IT Governance

APRIL 12, 2023

Welcome to our first quarterly review of security incidents for 2023, in which we take a closer look at the information gathered in our monthly list of data breaches and cyber attacks. Overview IT Governance discovered 310 security incidents between January and March 2023, which accounted for 349,171,305 breached records.

Data breaches 59

Data breaches Ransomware Government Encryption 59

Security Affairs

MAY 1, 2023

Russian TA505 hacking group , aka Evil Corp , has been active since 2014 focusing on Retail and banking sectors. Earlier 2023, Elastic Security Labs observed multiple infections with an interesting attach chain that lead to the execution of the LOBSHOT malware. ” reads the report published by Elastic Security Labs.

Retail 98

Retail Access Education Security 98

Security Affairs

APRIL 6, 2023

Also, the popular Emotet has a prominent place in this listing, as it returns a few months later in December 2022, and is a threat to keep under the radar during 2023. Next, Retail and Health, as the most sectors affected in this season.

Phishing 98

Phishing Data collection Retail Security awareness 98

IT Governance

NOVEMBER 28, 2023

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). Breached records: more than 56 million.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IBM Big Data Hub

FEBRUARY 2, 2024

A 2023 report found that global investment in green or low-carbon energy sources exceeded USD $1 trillion, 1 while advanced data collection tools and artificial intelligence (AI) are helping to better monitor emissions and inform sustainability strategy. Today, sustainability efforts are being shaped by new urgency and new technology.

Education 85

Education Artificial Intelligence Agriculture Blockchain 85

eSecurity Planet

MAY 2, 2024

The 2023 vendor surveys arriving this quarter paint a picture of a cybersecurity landscape under attack, with priority issues affecting deployment, alert response, and exposed vulnerabilities. Sophos: Noted that 43% of all 2023 malware signature updates are for stealers, spyware, and keyloggers often used to steal credentials from devices.

Cybersecurity 108

Cybersecurity Ransomware Passwords Cloud 108

Thales Cloud Protection & Licensing

OCTOBER 16, 2024

In fact, according to the 2024 Thales Data Threat Report , more than 80% of organizations reported at least one breach in the last year, while ransomware attacks grew more frequent, with 28% of organizations reported experiencing an attack in 2024, compared to 22% in 2023. Employees play an integral role in the security of their organization.

Security 62

Security Encryption Data breaches Cybersecurity 62

Data Protection Report

JUNE 21, 2023

The new law has exclusions for Gramm-Leach-Bliley-covered financial institutions, HIPAA-covered covered entities and business associates, non-profits, institutes of higher education, and electric utilities, power generation companies, and retail electric providers.

Privacy 84

Privacy Personal data Sales Retail 84

IBM Big Data Hub

JUNE 26, 2023

Possibilities are growing that include assisting in writing articles, essays or emails; accessing summarized research; generating and brainstorming ideas; dynamic search with personalized recommendations for retail and travel; and explaining complicated topics for education and training.

Retail 63

Retail Compliance Risk Education 63

Thales Cloud Protection & Licensing

MARCH 20, 2023

Self-Sovereign Identities, The Next Step in Privacy-First User Experience divya Tue, 03/21/2023 - 06:10 There is a growing momentum around Self-Sovereign Identities (SSI) with real value to be captured by individuals, countries, and businesses. a bank), a retailer, or an individual’s employer.

Privacy 71

Privacy Blockchain Customer Experience Access 71

Info Source

DECEMBER 8, 2023

For example, organisations in the Legal and Retail sector may see impressive ROIs. The Insurance sector has proven to be resilient during the pandemic as well as the phase of instability in the Finance sector earlier in 2023 caused by high interest rates.

Marketing 40

Marketing Customer Experience Energy and Utilities Digital transformation 40

Info Source

MARCH 31, 2023

Having just seen out the last of the COVID-19 pandemic slowdown with early signs of a healthy recovery in 2021 and 2022, the industry – like many others in the country – is being hamstrung by the power supply crisis in 2023, and for the foreseeable future. These devices are primarily marketed in retail settings or for use in home offices.

Marketing 52

Marketing Sales Agriculture Mining 52

IBM Big Data Hub

APRIL 4, 2024

Across industries like education, retail and government, organizations are choosing private cloud settings to conduct business use cases involving workloads with sensitive information and to comply with data privacy and compliance needs. The popularity of private cloud is growing, primarily driven by the need for greater data security.

