breached
-
Blog
Play ransomware breached 900 victims, including critical orgs
In an update to a joint advisory with CISA and the Australian Cyber Security Centre, the FBI said that the Play ransomware gang had breached roughly 900 organizations as of May 2025, three times the number of victims reported in October 2023. “Since June 2022, the Play (also known as Playcrypt) ransomware group has impacted a wide range of businesses…
Read More » -
Blog
ConnectWise breached in cyberattack linked to nation-state hackers
IT management software firm ConnectWise says a suspected state-sponsored cyberattack breached its environment and impacted a limited number of ScreenConnect customers. “ConnectWise recently learned of suspicious activity within our environment that we believe was tied to a sophisticated nation state actor, which affected a very small number of ScreenConnect customers,” ConnectWise shared in a brief advisory. “We have launched an…
Read More » -
Blog
Idaho county government hacked by ransomware, personal info breached
Gooding County, Idaho officials this week notified an undisclosed number of people about a ransomware attack on the county’s computer network. The county notified victims whose personal info was compromised in the resulting data breach. The notice says the county first detected the cyber attack on March 25, 2025. “On April 4, 2025, as part of its ongoing investigation, the…
Read More » -
Blog
Malware campaign ‘DollyWay’ breached 20,000 WordPress sites
A malware operation dubbed ‘DollyWay’ has been underway since 2016, compromising over 20,000 WordPress sites globally to redirect users to malicious sites. The campaign has evolved significantly in the past eight years, leveraging advanced evasion, re-infection, and monetization strategies. According to GoDaddy researcher Denis Sinegubko, DollyWay has been functioning as a large-scale scam redirection system in its latest version (v3). However, in…
Read More » -
Blog
Ransomware gang says it breached Wisconsin ambulance company
Ransomware group Medusa today claimed responsibility for a February 2025 cyber attack on Bell Ambulance. Bell Ambulance on February 13, 2025 sent a message to employees that said the company was “working to restore IT systems after a cybersecurity event.” “Unfortunately this disruption is greatly impacting your ability to perform your job functions,” says the message, which local reporter Dan…
Read More » -
Blog
Belgium probes if Chinese hackers breached its intelligence service
The Belgian federal prosecutor’s office is investigating whether Chinese hackers were behind a breach of the country’s State Security Service (VSSE). Chinese state-backed attackers reportedly gained access to VSSE’s external email server between 2021 and May 2023, siphoning around 10% of all emails sent and received by the agency’s staff. The compromised server was only used for exchanging emails with…
Read More » -
Blog
Another ransomware gang says it breached IT giant Conduent
Ransomware gang SafePay today claimed responsibility for a January 2025 cyber attack against IT giant Conduent. Conduent suffered an outage at the time that it confirmed on January 22 was the result of a cyber security incident. The outage disrupted electronic money transfers and EBT payments made by its clients, which include half of Fortune 100 companies, for two days.…
Read More » -
Blog
Ghost ransomware breached orgs in 70 countries
CISA and the FBI said attackers deploying Ghost ransomware have breached victims from multiple industry sectors across over 70 countries, including critical infrastructure organizations. Other industries impacted include healthcare, government, education, technology, manufacturing, and numerous small and medium-sized businesses. “Beginning early 2021, Ghost actors began attacking victims whose internet facing services ran outdated versions of software and firmware,” CISA, the…
Read More » -
Blog
Ransomware gang says it breached patient health and payment data at Michigan clinic
Ransomware gang BianLian today claimed responsibility for a November 2024 data breach at St. Clair Orthopaedics and Sports Medicine, which operates a pair of clinics north of Detroit, Michigan. St. Clair notified an undisclosed number of patients that the following data was compromised in the breach: Health insurance data including health plans and policies, insurance companies, member and group ID…
Read More » -
Blog
Florida real estate developer breached by ransomware, SSNs compromised
Florida real estate developer Stock Development this week confirmed it suffered a data breach in 2023 and 2024 that compromised names, Social Security numbers, driver’s license numbers, contact info, and bank account info. Stock says it discovered the breach in March 2024, but that attackers first infiltrated its systems back in April 2023. “On March 2, 2024, we became aware…
Read More »