
Breach News
Information and IT Industry Insights to keep you informed of the ever-changing IT landscape.
1.4 Million Patients Warned of Data Breach Following Ransomware Attack
The healthcare network of St. Joseph’s/Candler (SJ/C) recently reported a ransomware incident that took place as early as December 2020. While the breach is presumed to have occurred late last year, the hospital system’s IT staff uncovered the intrusion on June 17, 2021.
Ford Server Bug Exposes Customer and Employee Data
Cyber security researchers informed Ford Motor company of a misconfigured instance that was running on Ford’s server. The vulnerability opened an opportunity for anyone who came across it to obtain access to sensitive data including customer and employee information.
Nearly 750,000 Citizens' Data Improperly Accessed
In what state officials are deeming to have been a low-risk data breach, the Indiana Department of Health is notifying affected individuals that data from the state’s COVID-19 online contact tracing survey was improperly accessed.
100 Million T-Mobile Customers' Info Up For Sale After Hacking Incident
Another cyber security blow has been dealt to T-Mobile in what seems to be a string of cyber attacks and incidents. A hacker is now claiming to be in possession of personal information data related to over 100 million T-Mobile customers. The data is said to include social security numbers, phone numbers, names, addresses and unique IMEI numbers and drivers’ licenses of T-Mobile customers.
$1.8B Venture Capital Firm Hit By Ransomware
Multiple databases belonging to global consulting giant, Accenture, have been listed for sale on the LockBit ransomware gang’s dark web site. LockBit is claiming to have 6 terabytes worth of Accenture’s data which they are requesting a ransom of $50 million for its return. Media outlets are showing conflicting reports, some speculating this may have been the result of an inside job.
Three Million Affected by Unsecured Cloud Storage Data Breach
Over 3 million people had their data exposed as cyber security researchers came across a misconfigured Amazon public cloud storage resource belonging to the senior care review site, SeniorAdvisor.
Unknown Number of British Columbians Affected As Personal Info Auctioned on Dark Web
Ontario based healthcare provider Homeward Health recently began contacting affected companies and agencies in BC acknowledging a hacking incident that took place earlier this year. An unknown number of people and organizations have potentially been left vulnerable by the incident personal information has been leaked onto the Dark Web.
Potential Data Compromised After Health Network Phishing Attack
The University of California, San Diego Health recently disclosed a data breach occurred after some employee email addresses were compromised in a phishing attack. Four months or more had passed before the breach was discovered.
3rd Party Data Breach Potentially Affects BC School District’s Int’l Students
A British Columbian school district, School District No. 73 (SD73, Kamloops-Thompson), was recently notified of a third-party data breach that may have led to student information being compromised. SD73’s third-party travel and medical insurance provider for its international student program released a statement confirming a cyber security incident during June 2021, led to this potential data leak.
Ransomware Disables Entertainment Company’s IT Systems
Canadian cinematic motion tech manufacturer, D-Box, is left to recover after a Ransomware attack left their IT network disabled last month. Electronic Data stored on the organization’s network was encrypted by malware and affected most of the company’s systems.
Calgary Drivers’ Personal Data Exposed in Data Security Breach
A recent data breach, caused by a misconfigured server, exposed the personal information of vehicle owners. Reports show that the server belonging to the Calgary Parking Authority (CPA), which was used to monitor the authority’s parking system for bugs and errors, was left unsecured in what seems to be an overlooked security error.
Failed Extortion Attempt Leads To Massive Data Leak
After a failed attempt at extorting video game giant, Electronics Arts (EA), for the return of stolen data and later failing to sell the stolen files to a third-party, the hackers responsible for the breach have released approximately 751 GB of EA’s stolen data online. The dumped files are being reported to have contained the source code for EA’s FIFA 21 soccer game.
2.4 Million Affected in 3rd Largest Healthcare Breach of 2021
After suffering an apparent Ransomware attack, a US based chain of affiliated dermatology clinics notified 2.4 million patients, employees and clinicians of a data breach. The data breach is now listed as the third-largest healthcare breach of 2021.
Law Firm With High-Profile Client List Hit by Ransomware Attack
After suffering from a Ransomware attack in February 2021, Campbell Conroy & O’Neil, a law firm with dozens of high-profile Fortune 500 and Global 500 companies on their client list, recently announced a data breach.
3rd Party Data Breach Hit Weeks After Ransomware Attack
Company officials from Yale New Haven Health are warning patients that their information has been compromised in an April cyber security incident from one of their third-party vendors. This news comes weeks after the medical network was victimized by a ransomware attack.
Guess Announces Data Breach After Ransomware Attack
Dark web researchers have uncovered around 200 GB of leaked data from retail fashion brand, Guess. While the company has not disclosed many details, Guess has admitted that cyber criminals gained access to their network in February 2021.
$70M Ransom Requested: Largest Ever Ransomware Attack Affects Thousands of Businesses
Thousands of businesses have been compromised in what appears to be the single biggest global ransomware attack on record.
Customers Warned of ID Theft after Ransomware Attack
Data Breach Notification letters are being mailed to individuals that may have been impacted in a Ransomware attack on insurance brokerage and risk management firm, Arthur J. Gallagher.
Ransomware Gang Leaks Canadian Company’s Files on Dark Web
While the initial reports stated that no data was stolen, it is speculated that a Ransomware group named Hive, may have encrypted and leaked the Altus Group’s data online.
New Ransomware Group Attacks 6 Person, Canadian Small Business
A six-person financial services firm in North York, confirmed they were hit with Ransomware on May 26 after finding their servers had been encrypted. Owner, Naz Sukhram, whom the firm is named after, released a statement saying, “We thought we were a small company and would not get hit.”