Singapore-based OrangeTee appears to have suffered a massive hack and data exfiltration by ALTDOS threat actors. “Your highly sophisticated work has exhausted us, both energy and financially,” the firm allegedly wrote to the threat actors on August 6. As this site previously reported, ALTDOS claimed responsibility for a recent attack on OrangeTee in Singapore. OrangeTee…
Category: Breach Incidents
Renner Stores Goes Down After Ransomware Infection
The following is a machine translation of an article by Felipe Payão: Lojas Renner allegedly had its system infected by ransomware this Thursday afternoon (19th). According to images posted on social networks, the company is already being extorted for the amount of US$ 1 billion to release the files, around R$ 5.4 billion at the current…
Exclusive: Attack on HVAC vendor gave threat actor access to Boston Children’s Hospital
If you think about “supply chain attack” and “HVAC,” you will probably immediately think of the headline-making Target breach of 2013. But that wasn’t the only breach via a third-party HVAC vendor. Just this month, several hospitals in Boston may have narrowly escaped potentially serious breaches when their HVAC vendor was hacked and the threat…
Moorfields Eye Hospital investigating cyberattack on Dubai hospital, notifying patients
In one of the latest attacks on medical entities, AvosLocker has claimed that they exfiltrated 60 GB of data from “Moorfields NHS UK & Dubai.” So far, however, there is no evidence that any UK servers were hit — only Dubai ones. Moorfields in a specialty eye hospital that is part of the UK’s National…
k-12 school districts fall prey to Pysa ransomware
—– A DataBreaches.net report by Dissent and Chum1ng0 —– In Part 1 of this series, DataBreaches.net described a number of attacks by Pysa (mespinoza) threat actors on medical entities in the U.S. In Part 2, we look at eight k-12 public school districts in the U.S. who either appear on the threat actors’ dedicated leak…
Greenway Health investigating claims by threat actors of a cyberattack (updated)
Update of August 10: Following publication of our article with a statement from Greenway Health that the attack appeared to be on a former client and not them (but it was under investigation), DataBreaches.net checked the threat actor’s leak site today and found the entire listing is gone. This could mean a number of things,…