Latest Data Theft news

New MOVEit Transfer critical flaws found after security audit, patch now

Progress Software warned customers today of newly found critical SQL injection vulnerabilities in its MOVEit Transfer managed file transfer (MFT) solution that can let attackers steal information from customers' databases.
- Sergiu Gatlan
- June 09, 2023
- 02:49 PM
- 0
Clop ransomware likely testing MOVEit zero-day since 2021

The Clop ransomware gang has been looking for ways to exploit a now-patched zero-day in the MOVEit Transfer managed file transfer (MFT) solution since 2021, according to Kroll security experts.
- Sergiu Gatlan
- June 08, 2023
- 06:45 PM
- 0
Clop ransomware claims responsibility for MOVEit extortion attacks

The Clop ransomware gang has told BleepingComputer they are behind the MOVEit Transfer data-theft attacks, where a zero-day vulnerability was exploited to breach servers belonging to "hundreds of companies" and steal data.
- Lawrence Abrams
- June 05, 2023
- 05:27 PM
- 0
Microsoft links Clop ransomware gang to MOVEit data-theft attacks

Microsoft has linked the Clop ransomware gang to recent attacks exploiting a zero-day vulnerability in the MOVEit Transfer platform to steal data from organizations.
- Lawrence Abrams
- June 05, 2023
- 08:54 AM
- 0
CISA orders govt agencies to patch MOVEit bug used for data theft

CISA has added an actively exploited security bug in the Progress MOVEit Transfer managed file transfer (MFT) solution to its list of known exploited vulnerabilities, warning U.S. federal agencies to patch their systems by June 23.
- Sergiu Gatlan
- June 04, 2023
- 11:14 AM
- 0
New MOVEit Transfer zero-day mass-exploited in data theft attacks

Hackers are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software, tracked as CVE-2023-34362, to steal data from organizations.
- Lawrence Abrams
- June 01, 2023
- 10:47 AM
- 0
Barracuda zero-day abused since 2022 to drop new malware, steal data

Network and email security firm Barracuda today revealed that a recently patched zero-day vulnerability had been exploited for at least seven months to backdoor customers' Email Security Gateway (ESG) appliances with custom malware and steal data.
- Sergiu Gatlan
- May 30, 2023
- 04:25 PM
- 0
Food distribution giant Sysco warns of data breach after cyberattack

Sysco, a leading global food distribution company, has confirmed that its network was breached earlier this year by attackers who stole sensitive information, including business, customer, and employee data.
- Sergiu Gatlan
- May 09, 2023
- 03:47 PM
- 0
Sponsored Content
Detecting data theft with Wazuh, the open-source XDR

Threat actors can steal data from organizations to sell to other malicious actors, making it a major risk for organizations. Wazuh, the free and open-source XDR/SIEM, offers several capabilities that protection against data theft.
- Sponsored by Wazuh
- May 08, 2023
- 10:05 AM
- 0
Play ransomware gang uses custom Shadow Volume Copy data-theft tool

The Play ransomware group has developed two custom tools in .NET, namely Grixba and VSS Copying Tool, which it uses to improve the effectiveness of its cyberattacks.
- Bill Toulas
- April 19, 2023
- 06:00 AM
- 0
New Money Message ransomware demands million dollar ransoms

A new ransomware gang named 'Money Message' has appeared, targeting victims worldwide and demanding million-dollar ransoms not to leak data and release a decryptor.
- Bill Toulas
- April 02, 2023
- 01:36 PM
- 0
The Week in Ransomware - March 24th 2023 - Clop overload

This week's news has been dominated by the Clop ransomware gang extorting companies whose GoAnywhere services were breached using a zero-day vulnerability.
- Lawrence Abrams
- March 24, 2023
- 05:32 PM
- 0
The Week in Ransomware - March 17th 2023 - Shifting to data extortion

The fallout from the Clop ransomware attacks on GoAnywhere platforms has become apparent this week, with the threat actors starting to extort victims on their data leak site and companies confirming breaches.
- Lawrence Abrams
- March 17, 2023
- 07:01 PM
- 1
BianLian ransomware gang shifts focus to pure data extortion

The BianLian ransomware group has shifted its focus from encrypting its victims' files to only exfiltrating data found on compromised networks and using them for extortion.
- Bill Toulas
- March 16, 2023
- 06:10 PM
- 0
Hacker selling data allegedly stolen in US Marshals Service hack

A threat actor is selling on a Russian-speaking hacking forum what they claim to be hundreds of gigabytes of data allegedly stolen from U.S. Marshals Service (USMS) servers.
- Sergiu Gatlan
- March 15, 2023
- 02:06 PM
- 0
Rubrik confirms data theft in GoAnywhere zero-day attack

Cybersecurity company Rubrik has confirmed that its data was stolen using a zero-day vulnerability in the Fortra GoAnywhere secure file transfer platform.
- Lawrence Abrams
- March 14, 2023
- 04:43 PM
- 0
Clop ransomware gang begins extorting GoAnywhere zero-day victims

The Clop ransomware gang has begun extorting companies whose data was stolen using a zero-day vulnerability in the Fortra GoAnywhere MFT secure file-sharing solution.
- Lawrence Abrams
- March 11, 2023
- 02:36 PM
- 0
LastPass: DevOps engineer hacked to steal password vault data in 2022 breach

LastPass revealed more information on a "coordinated second attack," where a threat actor accessed and stole data from the Amazon AWS cloud storage servers for over two months.
- Lawrence Abrams
- February 27, 2023
- 08:40 PM
- 2
U.S. Marshals Service investigating ransomware attack, data theft

The U.S. Marshals Service (USMS) is investigating the theft of sensitive law enforcement information following a ransomware attack that has impacted what it describes as "a stand-alone USMS system."
- Sergiu Gatlan
- February 27, 2023
- 07:48 PM
- 0
GoDaddy: Hackers stole source code, installed malware in multi-year breach

Web hosting giant GoDaddy says it suffered a breach where unknown attackers have stolen source code and installed malware on its servers after breaching its cPanel shared hosting environment in a multi-year attack.
- Sergiu Gatlan
- February 17, 2023
- 12:27 PM
- 0