Data Breach Today

MARCH 15, 2024

Don't Let the Quest for Data Lead You to Amplify What Criminals Might Be Claiming For the love of humanity, please stop playing into ransomware groups' hands by treating their data leak blogs as reliable sources of information and then using them to build lists of who's amassed the most victims.

Ransomware 318

Ransomware 318

Data Breach Today

FEBRUARY 7, 2024

Ongoing Innovation and Sophistication Drive Unparalleled Profits Attackers wielding ransomware collectively earned over $1 billion last year - breaking previous records.

Ransomware 323

Ransomware Government 323

Data Breach Today

MARCH 18, 2024

The Python Library Flaw Allows Directory Traversal Attacks Hackers who are possibly members of a criminal group affiliated with numerous ransomware-as-a-service operations are exploiting a directory traversal vulnerability in a Python library that allows unauthenticated remote attackers access to sensitive information from server files.

Libraries 283

Libraries Ransomware Access 283

Data Breach Today

SEPTEMBER 21, 2023

US Agency Advisory Sheds Light on the Group's Activities The Snatch ransomware group is targeting a wide range of critical infrastructure sectors, including the defense industrial base, food and agriculture, and information technology sectors, according to a new alert issued by U.S. The group operates on a ransomware-as-a-service model.

Ransomware 297

Ransomware Agriculture 297

Data Breach Today

APRIL 18, 2024

Experts See Groups Shoot Themselves in the Foot by Yet Again Swindling Affiliates Here's ransomware news to celebrate: The number of victims who opt to pay a ransom has dropped to a record low.

Ransomware 263

Ransomware 263

Data Breach Today

FEBRUARY 2, 2024

During the last three months of 2023, an average of 29% of organizations hit by ransomware paid a ransom - a notable shift from what ransomware watchers saw in recent years.

Ransomware 279

Ransomware 279

Data Breach Today

FEBRUARY 12, 2024

Emergency Services Are Suspended as Digital Systems Are Pulled Offline Ransomware operators disrupted emergency healthcare services over the weekend, crippling operations in nearly two dozen hospitals in Romania and France. Ransomware attacks increase the in-hospital mortality rate for already-admitted patients, a recent study concluded.

Ransomware 263

Ransomware 263

Data Breach Today

NOVEMBER 10, 2023

The LockBit Ransomware Operation May Have Exploited Citrix Bleed A ransomware attack affecting the New York financial services subsidiary of the Industrial and Commercial Bank of China resulted in disruptions to the U.S. Close observers of the criminal underground say ransomware-as-a-service group LockBit is responsible.

Ransomware 285

Ransomware Financial Services Marketing 285

Data Breach Today

DECEMBER 11, 2023

Prolific Ransomware Operation Tied to Big Hits Claims 'Everything Will Work Soon' Cybercrime underground chatter suggests ransomware group BlackCat - aka Alphv - is being disrupted by law enforcement.

Ransomware 307

Ransomware 307

Data Breach Today

NOVEMBER 28, 2023

5 Suspects Arrested; Group Tied to Ransomware Attacks Against 1,800 Victims Police have arrested a group of criminals in Ukraine, including their alleged ringleader, who they suspect launched ransomware attacks against organizations across 71 countries, amassing at least 1,800 victims, from which they demanded ransoms collectively worth hundreds of (..)

Ransomware 307

Ransomware 307

Krebs on Security

DECEMBER 19, 2023

Federal Bureau of Investigation (FBI) disclosed today that it infiltrated the world’s second most prolific ransomware gang, a Russia-based criminal group known as ALPHV and BlackCat. BlackCat formed by recruiting operators from several competing or disbanded ransomware organizations — including REvil , BlackMatter and DarkSide.

Ransomware 245

Ransomware Encryption IT Access 245

Data Breach Today

DECEMBER 13, 2023

Oxygen of Publicity' Helps Intimidate Victims and Recruit Affiliates, Experts Warn Seeking to maximize profits no matter the cost, ransomware groups have been bolstering their technical prowess and psychological shakedowns with a fresh strategy: attempting to control the narrative.

