Simon Sharwood reports: Toyota has admitted to a pair of cyber-attacks. The first hit the European operations of its subsidiary Daihatsu Diesel Company, a Toyota-owned company entity that designs engines. In a statement [PDF] dated May 16th, Daihatsu said it “experienced a problem in accessing its file server in the internal system on 14 May 2021.” “After…
Category: Breach Incidents
WI: Ransomware attack responsible for internet issues at Tigerton schools
Landen Moore reports: A sophisticated ransomware attack limited the Tigerton School District’s ability to access certain systems. Superintendent Kelley Strike provided the update in an email to FOX 11 on Tuesday. The update comes one day after students returned to the classroom following a five-day weekend over a computer network disruption. Read more on Fox11.
TX: Betenbough Homes target of Sodinokibi threat actors
The Sodinokibi (“REvil”) threat actors have added Betenbough Homes to their dark web leak site where they post files from victims who have not paid their extortion demands. In the case of Betenbough, the attack was just added today to REvil’s site, but the breach occurred on May 3. The most recent statement from the…
Update: Rehoboth Mckinley Christian Health Care Services notified 209,000 patients of February ransomware incident
On February 16, DataBreaches.net reported that Conti threat acctors had apparently attacked Rehoboth Mckinley Christian Health Care Services, Inc (RMCHCS) in New Mexico. As it has done in similar attacks, the threat actors dumped a small sample of files as proof. The files include copies of handwritten injury reports and other reports related to named individuals’…
Update: Nocona General Hospital “recently” learned of a breach we reported in early February
On February 4, DataBreaches.net reached out to Nocona General Hospital (NGH) in Texas about an attack claimed by Conti threat actors the previous day. The hospital did not respond. On February 7, this site emailed NGH, writing, in part, “I see that Conti threat actors have dumped files that they claimed they copied and stole…
Despite an alert from NYS DFS, some insurance companies with “instant quote” portals were victimized
On February 16, the NYS Department of Financial Services issued a cybersecurity fraud alert involving public-facing web sites where consumers could request “instant quotes” for car insurance or other products. The alert warned insurers that private information used to prefill requests was being stolen and misused for pandemic unemployment benefits fraud. At the time, they…