Cloud 91

Cloud Digital transformation Access Compliance 91

Reltio

OCTOBER 22, 2020

Reltio’s goal is to provide clarity, educate the market and explain our differentiation. We believe the Segment acquisition by Twilio and the “death of the cookie” heralds an earlier start to the CDP market consolidation that Gartner predicted for 2023.

Personal data 59

Personal data Marketing Customer Experience Retail 59

IT Governance

DECEMBER 20, 2022

Coca-Cola received an overwhelming majority of the votes, beating out the toy maker Mattel, the online education platform Blackboard, the tech firm Danaher and General Electrics’ aviation subsidiary. What can we expect in 2023? Source: Security Affairs.

Security 131

Security Data breaches Ransomware Military 131

IT Governance

DECEMBER 5, 2023

Source (New) Education USA Yes 3,022 Lakeview Healthcare System, LLC Source 1 ; source 2 (New) Healthcare USA Yes 2,495 The Hershey Company Source (New) Manufacturing USA Yes 2,214 Park Bank Source (New) Finance USA Yes 2,081 The Walker School, Inc. Source (New) Education USA Yes 1,493 Kimber Mfg.,

Data Privacy 92

Data Privacy Privacy Manufacturing Retail 92

Security Affairs

NOVEMBER 23, 2023

American retailer and distributor of automotive parts and accessories AutoZone discloses a data breach after a MOVEit attack. AutoZone is an American retailer and distributor of automotive parts and accessories. The company is one of the largest aftermarket automotive parts and accessories retailers in the United States.

Data breaches 139

Data breaches Retail Education Ransomware 139

IT Governance

DECEMBER 11, 2023

Source (New) Insurance USA Yes 105,387 Carter’s | Oshkosh Israel Source (New) Retail Israel Yes >100,000 SodaStream Source (New) Manufacturing Israel Yes >100,000 Amsellem & Weitz Source (New) Legal Israel Yes 100 GB Stanley Steemer International, Inc. Source (New) Retail USA Yes 2,469 Three GreatStar Industrial Co.

Data Privacy 89

Data Privacy Energy and Utilities Privacy Manufacturing 89

The Last Watchdog

JULY 13, 2023

London, July 13, 2023 — Beazley, the leading specialist insurer, today published its latest Risk & Resilience report: Spotlight on: Cyber & Technology Risks 2023. Companies with an annual revenue of US$250,000 to US$999,999 report feeling less prepared to deal with cyber risks in 2023 (76%) than they did in 2022 (70%).

Risk 189

Risk Insurance Energy and Utilities Marketing 189

IT Governance

APRIL 22, 2024

Mobile Guardian, which is used to help parents manage their children’s device usage, was hacked on 19 April, according to the Singaporean Ministry of Education. Mobile Guardian, which is based in the UK, said that its investigations detected unauthorised access to its systems via an administrative account on its management portal.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

IT Governance

DECEMBER 19, 2023

When the Russian Cl0p gang exploited a zero-day SQL injection vulnerability in MOVEit Transfer in May 2023, Delta Dental was one of hundreds of organisations whose data was compromised. GB City of Defiance Source (New) Public USA Yes >390 GB Dafiti Argentina Source (New) Retail Argentina Yes 321.63 Source (New) Finance USA Yes 1.1

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

ForAllSecure

MAY 17, 2023

My healthcare is always going to be one again, it's a vertical healthcare and education, both where you have large amounts of very sensitive information, but not necessarily the budgets to secure it effectively. And we're starting to see more and more. You read about supply chain failures left, right and sideways these days.

Insurance 40

Insurance Privacy Ransomware GDPR 40

IT Governance

FEBRUARY 6, 2024

At the time of writing, it’s unclear whether this is related to a 2023 data breach suffered by the company, as discussed by Have I Been Pwned’s Troy Hunt last March. Publicly disclosed data breaches and cyber attacks: in the spotlight Eye4Fraud database allegedly leaked – 14.9 Data breached: 14,900,000 lines.

Data Privacy 71

Data Privacy Privacy Insurance Security 71

KnowBe4

DECEMBER 6, 2022

The users were able to impersonate an infinite number of entities (such as banks, retail companies and government institutions) for financial gain and substantial losses to victims. 31 CISOs share their security priorities and predictions for 2023: [link]. Gartner analysts reveal 8 cybersecurity predictions for 2023: [link].