Ransomware 311

Ransomware Marketing Security 311

Data Breach Today

JANUARY 30, 2024

Manufacturer Confirms Systems Down, Data on Energy Consumption, Emission Accessed Schneider Electric confirmed a ransomware attack has locked up corporate systems of its Schneider Electric Sustainability Business division and accessed data. The company said it plans to resume operations in two business days after remediation is complete.

Ransomware 290

Ransomware Manufacturing Access IT 290

Data Breach Today

JANUARY 22, 2024

million customers when they breached its systems earlier this month as part of a ransomware attack. Customers 'Sensitive Personal Information' Stolen, Large Mortgage Lender Reports Non-bank mortgage lending giant LoanDepot says hackers stole "sensitive personal information" pertaining to 16.6

Ransomware 299

Ransomware IT 299

Krebs on Security

FEBRUARY 20, 2024

authorities have seized the darknet websites run by LockBit , a prolific and destructive ransomware group that has claimed more than 2,000 victims worldwide and extorted over $120 million in payments. “I don’t think this is an accident—this is how ransomware groups talk to each other,” Stockley said.

Ransomware 264

Ransomware Encryption Insurance Manufacturing 264

Data Breach Today

MARCH 7, 2024

Investment fraud and business email compromise losses dominated, and ransomware attacks spared almost no critical infrastructure sector.

Ransomware 280

Ransomware Manufacturing IT 280

Data Breach Today

JANUARY 24, 2024

report that they recently fell victim to ransomware attacks. Ransomware trackers say known attacks, affecting all sectors, have been surging. US and UK Water Giants Report Network Breaches and Data Leaks, But No Encryption Two major water providers in the U.S.

Ransomware 272

Ransomware Encryption 272

Data Breach Today

APRIL 18, 2024

Christopher Budd on the Rise of Junk Gun Ransomware Variants Since June 2023, 19 junk gun ransomware variants have been discovered on the dark web.

Ransomware 157

Ransomware 157

Data Breach Today

OCTOBER 26, 2023

Ransomware Groups Listed 514 Victims in Total on Their Data Leak Sites Last Month The volume of known ransomware attacks surged last month to record-breaking levels, with groups collectively listing 514 victims on their data-leak sites, security researchers report.

Ransomware 310

Ransomware Security 310

Data Breach Today

FEBRUARY 20, 2024

Even if Group Reboots, Disruption Already Stands as a Success, Experts Say Blue Monday arrived late this year for the LockBit ransomware-as-a-service group, after an international coalition of law enforcement agencies seized swathes of its infrastructure.

Ransomware 281

Ransomware Security IT 281

Data Breach Today

MARCH 5, 2024

Affiliate Claims Administrators Kept All $22 Million Paid by Change Healthcare The administrators of the BlackCat ransomware-as-a-service group claim law enforcement has shut down their operation.

Ransomware 283

Ransomware 283

Data Breach Today

JANUARY 15, 2024

Report to State Regulators Indicates Big Jump in Number of Patients Affected A Mississippi health system is notifying nearly 253,000 individuals that their data was potentially compromised in a "malicious and sophisticated ransomware" attack last August that also took IT systems offline.

Ransomware 285

Ransomware IT 285

Data Breach Today

SEPTEMBER 28, 2023

Also, New Malware Targets New Bitwarden Users This week: Johnson Controls suffers a ransomware attack, the Philippine state health insurance program struggles to recover from a ransomware and Air Canada reports a cyberattack. Also: an APT group uses the American Red Cross as bait and new malware targets would-be users of Bitwarden.

Ransomware 290

Ransomware Insurance 290

Data Breach Today

FEBRUARY 26, 2024

After Operation Cronos, LockBit Leader LockBitSupp's Vows to Continue Hacking Russian-speaking ransomware operation LockBit reestablished a dark web leak site Saturday afternoon, posting a lengthy screed apparently authored by its leader, who vowed not to retreat from the criminal underground world. The FBI had no comment.

