hackers gained access to some Authy user accounts and registered unauthorized devices.
- Ionut Ilascu
- August 26, 2022
- 12:20 PM
- 3
LastPass developer systems hacked to steal source code

Password management firm LastPass was hacked two weeks ago, enabling threat actors to steal the company's source code and proprietary technical information.
- Lawrence Abrams
- August 25, 2022
- 04:59 PM
- 6
Plex warns users to reset passwords after a data breach

The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its databases.
- Bill Toulas
- August 24, 2022
- 07:49 AM
- 0
Misconfigured Meta Pixel exposed healthcare data of 1.3M patients

U.S. healthcare provider Novant Health has disclosed a data breach impacting 1,362,296 individuals who have had their sensitive information mistakenly collected by the Meta Pixel ad tracking script.
- Bill Toulas
- August 22, 2022
- 02:16 PM
- 1
Twilio hack exposed Signal phone numbers of 1,900 users

Phone numbers of close to 1,900 Signal users were exposed in the data breach Twilio cloud communications company suffered at the beginning of the month.
- Ionut Ilascu
- August 15, 2022
- 05:46 PM
- 0
Twilio: 125 customers affected by data breach, no passwords stolen

Cloud communications giant Twilio, the owner of the highly popular two-factor authentication (2FA) provider Authy, says that it has so far identified 125 customers who had their data accessed during a security breach discovered last week.
- Sergiu Gatlan
- August 12, 2022
- 01:44 PM
- 0
Twilio discloses data breach after SMS phishing attack on employees

Cloud communications company Twilio says some of its customers' data was accessed by attackers who breached internal systems after stealing employee credentials in an SMS phishing attack.
- Sergiu Gatlan
- August 08, 2022
- 10:37 AM
- 0
EU missile maker MBDA confirms data theft extortion, denies breach

MBDA, one of the largest missile developers and manufacturers in Europe, has responded to rumors about a cyberattack on its infrastructure saying that claims of a breach of its systems are false.
- Bill Toulas
- August 02, 2022
- 08:43 AM
- 0
Quantum ransomware attack affects 657 healthcare orgs

Professional Finance Company Inc. (PFC), a full-service accounts receivables management company, says that a ransomware attack in late February led to a data breach affecting over 600 healthcare organizations.
- Sergiu Gatlan
- July 07, 2022
- 01:19 PM
- 1
Hacker claims to have stolen data on 1 billion Chinese citizens

An anonymous threat actor is selling several databases they claim to contain more than 22 terabytes of stolen information on roughly 1 billion Chinese citizens for 10 bitcoins (approximately $195,000).
- Sergiu Gatlan
- July 04, 2022
- 11:29 AM
- 6
Kaiser Permanente data breach exposes health data of 69K people

Kaiser Permanente, one of America's leading not-for-profit health plans and health care providers, has recently disclosed a data breach that exposed the health information of more than 69,000 individuals.
- Sergiu Gatlan
- June 13, 2022
- 06:54 PM
- 0
Mandiant: “No evidence” we were hacked by LockBit ransomware

American cybersecurity firm Mandiant is investigating LockBit ransomware gang's claims that they hacked the company's network and stole data.
- Sergiu Gatlan
- June 06, 2022
- 03:54 PM
- 0
GitHub: Attackers stole login details of 100K npm user accounts

GitHub revealed today that an attacker stole the login details of roughly 100,000 npm accounts during a mid-April security breach with the help of stolen OAuth app tokens issued to Heroku and Travis-CI.
- Sergiu Gatlan
- May 27, 2022
- 02:40 PM
- 0
GitHub: How stolen OAuth tokens helped breach dozens of orgs

GitHub has shared a timeline of this month's security breach when a threat actor gained access to and stole private repositories belonging to dozens of organizations.
- Sergiu Gatlan
- April 27, 2022
- 05:04 PM
- 0
T-Mobile confirms Lapsus$ hackers breached internal systems

T-Mobile has confirmed that the Lapsus$ extortion gang breached its network "several weeks ago" using stolen credentials and gained access to internal systems.
- Sergiu Gatlan
- April 22, 2022
- 11:19 AM
- 3
Okta: Lapsus$ breach lasted only 25 minutes, hit 2 customers

Identity and access management firm Okta says an investigation into the January Lapsus$ breach concluded the incident's impact was significantly smaller than expected.
- Sergiu Gatlan
- April 20, 2022
- 12:48 PM
- 1
GitHub notifies owners of private repos stolen using OAuth tokens

GitHub says it notified all organizations believed to have had data stolen from their private repositories by attackers abusing compromised OAuth user tokens issued to Heroku and Travis-CI.
- Sergiu Gatlan
- April 19, 2022
- 12:55 PM
- 0
GitHub: Attacker breached dozens of orgs using stolen OAuth tokens

GitHub revealed today that an attacker is using stolen OAuth user tokens (issued to Heroku and Travis-CI) to download data from private repositories.
- Sergiu Gatlan
- April 15, 2022
- 07:09 PM
- 0
Morgan Stanley client accounts breached in social engineering attacks

Morgan Stanley Wealth Management, the wealth and asset management division of Morgan Stanley, says some of its customers had their accounts compromised following vishing attacks.
- Sergiu Gatlan
- March 24, 2022
- 06:47 PM
- 0