The following is a machine translation of an article by Felipe Payão: Lojas Renner allegedly had its system infected by ransomware this Thursday afternoon (19th). According to images posted on social networks, the company is already being extorted for the amount of US$ 1 billion to release the files, around R$ 5.4 billion at the current…
Category: Breach Incidents
Exclusive: Attack on HVAC vendor gave threat actor access to Boston Children’s Hospital
If you think about “supply chain attack” and “HVAC,” you will probably immediately think of the headline-making Target breach of 2013. But that wasn’t the only breach via a third-party HVAC vendor. Just this month, several hospitals in Boston may have narrowly escaped potentially serious breaches when their HVAC vendor was hacked and the threat…
Moorfields Eye Hospital investigating cyberattack on Dubai hospital, notifying patients
In one of the latest attacks on medical entities, AvosLocker has claimed that they exfiltrated 60 GB of data from “Moorfields NHS UK & Dubai.” So far, however, there is no evidence that any UK servers were hit — only Dubai ones. Moorfields in a specialty eye hospital that is part of the UK’s National…
k-12 school districts fall prey to Pysa ransomware
—– A DataBreaches.net report by Dissent and Chum1ng0 —– In Part 1 of this series, DataBreaches.net described a number of attacks by Pysa (mespinoza) threat actors on medical entities in the U.S. In Part 2, we look at eight k-12 public school districts in the U.S. who either appear on the threat actors’ dedicated leak…
Greenway Health investigating claims by threat actors of a cyberattack (updated)
Update of August 10: Following publication of our article with a statement from Greenway Health that the attack appeared to be on a former client and not them (but it was under investigation), DataBreaches.net checked the threat actor’s leak site today and found the entire listing is gone. This could mean a number of things,…
Australian Cyber Security Centre reports multiple victims of LockBit 2.0 ransomware
David Simmons reports: A ransomware attack called LockBit 2.0 has hit multiple organisations across various industry sectors according to the Australian Cyber Security Centre (ACSC), with the government body publishing a ‘medium’ alert for the cybercrime. […] Operators of the platform have appeared on Russian-language cybercrime forums since January 2020 according to ACSC, but the…