Security awareness 105

Security awareness Phishing Risk Insurance 105

IT Governance

JANUARY 23, 2024

million customers’ data stolen VF Corporation – the parent company of many popular clothing brands, including Vans and The North Face – has confirmed in its Form 8-K/A filing to the US Securities and Exchange Commission (an amendment to its original Form 8-K filing ) that its December 2023 cyber attack resulted in the theft of 35.5

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

IT Governance

MARCH 11, 2024

Cybernews’s research team discovered the MongoDB server in December 2023 and contacted Glosbe. Source (New) Retail Italy Yes 436,932 Toner-dumping.de Glosbe did not reply, but the open instance was soon closed. Data breached: 6,935,412 individuals’ data. TB Paysign, Inc. Source (New) Professional services Netherlands Yes 28.3

Data Privacy 70

Data Privacy Privacy Security Data breaches 70

IT Governance

JANUARY 30, 2024

Source (New) Retail USA Yes 2,588,849 Keenan & Associates Source 1 ; source 2 (Update) Insurance USA Yes 1,509,616 AGC Group Source (New) Manufacturing Japan Yes 1.5 Source (New) Retail USA Yes 2,588,849 Keenan & Associates Source 1 ; source 2 (Update) Insurance USA Yes 1,509,616 AGC Group Source (New) Manufacturing Japan Yes 1.5

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

IT Governance

APRIL 9, 2024

TB Allium UPI, UAB, Apotheka, Apotheka Beauty and PetCity Source (New) Manufacturing Estonia Yes 1,190,000 Aero Dynamic Machining, Inc. TB Allium UPI, UAB, Apotheka, Apotheka Beauty and PetCity Source (New) Manufacturing Estonia Yes 1,190,000 Aero Dynamic Machining, Inc. Source (New) Manufacturing USA Yes 1.1

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

IT Governance

FEBRUARY 14, 2024

In November 2023, Northwell Health – the largest health system in New York – confirmed that it was affected by the incident. Source New Defence USA Yes 1,051 Connecticut College Source New Education USA Yes 954 American Alarm & Communications Inc. TB KSA Architecture Source New Construction and real estate USA Yes 1.5

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

JANUARY 9, 2024

million customers’ data compromised Cyber criminals known as dawnofdevil have claimed responsibility for a data breach at Hathaway Cable & Datacom Ltd, one of India’s largest Internet service providers, in December 2023. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 They accessed 41.5

Data Privacy 58

Data Privacy Privacy Data breaches Manufacturing 58

IT Governance

FEBRUARY 21, 2024

Further victims of Harvard Pilgrim Health Care ransomware attack identified Harvard Pilgrim Health Care suffered a ransomware attack in April 2023, which it has been investigating since then. In response to ASA’s apparent refusal to negotiate, ALPHV is threatening to “contact clients, business partners, and competitors” next week.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

JANUARY 3, 2024

We’ll also soon publish our 2023 review of publicly disclosed incidents and records known to be breached across the year, as well as our quarterly report, so keep an eye on our blog. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 95

Data Privacy Insurance Manufacturing Retail 95

KnowBe4

MARCH 7, 2023

CyberheistNews Vol 13 #10 | March 7th, 2023 [Eye Opener] BusinessWeek: The Satellite Hack Everyone Is Finally Talking About This week, Bloomberg News pointed at a brand-new article at BusinessWeek, one of their media properties. This is an excellent article that exposes the vulnerabilities when communications systems are not secure by design.

Phishing 97

Phishing Ransomware Cybersecurity Security awareness 97

IT Governance

APRIL 29, 2024

Source (New) Manufacturing Taiwan Yes 4,715,133 Mustafa Centre Source 1 ; source 2 (Update) Retail Singapore Yes >3,5000,000 TRAXERO Source (New) Software USA Yes 2,634,753 Piping Rock Health Products Source 1 ; source 2 ; source 3 (New) Manufacturing USA Yes 2,103,100 FBCS, Inc. Source 1 ; source 2 (Update) Finance USA Yes 498,686 J.P.

Data Privacy 83

Data Privacy Privacy Manufacturing Security 83

IBM Big Data Hub

JANUARY 9, 2024

For example, a global retail chain might adopt region-specific AI models that are trained on data, such as customer preferences and cultural nuances. IBM developed a suite of custom AI microservices for a retailer, accessible through APIs. This trend signals a move toward more efficient and personalized AI-driven business solutions.

Artificial Intelligence 100

Artificial Intelligence Retail Marketing Risk 100