Ransomware 261

Ransomware IT 261

Data Breach Today

OCTOBER 13, 2023

Researcher Published Proof-of-Concept Exploit Code 1 Day After Vendor Issued Patch Ransomware-wielding attackers are targeting unpatched versions of FTP software that is widely used by large enterprises, including government and educational organizations.

Ransomware 335

Ransomware Education Government IT 335

Data Breach Today

FEBRUARY 14, 2024

Researchers See Waning Mystique, Use of Ghost Groups, Breach Tricks, Trauma of War While overall ransomware profits might remain high, many of the remaining or rebooted top-tier groups are "really struggling" with scarce talent, trauma from the Russia-Ukraine war and repeated disruptions by law enforcement, say researchers from threat intelligence (..)

Ransomware 271

Ransomware 271

Data Breach Today

FEBRUARY 2, 2024

Today, we examine what happens when ransomware groups get careless, application developers' laissez-faire attitude toward vulnerabilities, and the security woes of a beleaguered crypto exchange.

Ransomware 256

Ransomware Cloud Security 256

Data Breach Today

FEBRUARY 22, 2024

Numerous Impediments Remain, Should Administrators Attempt to Reboot Operation The notorious ransomware-as-a-service group LockBit, disrupted by law enforcement this week, was developing a new version of its crypto-locking malware prior to being disrupted, security researchers report.

Ransomware 258

Ransomware Security IT 258

Data Breach Today

NOVEMBER 9, 2023

Patient Care Still Disrupted and IT Network, EHR System Down Until Mid-December A shared IT services provider and its five Ontario member hospitals say their recovery from a Daixin Team ransomware attack in October could last into December as the group rebuilds its IT network.

Ransomware 290

Ransomware IT 290

Data Breach Today

MARCH 16, 2023

Microsoft Patches Another SmartScreen Signature-Based Vulnerability A financial motivated hacking group has been exploiting a now-patched zero-day vulnerability in the Windows operating system to deliver ransomware. Google Threat Analysis Group attributed the campaign to Magniber ransomware group.

Ransomware 346

Ransomware IT 346

Data Breach Today

AUGUST 22, 2023

More Ransomware Groups Targeting Linux Systems A ransomware campaign by the recently emerged Monti ransomware group is targeting victims with a new Linux variant of its malware. The threat group is the latest in a growing number of ransomware groups finding profit in going after Linux infrastructure.

Ransomware 239

Ransomware IT 239

Data Breach Today

FEBRUARY 1, 2024

FTC Is Latest Agency to Rebuke Fundraising Firm for Lax Security in 2020 Attack The Federal Trade Commission is the latest regulatory agency taking action against fundraising and customer relationship management software provider Blackbaud in the aftermath of a 2020 ransomware incident that compromised the data of tens of thousands of clients and millions (..)

Ransomware 274

Ransomware Security 274

Data Breach Today

DECEMBER 15, 2023

Also: Fraud Trends; Cryptocurrency Regulatory Developments In the latest weekly update, editors at ISMG discuss whether police have seized ransomware group Alphv/BlackCat's data leak site, how fraudsters are adapting their tactics and techniques to exploit advancements in technology, and which cryptocurrency stories shaped the industry this year.

Ransomware 283

Ransomware 283

Data Breach Today

JANUARY 3, 2024

organizations that fell victim to ransomware last year - whether or not they paid a ransom - surged from 220 to 321, and hospital systems, K-12 school districts and post-secondary schools were especially affected, researchers report. Healthcare, School District and University Victim Counts Increase, Research Reports The count of known U.S.

Ransomware 309

Ransomware 309

Data Breach Today

DECEMBER 12, 2023

parliamentary committee investigating ransomware threats recommended a more aggressive stance against threat actors and said the government should consider making incident reporting mandatory and provide government support for public sector victims "to the point of full recovery." Parliamentary Committee Says UK Must Be More Aggressive A U.K.

Ransomware 318

Ransomware IT Government 318