Threat Actor: Play | Play Victim: Microchip Technology | Microchip Technology Price: Unknown Exfiltrated Data Type: Employee information, financial reports, payroll records, customer documents, tax files
Key Points :
Microchip Technology experienced a significant data breach due to a cyberattack in August 2024. The Play ransomware group claimed responsibility for the attack on August 29.…Threat Actor: Clearview AI | Clearview AI Victim: Dutch residents | Dutch residents Price: €30.5 million Exfiltrated Data Type: Biometric data (facial images)
Key Points :
Clearview AI was fined for unlawfully collecting facial images from the internet. The company has a database of over 30 billion photographs, including those of Dutch residents.…Threat Actor: Malicious Actors | Malicious Actors Victim: Organizations using GenAI services | Organizations using GenAI services Price: Potentially catastrophic data loss and financial implications Exfiltrated Data Type: Sensitive corporate and private data
Key Points :
Publicly accessible GenAI development services are exposing sensitive data due to inadequate security measures.…Threat Actor: Clop | Clop Victim: Texas Dow Employees Credit Union | Texas Dow Employees Credit Union Price: N/A Exfiltrated Data Type: Social Security numbers, banking details, driver’s license information
Key Points :
Over 500,000 individuals affected by the breach. The breach was caused by a vulnerability in MOVEit Transfer software (CVE-2023-34362).…Threat Actor: Malicious Actors | malicious actors Victim: Users of Vulnerable Apps | users of vulnerable apps Price: Potential Identity Theft and Financial Fraud Exfiltrated Data Type: Sensitive User Data (geolocation, login credentials, device identifiers)
Key Points :
Symantec’s report highlights the failure of popular mobile apps to protect user data.…Threat Actor: Embargo Group | Embargo Group Victim: American Radio Relay League (ARRL) | American Radio Relay League Price: $1 Million Exfiltrated Data Type: Employee Data
Key Points :
The ARRL confirmed the payment of a $1 million ransom to restore its systems after a ransomware attack in May.…Threat Actor: USDoD | USDoD Victim: National Public Data | National Public Data Price: Not disclosed Exfiltrated Data Type: Personal information, including Social Security Numbers (SSNs), addresses, and phone numbers
Key Points :
In July, one of the largest data breaches occurred, affecting National Public Data (NPD).…Threat Actor: U.S. National Security Agency (NSA) | U.S. National Security Agency Victim: Android Users | Android Users Price: N/A Exfiltrated Data Type: GPS Data, User Activity Data
Key Points :
Smartphones can be covertly used to monitor users, creating highly accurate maps of living spaces.…Threat Actor: Fenice | Fenice Victim: Tencent | Tencent Price: Not disclosed Exfiltrated Data Type: Mobile numbers, email addresses, QQ IDs
Key Points :
1.4 billion records containing personal information were exposed from Tencent’s database. The leaked data includes sensitive information such as mobile numbers, email addresses, and QQ IDs, all stored in plaintext.…Threat Actor: Malicious Actors | malicious actors Victim: Hotel Guests | hotel guests Price: N/A Exfiltrated Data Type: Unauthorized Video Recordings
Key Points :
Xiaomi HyperOS 2.0 is set to launch with a feature to detect hidden cameras on local networks. Hidden cameras pose significant privacy risks in hotels and public places.…Threat Actor: NVIDIA | NVIDIA Victim: Google, Netflix | Google, Netflix Price: Legal and ethical repercussions Exfiltrated Data Type: Videos from various sources
Key Points :
NVIDIA has reportedly used copyrighted videos from platforms like YouTube and Netflix for training AI models. The internal communications reveal that employees were instructed to bypass legal restrictions using virtual machines and open-source tools.…Threat Actor: ByteDance | ByteDance Victim: Millions of children | Millions of children Price: Up to $51,744 per violation per day (potentially billions in total) Exfiltrated Data Type: Personal information including names, ages, email addresses, phone numbers, device and location information, photos, videos, and audio files
Key Points :
The U.S.…Threat Actor: Unknown | unknown Victim: Malaysian Citizens | Malaysian Citizens Price: N/A Exfiltrated Data Type: Personal Information
Key Points :
Malaysia is introducing a new data breach notification system to enhance cybersecurity response. Data users must report personal information breaches immediately, including hacking threats. The initiative aims to maintain public trust in data management practices.…Threat Actor: RADAR | RADAR Victim: Change Healthcare | Change Healthcare Price: $22 million Exfiltrated Data Type: Healthcare data
Key Points :
ALPHV group received a $22 million ransom from Change Healthcare. The data-exfiltrating affiliate was left unpaid and turned to RansomHub for payment.Threat Actor: RADAR | RADAR Victim: Long Island Plastic Surgery (LIPSG) | Long Island Plastic Surgery Price: Reduced ransom (exact amount not specified) Exfiltrated Data Type: Medical data
Key Points :
ALPHV allegedly received a reduced ransom from LIPSG.…Threat Actor: Malicious Actors | malicious actors Victim: Ubiquiti | Ubiquiti Price: N/A Exfiltrated Data Type: Device information and owner details
Key Points :
Over 20,000 Ubiquiti devices, including G4 Instant Cameras, are vulnerable to cyberattacks. Vulnerabilities arise from exposed UDP ports and lack of authentication.…Threat Actor: Hackers | hackers Victim: Governments and large corporations | governments and large corporations Price: Not specified Exfiltrated Data Type: Screen data, encrypted messages, banking credentials
Key Points :
Researchers in Uruguay developed an AI model to eavesdrop on screens via electromagnetic radiation leaks. The method can intercept signals from HDMI cables using an antenna placed outside a building.…Threat Actor: Unknown | unknown Victim: HealthEquity | HealthEquity Price: Not disclosed Exfiltrated Data Type: Personal and health information
Key Points :
4.3 million individuals affected by the data breach. Unauthorized access discovered on March 9, 2024, but confirmed on June 26, 2024. Compromised credentials of a company partner were used to access an unsecured data repository.…Threat Actor: kiberphant0m | kiberphant0m Victim: Bharat Sanchar Nigam Limited (BSNL) | Bharat Sanchar Nigam Limited Price: $5000 Exfiltrated Data Type: IMSI, SIM card numbers, HLR data
Key Points :
The data was offered for sale on Breach Forums, a well-known hacker site. BSNL is India’s state-owned telecommunications company, crucial for communication services across the country.…Threat Actor: Cybercriminals | Cybercriminals Victim: Leidos Holdings Inc. | Leidos Holdings Inc. Price: N/A Exfiltrated Data Type: Internal documents
Key Points :
Leidos is a major IT service provider for the U.S. government, including clients like the Pentagon and NASA. The data leak is linked to a breach of Diligent Corp.’s…Threat Actor: Cybercriminals | cybercriminals Victim: Z-Library Users | Z-Library Users Price: N/A Exfiltrated Data Type: Personal information, passwords, cryptocurrency wallet addresses, payment details
Key Points :
Data breach affected nearly 10 million users of the phishing clone Z-lib. Exposed database contained information on 9,761,948 users collected by cybercriminals.…